Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier: 6N0tTam52R13x3p833pjRougLWTBnMjtnwA/5EgfE4Q=
Subject key identifier: DF:84:F3:A5:C0:94:8A:B6:FA:FC:DD:BE:19:65:9C:D9:E1:22:E3:9F
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial: 019D98F50B3F1DBD5E0C48BC0C5563BD6D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number: 13A8
Signing time: Fri 17 Apr 2026 01:01:29 +0000
Manifest this update: Fri 17 Apr 2026 01:01:29 +0000
Manifest next update: Sat 18 Apr 2026 01:01:29 +0000
Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: lXHbEXbdiZPAG2A7m6UJWWQnK7BmJhlKPwbaRtbve2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0b:3f:1d:bd:5e:0c:48:bc:0c:55:63:bd:6d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
Validity
Not Before: Apr 17 01:01:29 2026 GMT
Not After : Apr 18 01:01:29 2026 GMT
Subject: CN=df84f3a5c0948ab6fafcddbe19659cd9e122e39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:42:e9:3a:4b:c7:dd:5b:22:ac:96:02:ba:
e4:70:be:55:4f:b1:5b:40:2c:09:54:d9:ce:8a:1b:
4e:42:5a:51:a0:18:5d:4e:64:8e:70:b9:fa:d4:71:
61:98:b3:c0:64:b0:d6:b5:c6:56:fc:44:f2:d2:65:
cd:0c:6c:e8:db:56:40:5c:46:9c:26:1d:a1:5c:2c:
01:52:ed:e3:15:e1:08:a9:35:73:c8:fc:1a:56:f5:
be:1f:51:82:8b:fd:7c:61:b7:87:c1:40:0e:83:2d:
f4:3f:32:54:3b:9c:ce:53:52:39:ee:b3:0c:b4:7a:
32:fa:69:50:ba:c2:ac:a6:bf:b2:90:f5:63:12:38:
16:5c:07:66:99:86:8d:ed:e6:88:dd:52:f7:d1:d0:
71:25:7b:fa:e2:1c:c8:9d:6f:4a:d6:7f:8f:77:51:
a7:12:08:93:b5:02:01:7f:26:51:98:d3:9a:12:a5:
60:c1:6e:0b:68:b3:2e:c3:62:76:a8:ec:cb:cc:0b:
6a:3e:7e:71:7e:ea:e2:0a:dd:63:5c:d0:5d:e3:47:
d2:1b:0d:a1:6b:d9:5b:fb:c7:bc:9f:42:2b:88:82:
9f:be:52:1c:05:af:6c:8a:35:cc:e4:ae:b1:78:51:
b6:15:a3:ee:31:75:c4:84:5f:34:e3:73:4c:2b:e5:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:F3:A5:C0:94:8A:B6:FA:FC:DD:BE:19:65:9C:D9:E1:22:E3:9F
X509v3 Authority Key Identifier:
keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1a:52:c2:a5:16:81:f9:bf:8f:ea:8f:15:62:22:c0:3e:ff:
23:3c:29:cc:2d:67:b9:c5:fd:b6:c9:f2:bd:21:28:c0:b9:fc:
e3:7f:6f:f1:60:4e:b8:68:b4:a2:20:a9:e5:ac:5d:b9:47:14:
95:0f:a2:2e:2c:6e:d2:53:74:6d:04:30:5a:10:29:e9:9a:eb:
27:92:05:4d:01:e5:81:7f:6e:36:6b:0a:fe:a7:bd:f6:02:b4:
7e:9f:80:1b:81:f3:4f:2d:78:39:a5:91:56:39:66:db:5f:4f:
7f:67:d1:88:8b:79:d8:a0:b7:59:ac:94:64:4a:ef:d3:84:02:
a9:ad:03:2c:d3:24:01:a7:f3:b7:49:99:e4:9a:0b:b0:b6:46:
d5:11:11:c3:f6:3f:8f:17:83:4a:e3:58:26:ba:35:14:ff:d9:
5e:ab:6d:75:ff:29:a5:84:49:19:3b:b8:7c:b8:d0:5a:07:a8:
fc:d0:f8:7e:6a:10:16:1b:62:fc:c7:5a:65:ce:3b:df:50:88:
a3:11:93:a4:74:f3:cb:ea:1c:02:a1:39:a6:d1:69:fe:c2:6f:
47:91:9a:78:0e:4f:72:2e:ff:83:b5:80:2f:f4:7e:af:3a:0f:
6d:b3:39:34:e9:64:54:85:84:62:9c:a1:e8:db:2e:5f:6b:bf:
c6:0c:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:20 2026 by rpki-client