Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: p0DFncJHFFnZqKSkSZpgpNCK2a8QS+xM0K3iX/KLDP8=
Subject key identifier: 80:F3:E2:7C:BC:A1:AF:47:F0:6B:A0:62:1A:00:37:F5:84:5B:5F:D1
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 019D38664BA044D7716D8B2E30EC8FA9FF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 13B7
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: ZAKr9zn3WseklXEe+HoPX6McNBpCkXP32R2zdQ6/0RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4b:a0:44:d7:71:6d:8b:2e:30:ec:8f:a9:ff:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=80f3e27cbca1af47f06ba0621a0037f5845b5fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:33:95:1b:23:8a:f5:98:57:da:03:86:42:
ff:7d:fd:1a:c3:c2:2a:df:40:95:81:e8:10:48:4c:
1b:97:a3:4b:56:6a:53:ef:13:47:0a:5a:ac:74:47:
33:4f:6a:5f:f5:8f:51:30:d6:fa:bc:91:58:35:c5:
b9:e9:f8:9e:cd:80:31:36:7d:83:77:60:fb:5d:32:
31:e1:bb:ff:48:6d:c4:1d:74:24:82:52:50:ab:dd:
f5:68:78:08:f2:f1:a0:51:9d:d6:43:d8:13:e1:2b:
f6:19:37:35:b4:7a:34:b1:35:7a:7e:ea:95:3e:f2:
0c:3f:cc:3c:26:3e:a6:12:19:55:f3:52:e3:94:85:
95:a2:f6:4b:04:05:dd:66:2a:08:1f:03:79:2f:15:
d0:b0:f0:d9:91:ec:18:42:ff:5c:49:25:c4:da:5e:
eb:42:f7:df:ff:9b:ad:07:2f:b6:22:3e:b5:42:6b:
cb:5d:e9:80:05:f1:75:a2:5b:75:ba:eb:6d:e0:8d:
0a:9b:c2:ee:e0:69:55:25:d3:9b:e9:fe:e3:e0:71:
89:34:dd:c3:78:13:85:5f:4a:1a:a2:41:e4:b8:10:
4d:a8:d3:13:73:39:6e:31:86:b7:06:f2:a5:cd:de:
d2:06:b0:77:f3:75:44:ce:cf:e7:9d:0f:5c:c7:30:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F3:E2:7C:BC:A1:AF:47:F0:6B:A0:62:1A:00:37:F5:84:5B:5F:D1
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:59:c2:b0:d8:21:1b:11:85:56:b1:04:91:72:11:e2:a3:32:
0c:8c:c0:a3:3e:ce:21:c3:97:e6:3b:0c:59:07:b1:c5:fb:6e:
4c:63:17:82:61:3e:44:e5:2c:05:a1:73:f1:e8:d7:24:25:05:
bd:dc:53:ef:c1:32:b4:58:ad:7f:9d:9d:73:13:7b:e4:03:78:
fe:f9:3e:ff:38:c0:46:a8:ed:6a:19:bd:d9:9c:78:46:ed:2b:
21:2f:d7:40:96:98:7a:74:4d:85:0b:86:7c:46:89:5b:b6:eb:
6d:f3:33:83:e7:d4:cd:69:c7:19:8a:f0:58:5b:f3:5a:70:fe:
43:a8:17:55:f6:60:74:e7:57:5a:62:af:23:4a:c8:bb:1f:68:
bd:34:0c:98:f4:87:d7:1c:97:3e:d0:bb:84:2e:75:5f:e1:06:
d3:7c:d9:38:cc:c1:40:46:48:ad:1d:38:ad:f1:c8:e7:11:38:
12:d6:ed:49:b2:f1:4d:41:39:7b:35:22:c0:e5:69:4c:ae:53:
e2:6e:b8:19:fd:54:f9:0d:58:94:da:07:8a:ab:cc:f4:69:41:
80:d7:6a:f5:7e:6d:43:d5:cf:63:2f:fe:b9:cd:dc:d6:cd:70:
ad:e1:41:e3:15:82:70:c7:a6:60:41:e0:07:db:7c:43:2e:ac:
22:10:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client