Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier: gzXAT2kDh/PtKemq6jcK6Fcv4J1MrYVOl+oGD31IpV4=
Subject key identifier: 08:82:D0:D1:A4:44:1B:EC:DE:0D:52:37:F9:F6:AF:E6:C4:AA:4B:95
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer: /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial: 019EB9222203F3B618CB39DE27D5AF3C9D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number: 15D1
Signing time: Fri 12 Jun 2026 00:01:22 +0000
Manifest this update: Fri 12 Jun 2026 00:01:22 +0000
Manifest next update: Sat 13 Jun 2026 00:01:22 +0000
Files and hashes: 1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: eNWjtq2ko4TLWqr4ZPvoaasudBLsI8EJLAXEuEryNwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:22:03:f3:b6:18:cb:39:de:27:d5:af:3c:9d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
Validity
Not Before: Jun 12 00:01:22 2026 GMT
Not After : Jun 13 00:01:22 2026 GMT
Subject: CN=0882d0d1a4441becde0d5237f9f6afe6c4aa4b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:4d:ac:1f:39:c7:95:c4:93:6b:01:b3:84:
37:08:42:4b:b4:b2:5c:cb:15:af:6f:ef:a4:18:29:
b4:c3:a4:93:d2:69:a8:95:eb:ae:41:fd:f0:90:c0:
57:aa:2b:2b:93:4b:8e:45:bd:9b:f2:6e:3f:51:17:
63:bf:14:9b:41:5b:37:51:3d:5e:89:34:1e:55:61:
6f:45:f2:74:bc:70:31:43:e5:ca:de:2a:4d:b0:83:
1b:8f:bc:3c:25:41:58:af:7f:d8:54:f2:49:04:5e:
e5:8a:d2:5b:d9:1a:d4:24:dc:b3:25:0f:e3:e5:70:
da:5e:fb:5b:07:84:bf:da:08:a4:8b:96:58:e2:80:
08:e6:3e:cf:96:3c:3d:88:8b:93:21:1d:c7:6f:2f:
55:e7:bd:4e:bd:e6:8e:b7:de:f8:fb:a7:89:c3:f6:
2e:57:fe:6c:69:e2:34:0a:e8:6c:10:f2:d7:50:cf:
67:6a:5f:be:8c:9b:13:6b:c2:59:f9:8b:ad:c5:b9:
49:3e:e9:f0:92:c5:a6:2a:1c:74:91:fe:0c:fd:33:
99:7f:9b:a0:0f:7e:b6:cf:13:52:9b:44:de:8d:be:
46:69:eb:bf:a0:a1:57:6b:9b:6b:52:d9:bf:9a:0c:
e7:7c:ea:f8:7d:71:cb:6e:bb:68:7e:21:1d:9f:ed:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:D0:D1:A4:44:1B:EC:DE:0D:52:37:F9:F6:AF:E6:C4:AA:4B:95
X509v3 Authority Key Identifier:
keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:86:dd:73:78:92:ca:2d:a2:33:b7:3d:c2:8a:4a:e0:61:59:
71:57:de:e8:4f:c0:1f:95:7a:e6:06:0c:75:b5:61:fc:ce:f7:
05:a3:a3:dd:0d:32:ab:42:1b:4b:f0:e8:47:ed:5c:58:a4:40:
db:fc:24:9b:b9:56:57:01:32:b9:97:89:8b:7a:b4:ea:54:e9:
75:17:fc:7e:45:8c:b4:89:82:eb:60:2c:15:ca:76:39:9c:57:
21:79:88:42:55:e2:1c:b9:14:ce:e3:65:e4:e6:9a:a1:fb:9b:
14:ee:98:57:9e:67:1d:fa:e9:66:46:39:d5:d0:73:0c:1f:1e:
14:f0:e2:10:04:6c:c2:e8:a2:71:d5:fe:a2:f1:8a:e7:70:af:
3a:7b:dd:87:4a:b7:a9:57:56:eb:99:4b:89:fa:af:42:6f:2c:
19:35:7e:04:fb:ae:2b:bb:2c:d6:73:b7:7f:a0:2d:41:2a:a1:
1e:d9:a8:64:3a:42:a3:01:a5:3c:89:fc:0b:ad:ce:41:37:7b:
bd:77:1c:7c:a5:6d:c3:e2:e2:04:6b:ab:63:b0:70:3b:03:fe:
41:38:5a:48:36:85:81:25:b5:54:92:47:03:fb:4c:98:28:cc:
51:e3:bd:19:0b:47:a1:d1:b9:8a:f9:c2:a5:d2:81:9c:56:bb:
d2:15:fc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:52 2026 by rpki-client