Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
File: VuqlFkAibog8wIkopOAmGoAzf-I.mft (raw, json)
Hash identifier: jqax++VzO+sfo3RfkBUG4yOxvF1q/jQRccZhrRRF5c8=
Subject key identifier: D4:16:C1:91:FA:E1:C0:E7:69:1A:E2:85:4F:52:F8:EF:48:14:97:76
Authority key identifier: 56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2
Certificate issuer: /CN=56eaa51640226e883cc08928a4e0261a80337fe2
Certificate serial: 019D38D34FD18AB761678EE771DD4FFB7C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
Manifest number: 0190
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: VuqlFkAibog8wIkopOAmGoAzf-I.crl (hash: XUg4OQsm5tv3Qh1dNStNrr3/aNvJmmdQzuuJ9H2489w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4f:d1:8a:b7:61:67:8e:e7:71:dd:4f:fb:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56eaa51640226e883cc08928a4e0261a80337fe2
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=d416c191fae1c0e7691ae2854f52f8ef48149776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f2:7c:13:5f:c5:dc:c3:d7:2b:48:92:d2:14:
69:db:90:b2:35:a3:b3:c6:26:d7:d5:d0:9b:d0:2c:
e7:be:11:67:5a:18:9b:11:4b:6e:eb:8d:09:63:c9:
9d:a6:f9:03:af:21:f1:58:23:47:be:00:d9:6a:b1:
70:24:f9:ca:94:d0:ee:3f:67:b8:51:6d:aa:9e:03:
98:42:56:90:c4:ba:cd:e8:16:91:b5:5d:45:87:cb:
e1:03:ac:02:af:f5:87:3d:84:6a:0d:fb:a4:47:4d:
80:5e:d1:8e:5c:b5:f0:b7:4d:0e:aa:50:99:7b:c8:
e4:01:17:f3:61:e6:20:93:3f:cd:ae:91:c0:fb:80:
98:88:10:5e:ef:f4:5b:10:e9:1c:7d:bb:2d:35:c9:
02:b9:99:ec:f3:96:59:f0:13:40:34:55:18:d4:c0:
07:a1:1d:63:7b:1e:91:f4:75:2c:11:57:bb:4f:da:
95:e6:60:a3:92:72:6b:7b:70:ea:d3:0e:69:b8:c9:
79:ac:13:3b:5c:13:77:63:33:c7:df:8d:d0:a1:f4:
fd:f0:31:46:40:97:35:8a:e1:94:dc:08:15:f2:40:
e6:d4:1f:c3:ee:cf:0a:26:95:22:32:46:07:2c:03:
1a:d5:97:8c:81:ee:1f:6c:09:9b:a9:e8:4d:1f:9a:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:16:C1:91:FA:E1:C0:E7:69:1A:E2:85:4F:52:F8:EF:48:14:97:76
X509v3 Authority Key Identifier:
keyid:56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:05:d4:31:64:8b:bb:ce:14:da:cb:99:5a:dd:eb:b0:92:d8:
51:4a:10:a0:fa:46:cc:56:fe:25:c6:c4:87:e6:8b:2e:a4:a0:
e9:95:83:f5:37:16:3a:a8:39:63:fc:39:98:96:3a:d9:a5:8a:
4d:d6:98:f3:82:4f:15:71:78:9b:72:62:e8:9f:46:e8:a5:d6:
a4:fc:d6:68:3e:f3:d1:c5:f6:55:f4:a5:0d:11:47:b7:01:4f:
73:dd:27:75:fe:89:18:29:da:60:fa:90:4d:55:b7:4c:3a:b6:
bb:3c:d9:cc:d9:36:24:a0:aa:82:89:d0:d2:d9:fa:52:90:58:
8d:2b:e7:ff:d1:79:64:1d:e1:6e:01:93:07:92:63:ac:4d:ed:
dc:cc:d5:96:e2:6e:01:62:45:fe:bd:fd:ac:b7:a3:6b:72:44:
f8:6e:d4:ed:3a:cc:0d:54:4a:51:e7:62:16:ba:67:90:e8:9d:
32:63:75:29:bb:98:04:c8:96:a9:7f:77:d5:32:3b:2c:b5:15:
80:b6:20:f8:6d:65:c9:be:75:3a:eb:71:8e:b3:34:91:f0:78:
33:74:6d:8d:65:ae:4b:52:03:ef:f5:e2:eb:57:94:c1:50:ce:
a8:a4:ad:8d:e9:a9:45:f9:93:e2:4b:ee:cc:3e:80:59:25:1c:
5c:3c:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:18 2026 by rpki-client