Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json)
Hash identifier: YGYVHLpMv+rcfDzwJ5+pMYrv7CojPsdnqcusba5dzwM=
Subject key identifier: 49:6A:69:F8:EA:D4:D6:51:AB:C5:57:E6:98:DB:B9:B1:12:9E:7E:4A
Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Certificate serial: 019D427AFBD65A0BB733F5A6BFC778F4543D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
Manifest number: 0D0A
Signing time: Tue 31 Mar 2026 06:00:49 +0000
Manifest this update: Tue 31 Mar 2026 06:00:49 +0000
Manifest next update: Wed 01 Apr 2026 06:00:49 +0000
Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: pFfqnmx7GpLxy/3zazLwvZXapqzTZQzyNV9MFDXsS8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:7a:fb:d6:5a:0b:b7:33:f5:a6:bf:c7:78:f4:54:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Validity
Not Before: Mar 31 06:00:49 2026 GMT
Not After : Apr 1 06:00:49 2026 GMT
Subject: CN=496a69f8ead4d651abc557e698dbb9b1129e7e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:56:44:85:84:2b:ee:d3:85:9c:9d:63:b5:
c6:7f:ed:54:d6:37:5f:99:34:01:53:81:13:70:c4:
b3:90:f6:2c:d6:f7:07:ba:bf:37:e9:05:02:e6:5c:
7e:13:c6:b1:40:9a:b0:80:b1:09:95:a3:08:c1:a5:
a4:e0:12:ab:82:12:38:ef:3a:16:22:09:17:ef:8a:
60:14:ec:0f:97:40:62:2f:0c:21:d2:54:68:1c:f4:
14:83:21:07:6d:c6:6a:8b:b8:08:bc:fd:61:b2:26:
89:e5:3b:03:57:e3:a5:93:d1:ef:95:b0:ff:eb:ce:
35:cd:42:10:b6:20:62:f6:3e:32:ce:c8:08:f2:18:
1f:f6:8c:51:59:5c:1b:dc:7e:54:1e:52:83:57:64:
cf:13:6e:9a:8f:66:5f:4b:40:9f:99:ba:ee:03:f2:
98:a9:5e:f6:34:25:46:36:a1:27:e0:27:82:08:a8:
ed:5e:5a:25:d4:ea:de:44:1d:f7:7d:d3:e3:74:4b:
ab:85:35:6a:67:d8:5d:4a:81:57:4e:7f:50:d5:a8:
f9:c5:ad:45:76:f0:70:fe:8c:38:b0:8a:39:71:66:
ad:91:fd:50:c3:ae:cf:58:36:46:ba:7a:15:03:70:
fa:2d:8c:24:90:6f:fe:a8:1d:af:b8:4c:24:a9:35:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:69:F8:EA:D4:D6:51:AB:C5:57:E6:98:DB:B9:B1:12:9E:7E:4A
X509v3 Authority Key Identifier:
keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a4:35:a5:93:ec:fe:94:b1:38:3d:e8:c3:14:a1:ba:bf:e1:
ae:fb:4c:36:4c:5c:da:89:85:59:c0:a7:1c:cb:b4:c3:be:da:
c7:72:a7:30:70:b5:d3:28:31:3e:8c:72:5a:4a:d9:77:8d:ba:
76:02:9b:60:e8:c8:f0:41:e4:16:30:95:3d:91:29:f3:e2:9c:
d5:c1:36:b4:fe:49:59:7d:80:ca:ee:82:e8:9a:d6:4e:98:27:
5b:36:1d:97:81:d5:1b:e4:04:14:e0:46:00:cf:03:91:16:8e:
a2:0b:1a:15:93:8f:fb:76:4c:95:ae:06:ce:1c:9b:a2:03:82:
ed:9f:1e:e6:06:b6:c8:d2:04:c5:67:9e:23:6a:f0:27:9d:7c:
e6:05:ba:6f:28:02:24:3d:5d:35:91:41:a0:3c:99:a6:e5:29:
dc:a6:f9:b7:b6:17:dd:e7:83:78:8c:aa:92:28:eb:01:32:33:
4d:ee:2a:ce:a5:a1:a8:44:19:2c:21:74:cb:56:4f:a2:35:e2:
b9:76:92:e6:ca:29:78:a2:ca:38:ac:8d:99:a4:de:a8:50:9c:
db:c1:43:bd:84:dc:a3:82:da:0e:95:9a:38:eb:5c:ce:57:92:
03:a6:4b:bc:ad:21:6b:e6:05:f4:56:d8:df:7e:f1:ef:c2:57:
70:10:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:15:40 2026 by rpki-client