Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File: VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier: KMwnV4eoVeIwNnHAMzWrCx7KVB+A/djj/EKSeHTD1y0=
Subject key identifier: 84:20:76:64:04:1E:23:2C:F6:64:19:66:B2:62:9A:F5:4D:8C:0C:89
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer: /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial: 019CAA582FA9D603EA62F4BE487C7E0C4E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number: 0621
Signing time: Sun 01 Mar 2026 17:00:31 +0000
Manifest this update: Sun 01 Mar 2026 17:00:31 +0000
Manifest next update: Mon 02 Mar 2026 17:00:31 +0000
Files and hashes: 1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: WkE9v92wICbt++22+z3ztEIJkigRS5OClpjyem8vUdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:2f:a9:d6:03:ea:62:f4:be:48:7c:7e:0c:4e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
Validity
Not Before: Mar 1 17:00:31 2026 GMT
Not After : Mar 2 17:00:31 2026 GMT
Subject: CN=84207664041e232cf6641966b2629af54d8c0c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:ea:a2:e6:32:be:f3:54:30:2e:14:9c:dd:
88:5d:ce:b7:df:c0:ae:bd:e4:cf:d8:83:38:88:15:
7d:f5:d0:73:92:42:2b:ec:40:b6:f6:22:c1:2a:e2:
a3:a5:ce:10:73:8e:2e:67:7b:20:cf:96:b3:e8:65:
bc:35:1a:5e:44:40:dc:5c:89:e1:0a:49:00:1f:18:
81:2f:97:28:0c:8d:2d:b0:ff:02:9c:2b:7c:a6:2e:
4b:aa:a3:87:1e:06:d4:9b:22:2e:84:73:ae:9f:42:
13:98:12:0c:6f:4a:f8:87:46:63:a9:5a:5a:8a:91:
c9:71:9c:1d:e4:13:e6:72:27:17:14:2c:cf:07:89:
8f:1a:27:b8:0f:37:6c:1e:8e:69:29:51:55:70:ae:
eb:df:ad:50:4b:7e:d5:07:41:47:55:99:86:96:d1:
cd:3f:94:64:70:ee:64:0a:f5:87:d9:13:1c:4f:dc:
58:2a:ce:b3:f6:b7:a4:ec:31:c2:4f:99:9a:4e:87:
57:85:33:9b:e5:40:39:97:1d:cc:63:24:90:8d:4b:
7c:a9:99:ba:47:d6:a3:41:86:68:e1:59:d9:ba:56:
c0:4c:eb:c3:a2:35:dd:8e:fa:ac:84:93:cf:c5:b1:
de:e6:a8:14:f0:b7:e9:26:5c:8e:3a:62:14:4c:68:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:76:64:04:1E:23:2C:F6:64:19:66:B2:62:9A:F5:4D:8C:0C:89
X509v3 Authority Key Identifier:
keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:36:d3:70:cc:e9:48:bc:19:8e:9f:b6:ca:26:55:7f:2c:86:
86:e8:59:d2:b2:41:68:62:93:4a:5e:b3:08:0c:e0:38:f6:b9:
08:67:7c:f6:88:25:b1:53:d0:7b:80:f2:da:61:69:ba:33:a1:
99:14:7a:fd:42:36:0b:bf:5b:72:6d:26:1d:e1:d7:6e:87:e2:
48:48:0a:ab:cc:56:f7:7a:cf:e9:da:f8:ad:49:11:6f:46:fb:
08:d2:04:d4:37:86:c6:fa:b2:49:fe:f6:b4:04:65:28:28:2f:
fe:ba:e2:13:a6:6f:f1:aa:6b:b2:15:bc:70:f2:e9:02:be:5a:
f5:13:b2:5f:3e:6e:4c:52:a1:b4:78:ac:ec:85:ff:45:fa:5d:
ac:07:4c:43:c1:1a:f5:22:92:8e:63:46:96:ad:b6:7d:8c:ac:
a9:ab:aa:18:57:de:ed:e7:24:d0:16:18:20:9b:b6:f3:de:26:
76:bb:a6:88:44:e9:13:01:49:29:87:45:77:6c:06:ff:68:b0:
38:00:fe:e2:2b:fc:c1:84:3d:bc:af:25:a0:f4:53:0a:aa:68:
05:30:1f:55:80:5f:2e:8b:d6:86:4c:ca:96:1e:71:ec:5b:06:
2a:d2:25:ef:0c:a5:1b:e9:dd:c1:78:fc:8d:8f:57:e5:a0:68:
eb:95:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:55 2026 by rpki-client