Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
File: VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft (raw, json)
Hash identifier: QSO7SQCHGBNSMiZX3wnwk1KwXRCtoMSrHLRqnYNmq3w=
Subject key identifier: 33:F6:0E:74:4F:DA:85:39:2F:7F:44:CA:DD:7C:9B:0B:CA:7C:7C:B2
Authority key identifier: 54:3C:29:5B:26:40:E5:99:2F:E6:5B:5B:43:42:91:DF:A0:33:17:5F
Certificate issuer: /CN=543c295b2640e5992fe65b5b434291dfa033175f
Certificate serial: 019D3909871C2528E8D0B7668FD3D1AFFB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
Manifest number: 11
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: VDwpWyZA5Zkv5ltbQ0KR36AzF18.crl (hash: UY3e+EKJfuDik6NXtrVIgmowiz1g0byT2+bDY4dpno4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:87:1c:25:28:e8:d0:b7:66:8f:d3:d1:af:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c295b2640e5992fe65b5b434291dfa033175f
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=33f60e744fda85392f7f44cadd7c9b0bca7c7cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:12:85:0a:ab:a6:26:db:a0:f9:94:38:22:
fb:fc:a6:17:2d:dc:56:d8:e9:1c:15:9d:39:5b:8c:
d0:6b:a3:b9:e8:3c:2a:28:cc:a6:12:d7:00:b5:72:
9b:a7:ac:41:ea:04:15:a5:ca:fd:16:0c:51:9e:3f:
e9:9e:64:10:72:90:08:6e:4d:aa:34:aa:44:0c:08:
65:ed:be:24:7c:77:1a:cd:d6:93:ce:6b:98:6f:11:
19:68:2a:19:1b:cc:4e:f9:5e:8b:93:50:4c:23:ae:
02:03:42:9e:e3:ab:d6:34:ad:07:72:36:f9:83:6f:
72:21:44:e5:64:83:e6:a2:10:f6:ed:61:8d:47:ca:
17:54:c8:7e:48:35:49:11:b1:8e:97:a4:34:8f:a3:
86:57:7a:e5:e5:bf:b0:74:d4:fa:cd:21:40:06:93:
f5:8c:28:a4:99:81:04:c9:1e:0a:51:28:aa:16:2d:
3c:a5:37:ea:c1:c9:5c:57:5e:82:1f:b5:dc:92:a9:
58:76:f0:94:00:9b:0c:da:bb:ea:05:26:c4:3b:29:
fd:0d:6c:f9:c2:9d:14:ef:f2:25:5e:a1:9e:23:63:
6f:99:da:c3:af:47:e3:9a:5b:2e:61:43:3c:ad:88:
fd:76:ca:b8:37:4a:39:5b:97:83:17:c1:87:ce:26:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F6:0E:74:4F:DA:85:39:2F:7F:44:CA:DD:7C:9B:0B:CA:7C:7C:B2
X509v3 Authority Key Identifier:
keyid:54:3C:29:5B:26:40:E5:99:2F:E6:5B:5B:43:42:91:DF:A0:33:17:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDwpWyZA5Zkv5ltbQ0KR36AzF18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/361db3-7256-479a-aa93-7daf5e5cb9a8/1/VDwpWyZA5Zkv5ltbQ0KR36AzF18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:90:64:06:01:ca:96:33:b8:23:a1:0d:8d:ff:c4:d9:cb:42:
eb:c8:59:05:93:6f:bb:27:c1:b8:58:94:54:06:82:84:8a:7f:
00:20:d1:15:d1:75:f4:4d:35:ae:68:bd:45:4c:38:83:f0:0a:
1c:eb:50:b4:74:7a:f8:aa:3f:da:18:73:dd:ca:d5:d5:39:f7:
57:eb:83:88:fc:79:43:33:b8:b8:14:da:47:5a:ec:fd:b7:8d:
36:91:ea:c5:02:46:aa:cd:68:85:e4:ce:fc:68:77:f0:0a:a1:
a1:02:9a:ad:fe:f8:9a:70:37:e4:3c:68:3c:b8:c4:1b:2d:3d:
d5:de:f6:b2:a8:ce:a0:eb:e8:12:b2:e7:5e:0d:80:0f:0b:13:
b3:c7:8e:56:26:e6:62:ad:0d:a6:82:2f:c2:b6:17:4a:c1:2e:
e2:d0:fe:d8:da:94:ec:91:36:e7:11:37:9d:13:7b:64:89:0d:
19:97:5e:e9:c2:e9:bd:4e:eb:07:89:d8:c6:65:fa:0e:c2:3e:
87:78:70:a7:b6:63:3c:5c:5f:da:3a:5d:00:11:99:75:61:da:
e5:ea:7e:dc:b7:bf:86:bd:75:39:ed:82:91:b5:f2:34:2c:4d:
d4:e2:f0:5a:1c:3f:aa:b2:4a:59:2f:b3:e5:66:10:d0:1c:5a:
b9:28:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client