Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json)
Hash identifier: clObFgOIN6ArsbnCbsuiEmJ2u270e8TivBFaEX/vg0I=
Subject key identifier: 2B:B6:F6:83:A0:82:C9:E0:41:F4:1F:B2:C2:75:74:F0:88:20:94:E6
Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Certificate serial: 019D3A1D0FBAA1B722441381016C7135CED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
Manifest number: 142A
Signing time: Sun 29 Mar 2026 15:01:16 +0000
Manifest this update: Sun 29 Mar 2026 15:01:16 +0000
Manifest next update: Mon 30 Mar 2026 15:01:16 +0000
Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: lzHE6hp6wTpVTdw+4kzz34Q5yhwIbkqIPIRofL3EVbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:0f:ba:a1:b7:22:44:13:81:01:6c:71:35:ce:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1
Validity
Not Before: Mar 29 15:01:16 2026 GMT
Not After : Mar 30 15:01:16 2026 GMT
Subject: CN=2bb6f683a082c9e041f41fb2c27574f0882094e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:69:c6:fe:db:05:50:0e:10:f5:b3:63:c8:
91:6c:cb:be:31:02:03:d8:ec:8d:db:fd:6b:8e:d2:
50:7a:6c:ce:8a:58:44:4b:28:dd:4f:e7:7b:3d:41:
fe:1f:92:17:9f:88:89:70:15:cb:48:7e:de:1e:b3:
54:53:c2:73:ad:a4:ba:a6:36:98:93:48:e8:6f:58:
f8:66:d0:91:ce:f9:55:c4:9e:1b:dc:4d:af:a1:12:
d1:60:c8:03:1e:47:d1:78:a0:48:08:9e:07:2a:2c:
28:4a:90:c6:bf:38:66:a4:9d:c4:48:54:b7:eb:d1:
0b:21:80:2d:a5:86:47:09:b1:c3:de:20:f7:01:a3:
65:27:34:1b:8c:4d:b0:1c:6a:f7:ea:1c:87:11:42:
85:a5:fd:5e:ce:d8:c1:00:7c:45:80:63:37:51:7c:
cc:ba:34:00:ea:d4:ab:22:df:34:27:b6:a5:08:39:
bb:e5:f7:8f:c4:85:1b:87:02:b0:0d:ef:9e:38:e8:
99:31:8b:41:7f:61:36:f4:2a:cb:73:01:f0:fc:3a:
22:fc:44:59:9a:7a:fc:64:29:a1:4a:a3:98:1b:55:
4b:d8:2e:a5:e8:96:56:53:41:ab:0e:c1:71:b8:6c:
50:dc:d5:07:ce:f2:93:59:43:34:0a:aa:d4:b3:f0:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:F6:83:A0:82:C9:E0:41:F4:1F:B2:C2:75:74:F0:88:20:94:E6
X509v3 Authority Key Identifier:
keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ee:95:7f:c6:08:e4:1d:a3:59:e2:a3:06:9c:bb:45:c2:08:
69:af:d1:f1:78:5b:02:81:7c:1d:81:a7:79:15:6a:b6:b6:2f:
9f:9a:68:61:c7:3a:c6:7f:27:c9:a2:40:e5:cb:5f:00:91:e9:
d7:db:e3:45:ee:0c:82:52:73:93:f9:a7:85:14:f0:78:f0:40:
e0:75:54:a0:72:10:8c:bd:d7:29:49:86:b7:a4:c8:27:50:cf:
3e:62:5a:02:98:48:59:3e:3a:c2:ff:60:ba:98:3e:9a:5e:7b:
47:b2:46:bd:16:db:27:35:09:8d:15:9c:a6:e8:61:a0:56:0a:
f2:2b:35:99:22:21:90:ff:0d:1f:62:49:3f:42:c1:32:99:37:
48:86:cb:1b:95:d0:ac:16:3f:a3:ac:c5:6f:f0:8c:21:0b:86:
b9:79:67:f1:0d:7b:48:5d:02:76:18:67:ad:61:0c:b5:1e:4f:
30:cb:b2:c5:31:5a:74:a1:ff:a5:90:3c:1e:b1:5b:ba:38:8b:
29:20:c4:49:47:38:9a:cf:d7:a7:ca:24:60:eb:c6:34:5f:1b:
be:37:10:f2:8a:57:5f:6e:03:3e:58:a5:c1:b9:d9:8f:28:a5:
1d:7f:a7:86:4f:72:b3:7c:8e:5f:56:aa:73:45:44:ff:6e:74:
cf:67:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:34 2026 by rpki-client