Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File: Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier: d7as8TC0uz010/cqo6tbnew/nqdlKFMz8fIGpLP0kcQ=
Subject key identifier: D0:C9:E0:52:CD:C8:1C:53:F6:E9:98:24:48:08:CA:9F:8F:59:04:82
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer: /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial: 019D311A41965D225FDDA44AB61BAA5DEAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number: 0DD3
Signing time: Fri 27 Mar 2026 21:01:37 +0000
Manifest this update: Fri 27 Mar 2026 21:01:37 +0000
Manifest next update: Sat 28 Mar 2026 21:01:37 +0000
Files and hashes: 1: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: Ezyc+SfsJ6f9DB+PFcBQWElS2sklGifGij+rWZstslE=)
2: yt_W34qE1gacCIWkMgYeBjQGjjM.roa (hash: uA38rCETd1LT3A08agddmLYBBE8doq+uuawTYwQT0bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:1a:41:96:5d:22:5f:dd:a4:4a:b6:1b:aa:5d:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Validity
Not Before: Mar 27 21:01:37 2026 GMT
Not After : Mar 28 21:01:37 2026 GMT
Subject: CN=d0c9e052cdc81c53f6e998244808ca9f8f590482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:d1:62:64:15:13:df:90:1d:d0:a1:26:a8:
9a:52:81:32:d4:22:e2:9c:99:f6:39:d0:83:da:1d:
f0:1b:5b:2d:b7:4b:f6:78:06:04:8b:ba:cc:ce:a9:
60:96:3c:1f:84:76:82:31:e2:0c:81:30:4f:19:12:
78:4f:a0:e2:9c:9f:a2:cc:b4:99:c1:24:b5:65:11:
41:d8:0c:e0:c8:2a:28:07:41:38:c3:c7:45:29:98:
44:f8:2f:4c:c9:a4:3c:2a:e0:04:d4:b2:c2:a1:54:
69:96:1a:5d:4f:60:ae:49:cd:7c:c6:38:85:ec:03:
4d:fe:85:14:f9:96:17:2c:74:28:bb:e3:1e:c7:5e:
be:6b:2a:57:8f:bd:f7:7c:61:a7:04:2c:79:8a:7e:
7c:9e:2d:af:2c:35:b6:0a:2f:4a:20:20:77:81:31:
2d:ea:f1:64:a4:a7:69:fd:b2:f6:4c:ae:86:20:65:
fd:80:b4:7f:d9:31:1e:38:2f:dd:45:77:56:84:4f:
d8:d4:28:1c:10:48:34:ed:d8:5a:15:37:86:93:f7:
dc:0a:79:04:2e:56:0d:1d:99:ac:10:7d:9e:4c:0a:
c4:eb:d0:6a:0c:eb:b8:af:2e:c2:b3:5e:e4:e4:fd:
ae:c2:dd:dc:8f:ea:db:33:33:c2:8d:32:22:38:e4:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:E0:52:CD:C8:1C:53:F6:E9:98:24:48:08:CA:9F:8F:59:04:82
X509v3 Authority Key Identifier:
keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cc:96:4d:53:a8:fc:ee:09:9c:25:f5:28:82:7c:a3:9b:1e:
08:dc:d8:e1:38:af:e7:76:59:01:41:cb:d9:06:ee:25:a9:9f:
0d:dc:24:82:52:4f:24:17:af:25:5c:67:73:07:08:9a:91:6c:
e2:82:57:6a:c1:6f:b1:73:20:66:50:0e:ac:90:ef:9d:34:dc:
91:da:5e:47:fc:97:e2:2e:c5:d3:77:8f:b2:17:c9:69:9c:94:
04:f0:f2:41:c6:90:22:72:2b:db:05:43:9c:51:5c:91:97:b0:
42:97:a5:ee:80:58:da:9a:03:77:70:88:33:de:e6:e1:27:53:
1b:ee:87:f8:a9:00:90:0f:40:be:58:a5:f3:3d:94:0b:3b:8b:
eb:33:39:ca:1f:e7:83:46:64:3d:a3:04:93:57:8f:e8:70:89:
b3:39:5d:ef:bc:57:34:43:4c:73:b1:67:fb:91:fd:cc:2d:bc:
ca:7e:ff:2f:1b:54:ac:e2:cb:a8:89:1e:91:26:59:80:93:db:
fe:11:4b:80:59:0f:d6:a7:9e:47:8e:67:26:17:f0:5a:48:91:
fb:50:a9:b9:e3:01:bf:f9:83:3c:f9:15:b5:51:40:ea:d8:f9:
9d:f9:ae:f6:b8:8e:f2:71:60:83:fd:8f:e8:f8:06:b2:51:6e:
a9:2a:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 06:29:55 2026 by rpki-client