
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File: VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier: uqMFxeRO7mT12F3iLpOX8//Je1PKV2cFk9cO7tEOANA=
Subject key identifier: 67:28:D5:58:61:75:97:A0:FB:F1:85:56:00:F8:4B:C1:FC:71:8B:42
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer: /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial: 019CAB6B241DC59661D7A5DECE284468394E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number: 07A6
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: 6STN9Tt/RKmOFhDTFYINKqt+SdwdDml1krqlrMposFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:24:1d:c5:96:61:d7:a5:de:ce:28:44:68:39:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=6728d558617597a0fbf1855600f84bc1fc718b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:c2:79:3a:11:60:4d:ad:d5:be:58:c2:67:
51:9b:68:eb:99:38:2d:da:dc:16:c4:28:10:42:7a:
a3:e2:d4:d1:89:a4:ec:a6:26:27:c2:c4:86:24:c7:
ee:ce:d6:d1:f8:fc:af:d5:c2:1c:13:fa:88:56:bc:
fe:d1:a1:b8:20:0c:06:3a:da:b0:35:ca:b3:a5:dc:
fd:61:00:e4:60:a5:8c:3b:3f:81:d4:05:e8:26:42:
a2:9d:b7:44:d4:2a:94:72:88:87:98:c5:42:f5:7e:
a5:68:d9:73:21:77:a7:5c:f0:79:78:e2:0c:38:ed:
e9:5d:e7:37:ee:b1:7f:e8:9f:af:80:b3:c8:31:35:
0c:00:b5:04:de:b7:f9:bf:93:b3:cb:d5:6d:74:ff:
e8:26:35:9c:8e:77:f9:26:98:af:59:ec:75:f0:fb:
3e:26:e7:4b:ef:46:82:bd:18:cc:a1:09:a7:37:ce:
6e:42:04:bd:32:99:ef:61:3a:f3:70:2d:20:33:23:
a5:62:21:1f:f4:e4:3e:78:e0:8c:96:2a:7a:39:ca:
da:68:1d:ea:7b:cd:90:20:ad:4b:24:90:ac:5a:dd:
5c:b4:98:c3:02:9e:79:2c:10:d2:d7:cf:3e:42:8f:
1d:60:3e:11:68:8a:45:38:a9:90:69:a2:14:1e:f8:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:28:D5:58:61:75:97:A0:FB:F1:85:56:00:F8:4B:C1:FC:71:8B:42
X509v3 Authority Key Identifier:
keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:db:16:bf:f1:8a:1d:3d:eb:32:6c:84:7e:2f:19:1f:ac:db:
48:4f:bd:80:d0:c2:6d:6f:97:95:27:8c:24:27:7f:36:57:53:
38:c2:d8:82:d7:a8:da:f2:d6:c7:c7:9f:88:c6:90:35:89:9d:
8f:f2:0d:52:1b:cf:66:81:ac:5d:47:5e:16:f3:8b:87:73:92:
d4:b6:32:22:fe:df:68:c9:62:08:4f:24:c6:16:22:c7:52:c8:
c4:5f:cd:5d:5c:f4:9a:17:b3:2d:36:f1:8d:53:29:93:7a:1d:
68:5b:60:94:56:ac:9f:03:94:34:1d:d9:bd:26:ad:4a:fa:0d:
36:b0:db:03:11:ec:28:68:c0:a5:70:ff:8e:6a:2b:12:1c:39:
ae:d3:85:8f:a6:79:0e:ac:94:3c:d1:8b:2b:3c:b5:63:1d:f8:
bc:67:f3:69:78:24:18:ed:03:67:fa:0a:a5:f2:76:49:19:24:
89:57:f5:d8:3e:7d:30:cd:1c:46:1c:7a:ce:62:c1:05:7a:9a:
93:f9:02:a4:04:6e:60:40:a9:a1:9d:d9:32:b1:2f:a8:9b:9d:
eb:94:5c:e6:21:38:91:4e:bc:33:e2:c2:e0:41:51:a5:11:01:
9d:d3:66:1d:f6:79:39:71:ab:84:f4:6f:0a:3b:cb:df:d4:ec:
b7:16:d3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:08 2026 by rpki-client