Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: 8rkJ9CxL44XbAlD66h2AeskMZ5iTfYaFWhHp/FLDDjo=
Subject key identifier: 73:C8:89:F5:C2:5E:CC:EE:3E:80:8C:FE:8A:75:CA:78:14:15:D4:46
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 019D382E1485F8C64632392B321A7575A53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 0B27
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: HmqocZj2x8aP13eGbjDlwteor70np1CYwxUvu9i/ZEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:14:85:f8:c6:46:32:39:2b:32:1a:75:75:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=73c889f5c25eccee3e808cfe8a75ca781415d446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:d5:69:da:db:6f:a1:52:fb:45:20:f4:5b:
7b:5f:61:bc:1f:34:fd:1d:f0:41:bd:46:d5:1c:ae:
ef:97:55:72:e6:36:d7:58:2a:33:d0:01:f9:46:c3:
93:74:d9:83:4d:a0:b3:e2:4f:b0:d3:ec:33:1b:ea:
d0:f8:0c:8f:88:70:d6:e9:e0:b9:0a:06:f2:17:7f:
2a:7e:97:79:4f:b8:74:bf:70:b9:c3:6b:40:c9:14:
ad:10:f1:59:06:58:ec:0c:54:da:32:1f:be:ee:ed:
26:46:df:1a:bc:b6:89:43:62:fe:f5:5b:13:e5:2b:
68:3c:fe:ac:cf:64:e6:85:e9:f6:12:67:7f:4a:d2:
d7:a1:49:79:bf:86:c5:1a:3b:ad:46:9d:2f:2e:34:
d5:00:80:3f:b5:73:01:1f:76:fc:ad:c8:a2:c4:f4:
42:81:66:47:19:a3:b5:3d:ed:63:df:f2:ed:6f:f8:
e8:05:37:f8:34:0e:5f:1e:82:b8:92:1c:e4:8a:77:
02:be:8d:15:6c:15:47:0c:2f:a2:42:de:f3:42:1d:
ff:22:3c:5d:c8:61:61:c8:ac:e6:32:d8:ad:73:b1:
2d:23:cf:5c:3f:32:fb:3f:b1:df:14:5d:41:ff:a7:
7c:c9:18:7c:f1:db:8c:e3:78:6f:fc:ba:7a:ab:a0:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C8:89:F5:C2:5E:CC:EE:3E:80:8C:FE:8A:75:CA:78:14:15:D4:46
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:82:d8:ba:ea:d0:33:4f:71:5d:43:36:37:94:a8:e2:cf:
da:9c:97:5f:e2:ba:f4:f5:4b:de:73:17:c4:eb:ee:95:98:05:
4a:20:8f:f6:6d:b3:e0:dd:dd:91:a0:a4:93:14:dd:b4:89:4e:
03:69:ee:f3:da:f6:12:9b:c6:b0:51:98:87:44:64:27:6d:cc:
cc:09:9f:c9:2e:c5:23:cc:2a:e0:61:d3:3f:41:c6:85:15:ba:
2b:72:1e:ad:bd:2b:5a:dd:f3:df:ef:0d:67:ad:9a:77:d3:3a:
e5:1b:ef:d4:80:d7:91:03:e4:65:29:50:20:a7:32:42:68:f2:
95:0e:af:5e:65:c1:35:a3:f1:b8:bf:07:98:e8:e1:d0:2b:41:
15:09:b3:1f:dd:96:08:60:09:0c:be:a6:36:34:38:62:e1:1b:
45:1d:67:54:d5:b4:09:2d:29:37:a3:ad:34:5f:48:67:aa:66:
4b:ec:b9:a4:17:21:90:e0:78:b9:82:39:b5:06:1a:59:f6:d8:
a7:50:c2:40:95:e7:80:a5:5b:4a:9d:94:b6:50:51:1b:06:ef:
99:97:b0:6e:da:e0:97:ac:73:d2:2e:af:b0:54:92:2b:84:de:
2e:6b:c6:c4:12:29:55:50:43:ba:e0:06:f0:38:03:33:22:bf:
09:4c:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:33 2026 by rpki-client