Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: Z4DEqLOF1AZX8h1eB+OS8vBSiLsqPlARSVUMLQ9ahBQ=
Subject key identifier: B0:8E:24:F8:4D:6D:5F:AB:A4:6D:3F:08:FF:90:30:57:EB:24:D4:E9
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 019FA116FACFE617327697B3192E9CB4D3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 0EB5
Signing time: Mon 27 Jul 2026 01:01:05 +0000
Manifest this update: Mon 27 Jul 2026 01:01:05 +0000
Manifest next update: Tue 28 Jul 2026 01:01:05 +0000
Files and hashes: 1: b4AFCTNKeJ0xNYdoOFidnd_6XrQ.roa (hash: +W/PCB4vB7d4sz4grk0af5C3/JM5opRiYyqa2mG79zM=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: u2RTV3rv7cr/56UPJHc4WpB2n7IrFpLW2TgYCQWc45g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:fa:cf:e6:17:32:76:97:b3:19:2e:9c:b4:d3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Jul 27 01:01:05 2026 GMT
Not After : Jul 28 01:01:05 2026 GMT
Subject: CN=b08e24f84d6d5faba46d3f08ff903057eb24d4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:46:23:8f:71:39:d4:a8:c7:13:7a:fc:da:
0b:75:df:15:15:cf:e9:f6:07:ce:d2:7a:89:64:0c:
46:bc:65:dc:de:51:64:c6:98:21:da:e6:b6:68:30:
7c:2b:6f:7a:a1:71:38:cb:94:e6:82:96:0e:bd:6c:
6a:27:2a:c3:47:92:2c:1a:65:7b:16:27:28:02:7a:
fc:37:21:45:b4:cb:29:8f:7f:d4:15:af:76:5e:4b:
f5:71:96:64:4b:e7:31:13:f6:24:85:90:6c:44:ea:
86:27:3b:18:ce:b8:50:30:ea:07:db:35:ad:68:e7:
f6:da:60:85:12:d8:0e:e9:6e:70:66:62:99:8a:d1:
b3:11:db:ba:ca:46:60:63:07:6b:3e:fb:bb:97:d1:
9d:04:aa:36:05:4d:82:95:c3:ee:82:67:d6:50:ce:
97:bb:0e:23:e2:36:65:ca:01:33:2e:25:69:79:a9:
8b:33:12:44:bc:a6:ce:8a:34:ef:d7:47:c1:f1:12:
4e:c7:45:6d:28:f1:d9:02:d7:95:48:e9:08:5a:1c:
09:b0:0c:1b:ee:bf:89:95:4a:38:1f:3b:52:b8:08:
19:2e:b5:4a:96:f0:a1:99:17:fb:c6:87:e1:6f:25:
2e:fe:ce:37:ef:3f:22:b8:18:b9:ce:54:1f:5a:c0:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:24:F8:4D:6D:5F:AB:A4:6D:3F:08:FF:90:30:57:EB:24:D4:E9
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:7b:33:ed:e9:de:47:68:5e:44:a2:70:59:9a:ce:93:82:f4:
4f:04:dd:c9:ae:a8:c7:0f:c6:17:6b:59:be:3a:45:8d:5c:44:
b0:42:2c:23:b4:9e:d2:2f:fc:a5:4d:c0:91:d9:87:ed:ac:fc:
ea:f3:09:55:94:3d:9b:2a:20:59:07:37:e9:af:48:85:ca:dc:
b4:05:bd:03:1f:b1:52:f3:b5:95:68:ba:74:96:da:ff:ea:b3:
5b:ba:c4:88:b3:53:64:24:7d:0c:ad:df:b1:6b:55:5f:41:89:
5a:9d:09:72:45:d8:19:78:50:20:be:d0:0e:7d:21:d6:b2:a7:
ee:46:14:44:04:80:2a:bb:99:00:54:63:cf:7e:95:f7:2a:3f:
32:90:31:fc:d8:ae:82:d0:e1:9e:bc:1a:ab:27:29:93:1e:26:
84:97:d6:67:19:68:e1:fd:6b:2b:a4:76:2f:62:13:c5:1e:d7:
66:d4:2a:ff:45:cc:9b:26:cf:12:a2:7f:21:9e:1d:07:2f:93:
d9:2d:d9:0c:58:2b:b1:5a:9e:cb:79:67:89:4f:d9:b4:ce:d7:
c3:48:56:11:b7:3a:2b:9f:15:ba:1d:01:6e:8c:b9:6b:98:a4:
2c:c2:15:e2:57:70:22:19:6c:09:7a:8e:ff:4a:9a:73:3c:e0:
5c:98:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:36 2026 by rpki-client