Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
File: VTmIsu6cEEIX3eFjmCF497TpdGc.mft (raw, json)
Hash identifier: n1tqpAUdBi4pBEXxsZR1o30ihiEEkB95BgWukY4eCtA=
Subject key identifier: 05:3F:D6:4A:B9:D0:17:C9:08:54:B6:56:07:66:46:05:B0:EB:7C:A8
Authority key identifier: 55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67
Certificate issuer: /CN=553988b2ee9c104217dde163982178f7b4e97467
Certificate serial: 019D390A18BFB263173C6786A13A14BE5B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
Manifest number: 01DC
Signing time: Sun 29 Mar 2026 10:00:56 +0000
Manifest this update: Sun 29 Mar 2026 10:00:56 +0000
Manifest next update: Mon 30 Mar 2026 10:00:56 +0000
Files and hashes: 1: VTmIsu6cEEIX3eFjmCF497TpdGc.crl (hash: hYK3dKly5ydajKahsexQa73E6IsTthktOlRHEZntmDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:18:bf:b2:63:17:3c:67:86:a1:3a:14:be:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553988b2ee9c104217dde163982178f7b4e97467
Validity
Not Before: Mar 29 10:00:56 2026 GMT
Not After : Mar 30 10:00:56 2026 GMT
Subject: CN=053fd64ab9d017c90854b65607664605b0eb7ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:65:58:8f:8d:8e:eb:30:8e:c5:4d:3f:a7:
69:19:86:da:eb:7c:71:31:14:92:0e:73:17:7e:aa:
51:4d:84:cc:f7:27:12:27:9a:ac:f1:18:89:1b:1c:
62:cd:a3:f1:ed:52:be:92:49:40:a8:d4:80:bd:d6:
26:7e:4f:76:e5:47:e0:7e:d5:ea:b5:31:c9:4e:77:
82:2f:a2:5e:16:9b:d5:a7:4c:94:cb:10:98:29:e5:
e3:b2:b3:c2:ea:dd:29:26:8b:8e:19:45:d9:3c:fe:
b5:db:eb:02:31:3f:e9:52:08:92:4d:1f:43:64:c6:
42:cc:ec:da:f0:8c:d4:77:7a:fd:a4:2f:96:e2:d0:
95:38:13:e7:2f:0b:2b:cc:e5:c2:d6:45:ad:c6:b6:
28:29:ba:e9:b2:9d:4e:9e:63:b5:83:62:2a:cc:b0:
71:b6:69:1b:9d:03:51:6d:9d:6f:4d:f2:a7:f8:bb:
68:e7:1f:44:bb:fa:b4:bf:48:78:fc:a6:34:19:e1:
d3:75:e1:49:00:99:57:66:40:00:d4:14:92:75:4c:
07:52:0a:fb:82:6c:f4:ec:5a:ae:5e:f4:36:93:55:
82:b7:c7:9b:10:37:c5:9b:6b:e0:03:bd:ff:cb:cb:
a8:0b:d5:9c:50:ac:06:e5:ed:d9:b0:b7:96:88:30:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:D6:4A:B9:D0:17:C9:08:54:B6:56:07:66:46:05:B0:EB:7C:A8
X509v3 Authority Key Identifier:
keyid:55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:73:6e:90:e7:0a:f0:35:9d:d6:9d:08:ae:be:ea:74:2e:87:
8c:cb:17:d7:f6:7f:e2:dd:22:3a:f2:0b:59:6f:12:76:da:36:
1c:8f:cc:b7:be:dc:1d:4f:ce:f9:cc:68:83:95:37:6e:82:2a:
a7:60:dc:4e:82:e0:78:5b:a0:ae:33:6e:a3:18:2c:38:3f:e5:
c0:04:99:eb:70:64:ff:c6:69:39:c5:5f:aa:8c:1b:59:3d:e0:
5b:1c:81:36:87:c8:10:4e:b6:2c:f4:69:79:43:ad:e3:5e:46:
83:68:2f:38:8b:57:b0:29:1d:ee:45:5d:e6:85:a4:a2:13:96:
61:e4:5c:fa:04:91:32:bc:03:ea:68:21:68:30:14:70:45:a4:
9a:0f:c2:26:35:f2:58:d2:62:49:52:8e:46:b3:15:02:90:03:
b4:7f:b3:3b:80:a1:cd:d1:f2:1e:18:28:49:ea:80:ec:62:d1:
ea:fe:34:6e:b8:82:62:57:95:2f:dc:48:de:2c:57:39:ab:4f:
a9:c8:8d:1b:11:e7:6a:6f:1d:e7:da:3e:41:ab:02:f1:c4:b6:
91:45:36:2e:6a:a5:34:52:86:ca:47:9a:91:0f:4b:b9:9d:b6:
13:db:5e:fb:b2:d9:bc:3f:19:31:54:6e:65:33:69:cf:3b:a8:
b8:cf:b4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:52 2026 by rpki-client