Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: fRjAyzuTMRzRMDsIJShGuIfG4rmOCI8tOypx3l6bOgg=
Subject key identifier: 95:30:B4:23:BE:F5:DF:75:62:3F:6B:A2:5B:33:E2:DC:8A:47:97:F8
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 019D397811BF4BAD9925B3340D36EE7126A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 06EB
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: lDO27cI+dSNDe5IBtAXhQ3B0QE/mYw3EbGZ5U3pe7B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:11:bf:4b:ad:99:25:b3:34:0d:36:ee:71:26:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=9530b423bef5df75623f6ba25b33e2dc8a4797f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:97:4f:9c:93:49:2e:ae:43:07:ca:10:6c:
c2:77:63:cd:a2:ae:be:43:59:60:c5:9b:ee:20:fd:
d5:1b:78:f9:87:2f:a0:fc:e1:c7:91:f2:84:6c:a9:
c3:46:40:1e:04:24:02:bd:fd:9d:0b:f8:b6:a1:80:
15:f5:ad:e2:b4:bf:ed:23:58:37:a4:21:1a:b5:2c:
78:b5:83:cc:22:89:7b:78:09:4a:4f:6a:04:c3:97:
a4:d3:2d:76:11:d2:ee:15:c1:f8:4e:86:8d:40:7a:
04:f3:24:d0:85:8c:be:93:6a:10:a8:1f:3d:06:32:
ba:da:50:b1:7d:26:ac:89:d0:a8:6e:fd:2d:53:04:
a2:e3:25:f2:06:d8:76:82:bd:da:17:39:fe:df:d8:
6b:ca:78:a4:03:95:5e:dd:bd:38:72:11:29:58:03:
17:0b:b9:aa:a7:4d:73:69:04:d6:ed:35:d0:cc:af:
da:1a:56:67:28:3c:9d:aa:78:e3:81:7b:ff:55:ba:
02:e1:01:41:41:f2:93:df:84:0b:e1:9d:48:27:c1:
be:5d:42:89:fc:e7:57:e5:af:6f:8d:a7:ce:cb:a5:
12:bc:26:4f:97:48:82:6d:b1:54:bc:e8:58:fc:9c:
52:9d:47:cf:2a:2f:2d:2a:33:e3:e8:f4:05:ab:d1:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:B4:23:BE:F5:DF:75:62:3F:6B:A2:5B:33:E2:DC:8A:47:97:F8
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:19:02:09:3c:39:14:04:dd:c7:28:70:91:4b:72:86:68:d6:
ba:38:33:f2:6e:e4:94:16:13:eb:96:79:af:f9:34:ff:07:c0:
17:c0:e4:bc:9c:04:d2:ed:5e:92:83:47:60:79:ed:ec:08:90:
cd:bb:09:42:e8:10:d1:31:b7:70:95:d2:50:b5:72:1b:62:b0:
90:83:f8:3f:13:1c:4b:f6:5b:7c:6f:02:3d:17:26:76:19:40:
8d:fa:14:c4:11:21:0d:39:ca:4c:0a:50:0a:c3:07:a1:e1:e3:
27:59:34:bb:fd:1d:96:c4:20:9b:28:e8:36:f9:27:33:10:38:
04:4a:26:7b:a1:48:c5:38:d0:fd:0c:8f:b6:37:ce:e1:1e:ad:
d5:c5:66:ad:c8:8e:21:7d:7b:82:97:cf:0c:2d:94:a5:72:ec:
fe:7d:3d:e7:ce:56:d2:b9:8e:a7:79:29:b2:81:77:e7:1c:bc:
92:27:5b:89:c7:d6:f6:84:0a:ef:48:a9:e0:15:4b:d6:90:46:
db:08:78:bd:5c:7b:4a:6a:34:4b:3b:04:95:be:6c:ce:ca:f5:
7e:7e:7e:61:bd:fa:8e:f3:c4:41:15:bc:04:b9:70:b1:ce:a0:
0d:df:ac:d2:43:43:f7:06:0f:15:d0:2a:ca:df:92:0a:1f:18:
c1:3d:5c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:24 2026 by rpki-client