Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: mUtGtI6TIcR6Adv+gwmIf+0noT0fdEtNBiczHc5Xsbs=
Subject key identifier: 90:90:C5:54:B7:C4:E8:81:12:88:79:54:0F:45:7E:9C:E0:C7:8D:80
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 019D38658200249621946C21949289571EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 1254
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: 72VBHElKsSJV4EBersL0BZec4ulaqzl/d9F57ZMwEM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:82:00:24:96:21:94:6c:21:94:92:89:57:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=9090c554b7c4e881128879540f457e9ce0c78d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:e0:f3:23:b5:15:1d:c0:9a:11:4f:10:b2:
ba:45:f4:60:bd:3e:36:11:3a:d1:3e:a8:96:b8:53:
c8:49:d8:85:52:e2:e4:95:7f:b7:44:45:63:4d:64:
bc:df:5f:b2:3c:bd:23:95:cf:8a:13:ee:16:61:f3:
57:82:7d:6b:72:33:f7:5e:7e:7f:05:e2:06:f4:d9:
f5:35:e0:75:2a:30:d7:4a:c3:35:f2:06:bb:b8:7e:
a9:f7:db:04:6a:6a:89:3d:e5:51:a1:de:eb:d9:90:
32:37:da:56:da:25:72:d8:c1:57:c8:80:d8:51:d4:
bb:78:dd:53:17:7b:88:b6:6d:1d:e6:bf:3c:f7:81:
57:0b:81:97:cd:bb:5f:76:98:fa:7a:4b:bb:67:1e:
da:ca:af:3c:82:3b:b6:23:d5:39:ad:40:58:97:90:
71:e2:74:c1:8d:0b:e3:5c:dc:44:5f:c8:92:80:9a:
f1:e9:b0:08:e5:75:74:6e:70:0d:d7:bc:34:69:77:
19:1f:f4:45:ef:b2:27:ab:4b:6b:b0:e5:44:88:41:
2a:d0:06:a5:e8:ab:a7:67:92:67:e8:40:ea:b7:49:
3e:e3:5c:54:06:96:97:0c:a1:21:bc:81:7a:c2:44:
db:3a:eb:c6:bf:89:cc:5f:4c:b1:22:2d:20:9c:2f:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:90:C5:54:B7:C4:E8:81:12:88:79:54:0F:45:7E:9C:E0:C7:8D:80
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6f:58:47:62:f7:0d:7c:d9:16:e0:3c:39:90:8a:f0:17:ca:
d5:48:a8:6f:e2:ee:20:7c:fb:b0:d1:f1:3e:1b:3c:96:ae:8a:
c5:cf:b5:9b:28:77:d3:75:18:58:29:99:d2:c2:6d:86:57:cf:
55:71:2a:34:04:20:ad:3b:9b:33:f6:ed:84:63:f2:d9:9d:86:
85:16:0d:3e:1e:b8:18:66:ec:02:62:8b:95:ae:76:9e:64:ea:
35:97:d5:e5:0d:96:fa:b0:74:a2:fb:37:30:70:19:b7:3c:2d:
a3:76:70:17:5e:e0:c7:61:98:91:b3:d1:5a:7c:70:3a:7f:8f:
77:ed:3e:fa:32:26:e9:99:26:a5:2f:2c:a4:79:0f:7b:10:70:
cc:22:72:2f:a5:0b:a4:6c:dd:d7:07:f6:93:00:c9:5d:fb:dd:
27:38:b8:6c:d9:43:3e:3a:77:61:aa:ef:20:ae:bb:b2:82:ab:
4d:93:61:64:ac:0d:84:a8:c3:f6:26:54:56:b1:53:d9:0a:18:
fa:02:51:37:d4:59:9a:08:63:b2:80:6a:6d:a1:61:50:b9:ff:
6c:fe:34:8a:8f:39:db:ec:4d:88:1d:eb:a4:b9:e6:7c:1e:0c:
a2:e9:9c:6c:1b:0e:f0:db:33:18:11:83:44:1c:7f:12:62:45:
33:08:31:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYIAJJYhlGwhlJKJVx7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWY3ODRiYmM2NjljMWRiNzZhOGJkMWQxZTk5MzkzZDhm
MjE3NmIwHhcNMjYwMzI5MDcwMTA5WhcNMjYwMzMwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg5MDkwYzU1NGI3YzRlODgxMTI4ODc5NTQwZjQ1N2U5Y2UwYzc4ZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOjg8yO1FR3AmhFPELK6RfRgvT42
ETrRPqiWuFPISdiFUuLklX+3REVjTWS831+yPL0jlc+KE+4WYfNXgn1rcjP3Xn5/
BeIG9Nn1NeB1KjDXSsM18ga7uH6p99sEamqJPeVRod7r2ZAyN9pW2iVy2MFXyIDY
UdS7eN1TF3uItm0d5r8894FXC4GXzbtfdpj6eku7Zx7ayq88gju2I9U5rUBYl5Bx
4nTBjQvjXNxEX8iSgJrx6bAI5XV0bnAN17w0aXcZH/RF77Inq0trsOVEiEEq0Aal
6KunZ5Jn6EDqt0k+41xUBpaXDKEhvIF6wkTbOuvGv4nMX0yxIi0gnC8AJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCQxVS3xOiBEoh5VA9Ffpzgx42AMB8GA1UdIwQY
MBaAFFaveEu8Zpwdt2qL0dHpk5PY8hdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAt
NTVlOThlMjVmY2FkLzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAtNTVlOThlMjVmY2Fk
LzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW9YR2L3
DXzZFuA8OZCK8BfK1Uiob+LuIHz7sNHxPhs8lq6Kxc+1myh303UYWCmZ0sJthlfP
VXEqNAQgrTubM/bthGPy2Z2GhRYNPh64GGbsAmKLla52nmTqNZfV5Q2W+rB0ovs3
MHAZtzwto3ZwF17gx2GYkbPRWnxwOn+Pd+0++jIm6ZkmpS8spHkPexBwzCJyL6UL
pGzd1wf2kwDJXfvdJzi4bNlDPjp3YarvIK67soKrTZNhZKwNhKjD9iZUVrFT2QoY
+gJRN9RZmghjsoBqbaFhULn/bP40io852+xNiB3rpLnmfB4MoumcbBsO8NszGBGD
RBx/EmJFMwgxzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:39 2026 by rpki-client