Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File: vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier: +npKQ54a6KA2e6hiTBXVY5FECRcD0q3be9WHjfCpC5Y=
Subject key identifier: A4:0D:6B:AF:6D:CA:70:33:B9:2F:9C:72:87:12:7B:3F:F4:90:05:71
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer: /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial: 019D3A53805C586F78BEA69F39B6C0F96E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number: 09D4
Signing time: Sun 29 Mar 2026 16:00:43 +0000
Manifest this update: Sun 29 Mar 2026 16:00:43 +0000
Manifest next update: Mon 30 Mar 2026 16:00:43 +0000
Files and hashes: 1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: xI0TuR9IwCZuraa7ACDZIr8KEgN1l6X1dAQesCgb4qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:80:5c:58:6f:78:be:a6:9f:39:b6:c0:f9:6e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
Validity
Not Before: Mar 29 16:00:43 2026 GMT
Not After : Mar 30 16:00:43 2026 GMT
Subject: CN=a40d6baf6dca7033b92f9c7287127b3ff4900571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:15:ca:90:fe:62:ed:a1:c0:66:d8:62:82:
a6:67:b6:bd:79:c4:25:4b:e2:33:f5:87:09:52:4d:
b5:5d:c9:1f:ef:5c:c5:a1:51:0f:8c:8f:c4:9c:38:
ea:f9:76:6b:06:2e:7b:f0:24:83:05:e6:c3:9c:18:
b8:4c:29:0c:cb:74:12:c2:4f:1e:c4:01:d1:b2:6b:
d5:2d:54:ed:bf:66:2f:9d:71:9a:ee:8e:ee:81:5f:
6a:53:84:ca:3d:ee:77:9f:ed:9c:45:5f:0f:2d:c6:
12:3d:c6:46:ea:f9:e2:07:30:87:86:53:0b:ee:10:
44:c0:64:45:6b:51:f6:25:55:27:66:11:96:12:10:
9e:89:d7:7a:9a:00:7a:ab:b7:a7:d3:45:36:cf:e0:
d5:7d:47:09:e0:35:69:59:71:3b:4d:fa:d6:17:a0:
0b:f4:5e:be:97:37:0b:6b:54:f7:a2:cb:46:39:2e:
f7:7c:d4:cd:2d:37:1c:70:d1:39:7f:b3:f7:0b:a0:
82:af:74:68:e2:49:ca:1c:e4:53:06:8b:64:87:88:
d0:cd:56:f5:76:c0:f4:d3:2e:52:34:97:e2:f5:76:
e5:d1:07:85:04:7d:c5:16:ff:1f:79:93:b8:21:04:
5c:33:37:f1:8f:65:af:14:45:3b:6f:9e:54:74:7a:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0D:6B:AF:6D:CA:70:33:B9:2F:9C:72:87:12:7B:3F:F4:90:05:71
X509v3 Authority Key Identifier:
keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:82:7d:7f:cd:4f:a5:8c:ef:37:ac:46:14:5f:ac:a6:48:7b:
7c:af:b5:22:c1:01:56:c1:d8:5e:e8:89:80:21:23:cc:6d:9b:
7a:27:b7:c5:38:08:fb:e4:4c:75:9d:0a:1d:38:9b:dd:ac:22:
bb:f1:f0:d2:45:55:af:68:d7:4a:f6:90:77:32:4c:43:ad:50:
85:47:29:77:1f:c9:58:66:be:d5:34:49:70:4f:2c:7e:1b:b8:
0a:98:2b:15:ed:9e:42:ce:ef:a2:a9:53:22:6c:f2:f7:15:a9:
31:c5:ab:7a:30:63:c1:04:c0:16:f7:dd:87:83:ce:93:b3:78:
05:e0:29:61:4f:ba:d0:c0:d4:27:89:cb:cf:f8:48:98:e1:1d:
43:d3:fd:38:16:38:91:3f:58:cc:66:43:a6:f8:c2:45:df:42:
1c:ae:1d:f2:0e:23:71:d5:f5:58:a1:9a:87:37:05:59:a6:f3:
13:bc:ed:83:82:4e:9f:3e:41:52:75:c9:8f:d2:e4:1f:4b:aa:
9a:10:11:b0:4b:52:da:ba:84:2e:98:94:c6:42:c8:4e:6b:72:
05:a2:07:64:66:36:34:15:77:e1:5d:7d:09:8e:62:7a:70:a5:
84:ca:5f:37:2a:92:0b:a4:b1:0a:24:d0:c7:fb:2c:b4:3b:42:
2b:1a:6e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:32 2026 by rpki-client