Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: tC9VwLmCjR0jkrY6tnJ6IJbcNjnBp9plbR3depcc1rQ=
Subject key identifier: 9B:65:7B:C0:D1:4C:A1:E9:97:45:B2:CE:30:62:18:26:4D:F4:89:3A
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 019D386672DDBC2F8074711D6A4D2B0D011F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:02:11 +0000
Manifest this update: Sun 29 Mar 2026 07:02:11 +0000
Manifest next update: Mon 30 Mar 2026 07:02:11 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: KuCl0NqAE8ws2dF/ecUr1R7Dgb3bPc7Qd5eMoe0q2dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:72:dd:bc:2f:80:74:71:1d:6a:4d:2b:0d:01:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Mar 29 07:02:11 2026 GMT
Not After : Mar 30 07:02:11 2026 GMT
Subject: CN=9b657bc0d14ca1e99745b2ce306218264df4893a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:33:8e:6e:0e:cb:30:64:45:97:5a:d3:5f:
ba:87:d7:43:1b:9d:af:c6:96:44:19:d3:8b:ae:4c:
79:d3:ab:18:fc:c6:68:11:05:3f:3d:2d:ea:a7:19:
72:2c:18:94:c4:bc:6c:81:44:31:14:a6:bc:34:aa:
03:61:41:8c:88:c0:23:03:83:b3:f8:1b:82:95:df:
ee:53:54:d8:b9:c5:4b:9d:eb:ab:08:59:b2:fb:e9:
05:b8:34:6e:03:9d:96:36:a3:22:76:33:89:21:94:
5c:0c:b4:3f:ce:53:2c:d8:16:51:0a:37:c0:7a:ec:
d3:ad:f0:bf:fe:37:2b:82:7a:44:d4:71:bc:ee:a4:
d6:6a:dd:b4:3b:1b:e5:3a:36:4c:a9:b0:2a:31:d7:
67:5b:0b:9e:c0:f8:2e:80:15:2d:7c:99:3a:78:e6:
cd:6c:3e:ce:cb:dd:54:11:bf:7f:e1:0e:22:a8:00:
29:3c:ee:3b:a6:da:b2:4d:6e:d2:e5:1e:1b:19:3c:
75:16:34:ee:6e:1f:9f:77:71:52:25:03:17:c6:96:
5d:ab:03:5f:8b:78:2f:c6:0f:f2:5d:4f:bf:18:4b:
04:e9:ba:ac:9f:b3:4c:6c:17:6a:84:e7:29:5d:ef:
34:4a:95:be:d1:28:2b:12:76:41:8b:46:ba:b1:d2:
5d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:7B:C0:D1:4C:A1:E9:97:45:B2:CE:30:62:18:26:4D:F4:89:3A
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:df:7b:ef:2c:92:1b:8b:6f:5a:3e:41:3d:86:15:c1:fd:39:
28:49:04:e5:1f:1b:52:30:22:fa:84:5d:c6:b4:9b:f4:00:3c:
e8:1f:1f:59:d4:16:16:d1:1b:19:54:9b:cf:5d:7a:fa:d4:d9:
d1:78:a4:40:63:75:3c:20:5c:63:46:2a:2b:7a:4f:e3:d6:43:
d3:4d:59:42:0c:25:e5:45:64:c8:a1:ef:29:a9:c6:4d:7a:69:
bb:5b:80:7c:b1:52:09:20:15:4c:2e:0c:1a:10:36:5a:e2:99:
ba:55:3f:e8:bb:ee:87:6f:53:74:ad:43:63:30:90:e6:5e:01:
87:e2:63:e1:69:fd:73:5c:c1:3f:d3:08:3a:c0:4d:17:e0:df:
ff:1f:b1:73:0e:7a:26:e8:d4:2d:cc:33:74:2c:2b:4b:15:db:
45:80:68:d9:34:6a:a7:fe:a6:39:56:5f:ab:09:66:bd:e5:51:
bf:05:8c:58:6e:7a:f6:a7:20:29:59:7f:9e:36:b3:d4:cc:60:
3c:b2:72:cd:2c:c5:59:6b:32:5a:ed:8b:3d:25:0d:a4:4d:57:
e2:fe:87:e3:e5:f8:39:21:c2:ae:87:79:b4:3c:82:68:4e:7a:
b7:fb:70:ca:e8:30:c1:bb:18:58:b5:bb:27:ae:e8:54:df:68:
78:8b:02:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZnLdvC+AdHEdak0rDQEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFjYjlhYmJiNGNhOWUwODY2MmE5M2QyZTczMmU3MGIw
NmMyZjIwHhcNMjYwMzI5MDcwMjExWhcNMjYwMzMwMDcwMjExWjAzMTEwLwYDVQQD
Eyg5YjY1N2JjMGQxNGNhMWU5OTc0NWIyY2UzMDYyMTgyNjRkZjQ4OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4gzjm4OyzBkRZda01+6h9dDG52v
xpZEGdOLrkx506sY/MZoEQU/PS3qpxlyLBiUxLxsgUQxFKa8NKoDYUGMiMAjA4Oz
+BuCld/uU1TYucVLneurCFmy++kFuDRuA52WNqMidjOJIZRcDLQ/zlMs2BZRCjfA
euzTrfC//jcrgnpE1HG87qTWat20OxvlOjZMqbAqMddnWwuewPgugBUtfJk6eObN
bD7Oy91UEb9/4Q4iqAApPO47ptqyTW7S5R4bGTx1FjTubh+fd3FSJQMXxpZdqwNf
i3gvxg/yXU+/GEsE6bqsn7NMbBdqhOcpXe80SpW+0SgrEnZBi0a6sdJd9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtle8DRTKHpl0WyzjBiGCZN9Ik6MB8GA1UdIwQY
MBaAFFX6y5q7tMqeCGYqk9LnMucLBsLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMt
MmVjY2ZjZTExMmRkLzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lMjMzMzgtMWYzZi00YWNkLWE4OGMtMmVjY2ZjZTExMmRk
LzEvVmZyTG1ydTB5cDRJWmlxVDB1Y3k1d3NHd3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed977yyS
G4tvWj5BPYYVwf05KEkE5R8bUjAi+oRdxrSb9AA86B8fWdQWFtEbGVSbz116+tTZ
0XikQGN1PCBcY0YqK3pP49ZD001ZQgwl5UVkyKHvKanGTXppu1uAfLFSCSAVTC4M
GhA2WuKZulU/6Lvuh29TdK1DYzCQ5l4Bh+Jj4Wn9c1zBP9MIOsBNF+Df/x+xcw56
JujULcwzdCwrSxXbRYBo2TRqp/6mOVZfqwlmveVRvwWMWG569qcgKVl/njaz1Mxg
PLJyzSzFWWsyWu2LPSUNpE1X4v6H4+X4OSHCrod5tDyCaE56t/twyugwwbsYWLW7
J67oVN9oeIsCZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:13 2026 by rpki-client