Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: /AVEIVRxSHFf3IFGvqlUzYrdpnXprPjNvFLnlJb/UOk=
Subject key identifier: 95:E2:A8:B0:CA:85:84:3D:DC:8F:7C:C4:F9:60:8E:86:6B:55:8B:47
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 019D99D076EC17B029DB74FC68CDCD491A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 16C2
Signing time: Fri 17 Apr 2026 05:01:08 +0000
Manifest this update: Fri 17 Apr 2026 05:01:08 +0000
Manifest next update: Sat 18 Apr 2026 05:01:08 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: yft+4c+yDP5/h42SZxkjJ6GwHO+ZAlQFtD8z2Kuruw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:76:ec:17:b0:29:db:74:fc:68:cd:cd:49:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Apr 17 05:01:08 2026 GMT
Not After : Apr 18 05:01:08 2026 GMT
Subject: CN=95e2a8b0ca85843ddc8f7cc4f9608e866b558b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:38:e4:87:4e:a1:70:27:48:8b:87:5f:2f:96:
57:18:2a:e4:e5:e3:15:74:c2:cc:bc:52:d4:23:12:
e2:7c:79:00:a2:25:d7:52:f8:c0:a5:f4:d7:1c:97:
f2:01:97:ad:8b:af:c1:80:20:51:e3:75:7c:10:b4:
0d:d9:52:f0:90:c2:82:ad:1e:b9:e4:27:bd:43:c0:
63:39:44:52:1a:49:51:e6:5c:78:4f:92:ae:b1:cc:
d1:1a:4e:11:f2:c8:90:61:c8:17:bc:4f:c6:f2:68:
0d:68:54:2e:84:5f:d6:0f:76:af:3a:ff:9a:83:f7:
2f:3f:31:6b:d3:07:34:fb:95:96:ec:5e:07:91:95:
c1:77:5c:69:14:2d:e9:3f:2e:96:a4:6f:7d:93:72:
01:66:eb:8a:bb:b0:09:74:ba:5a:ce:ca:49:9f:48:
04:6f:02:5e:f9:ed:f7:86:04:bb:a7:ef:fd:f5:2b:
8d:c6:de:f9:8b:e9:d0:e6:5c:48:27:52:bf:76:10:
d5:84:5e:6e:38:71:e2:53:d4:a5:0b:d9:73:51:06:
14:36:1f:4b:5d:64:65:71:b0:ed:f6:5b:3f:8d:c7:
27:32:13:f9:77:77:02:43:cf:b6:d3:46:4a:7c:80:
d0:05:89:e6:cb:f5:45:d4:71:7a:85:ff:02:cb:a7:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:A8:B0:CA:85:84:3D:DC:8F:7C:C4:F9:60:8E:86:6B:55:8B:47
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e5:40:81:ea:64:77:8e:2c:fe:2a:49:3b:19:48:12:a5:70:
f2:47:81:71:7d:58:9c:2d:2d:14:94:0c:72:66:ed:ea:c6:a8:
b6:41:bb:22:45:d5:f2:ca:5a:92:5d:ac:3b:76:d7:99:0e:26:
30:13:cd:6a:74:45:ed:c4:e6:be:57:b8:67:cf:27:00:0a:15:
e1:25:be:54:69:db:44:cb:cc:b3:13:c5:a9:c8:a3:ab:78:d1:
1e:4f:32:1b:2c:74:cc:41:1b:3f:62:01:5d:71:6e:86:81:2d:
92:9a:e4:71:44:3a:59:f1:20:7a:5b:c6:2a:a2:fb:d0:99:1b:
58:42:39:c9:4e:ac:22:bd:e7:18:27:23:63:c1:f0:b6:ef:28:
87:82:83:3d:4f:f4:0c:e2:2b:86:7a:61:5c:ba:8f:df:27:da:
bc:55:1e:60:10:4f:6b:3a:bc:4b:25:1c:75:26:2c:0a:96:9c:
32:0c:ec:e8:b3:7b:70:40:f4:c2:6a:fb:03:b5:be:78:7f:d8:
c4:53:71:68:0c:0c:77:22:ab:ba:88:cd:00:18:21:49:fd:ab:
45:9c:ca:4c:02:39:5c:75:be:67:cb:fe:0f:c7:ee:e0:de:40:
b7:2c:97:e3:2c:02:b9:13:65:40:48:ab:ba:9d:14:21:bc:b1:
b0:09:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:10 2026 by rpki-client