Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
File: VKxeRNRqy5VTReum426QYfjxbeE.mft (raw, json)
Hash identifier: vZxhHhXggFCF474ewX1Hvr0+sYmIr1Lh3GCwtyoueeI=
Subject key identifier: 74:AF:0F:46:66:41:6C:23:88:F2:9A:71:35:B5:DC:16:FC:8B:F9:80
Authority key identifier: 54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
Certificate issuer: /CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Certificate serial: 019CAD5A406EA688C288CD2F799B0880E563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
Manifest number: 11F4
Signing time: Mon 02 Mar 2026 07:01:38 +0000
Manifest this update: Mon 02 Mar 2026 07:01:38 +0000
Manifest next update: Tue 03 Mar 2026 07:01:38 +0000
Files and hashes: 1: VKxeRNRqy5VTReum426QYfjxbeE.crl (hash: cK4Xeg/E9RNN8Yq28JJsKhC0UP2+/zpcr4YBF/szC9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:40:6e:a6:88:c2:88:cd:2f:79:9b:08:80:e5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac5e44d46acb955345eba6e36e9061f8f16de1
Validity
Not Before: Mar 2 07:01:38 2026 GMT
Not After : Mar 3 07:01:38 2026 GMT
Subject: CN=74af0f4666416c2388f29a7135b5dc16fc8bf980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:40:78:05:20:a0:af:c5:1c:fb:c0:5a:fa:
ae:c3:1b:d3:09:54:dc:27:71:a4:f5:81:1e:a1:18:
d5:57:3d:20:4e:24:a7:1e:af:4e:6f:f9:f0:c4:d3:
7f:16:3c:a3:f7:66:f0:00:18:d8:a4:7d:07:7f:ca:
77:a0:34:78:17:24:29:b7:0c:fb:89:72:3e:68:5c:
54:5b:a0:ce:08:05:13:67:87:09:cb:54:59:79:91:
ce:9f:5d:1b:ce:11:c3:e0:ea:87:4d:b7:a5:e1:af:
79:8a:dd:4c:1d:06:3a:95:29:96:71:cf:a4:f1:0e:
ba:c5:57:9b:c6:9d:64:4d:96:26:d1:98:08:fd:ae:
e5:91:1f:23:82:5b:8c:b1:7f:dc:e4:df:ce:df:2d:
68:36:9b:8c:0c:83:8e:27:a9:b9:a7:75:b4:14:19:
47:19:c9:36:9a:d7:58:af:df:5e:71:72:cf:9e:b3:
82:1d:f2:66:29:47:73:b1:b4:37:12:8d:67:f8:81:
3f:6e:57:96:b2:26:ae:c9:77:e2:21:0f:db:21:fb:
01:3b:15:53:53:63:be:39:bf:2a:91:eb:b0:51:13:
f4:51:05:69:9f:08:e0:f8:74:3c:31:aa:3f:42:3c:
d6:ef:57:fb:72:84:e0:c6:13:6e:b1:c0:fb:fc:e4:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:0F:46:66:41:6C:23:88:F2:9A:71:35:B5:DC:16:FC:8B:F9:80
X509v3 Authority Key Identifier:
keyid:54:AC:5E:44:D4:6A:CB:95:53:45:EB:A6:E3:6E:90:61:F8:F1:6D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKxeRNRqy5VTReum426QYfjxbeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/5fec9e-7aba-4ba6-ab61-c34415bfcda1/1/VKxeRNRqy5VTReum426QYfjxbeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fc:60:c7:10:5b:65:0b:f0:3f:73:5d:d0:20:f2:01:71:73:
60:8f:5c:9f:90:ed:c3:d3:da:29:11:24:4d:07:02:71:50:77:
85:d4:d8:bc:32:57:ee:6a:ac:39:b5:46:c1:43:ed:ed:a6:df:
d6:9c:20:01:12:d2:ad:4d:a9:79:3b:97:a0:b6:48:df:f8:01:
47:1d:40:4e:57:fd:8b:46:80:10:7e:01:2d:3d:37:34:78:74:
0f:57:21:87:b6:d4:d9:f9:09:70:c4:08:a7:4f:2e:04:46:bd:
e4:0c:95:86:30:aa:bb:48:60:2d:cc:7d:b8:21:4f:db:9e:f8:
e3:07:fc:a3:3f:e6:96:f9:71:67:c4:c4:b1:6f:48:09:5f:81:
a7:f5:6d:4a:b8:aa:73:0e:4d:5a:d0:ae:09:49:01:dc:59:f2:
9b:e5:f9:83:1d:16:cf:3a:ab:28:95:da:10:f7:16:cb:c9:d3:
f6:95:22:85:72:de:29:b4:d0:9f:72:f7:e7:ee:e1:fb:7c:e7:
3d:61:22:8a:18:08:7a:74:f9:48:5b:fc:67:3b:ad:cc:e8:02:
3f:e3:71:03:b1:cd:ca:be:e9:cd:61:cd:10:e0:ee:d8:e8:a9:
ac:c4:8b:64:83:a0:bc:16:71:c3:29:f4:45:aa:cb:5e:d7:09:
7a:54:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:01 2026 by rpki-client