Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier: rcm1qhGUFI7WGEQX7zR25Hhb6GKcDWPrr0nvmiHUc4E=
Subject key identifier: D3:CD:6F:77:FA:A3:9D:78:DE:9D:30:FB:4E:E5:06:32:EE:75:A4:94
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial: 019D98BD2D5FE9AB0D789260D28946065A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number: 1088
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: qwUCU/4i019TGSHRuB8QLhGlX13EhMwRD46rBWwI90g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2d:5f:e9:ab:0d:78:92:60:d2:89:46:06:5a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=d3cd6f77faa39d78de9d30fb4ee50632ee75a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:e9:a7:88:8e:3e:64:99:bb:04:02:d4:72:
3a:b8:7c:c5:d3:b6:fe:7a:c7:d1:2e:ce:10:88:85:
d2:7c:ff:df:b6:48:b6:09:30:9d:0c:63:6e:41:77:
d2:d1:94:c3:16:d2:b3:c1:da:9c:fa:b3:e7:a0:bc:
c9:12:f1:66:e1:c8:10:96:ae:08:de:76:3d:43:b1:
b9:b5:df:df:a9:3b:cf:da:82:8d:76:47:bd:f6:a8:
8a:02:ee:da:3a:1a:46:e6:d1:15:ee:48:48:ba:77:
a1:d1:88:f5:86:8b:04:85:4d:ed:e5:32:d3:0c:64:
2d:bb:75:69:e9:11:c8:90:5a:6d:ec:37:d1:dd:3a:
fb:29:dd:9c:78:1e:a4:03:9a:ec:f9:08:73:15:8f:
fc:1a:bd:5a:38:52:32:03:72:24:bc:e2:69:ca:58:
92:d2:ed:9a:b9:97:e3:6d:77:59:de:64:b9:46:93:
37:b1:20:d5:55:44:47:3a:03:4a:92:68:d0:9c:37:
c0:e8:7a:fc:63:99:1d:e6:70:85:0c:80:ef:c6:02:
59:01:32:43:95:d0:19:94:a3:83:78:a3:d9:25:03:
46:a9:0f:3e:65:97:02:52:f7:17:c3:08:5b:55:d2:
f0:c3:d9:0d:b4:fc:50:0f:dc:af:f0:79:fc:c0:9f:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:6F:77:FA:A3:9D:78:DE:9D:30:FB:4E:E5:06:32:EE:75:A4:94
X509v3 Authority Key Identifier:
keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ab:a0:80:8f:77:78:49:ba:ff:15:9c:6c:eb:77:85:e8:37:
dc:bb:10:dc:be:f6:7a:c4:7f:95:af:61:c9:52:0f:54:fb:41:
87:4e:1a:1b:2e:c7:c8:d3:93:3a:f8:dd:ed:c4:b5:72:ef:d5:
e6:fa:aa:7f:07:91:1e:da:25:13:ce:72:d9:c3:2c:d8:ca:e7:
92:48:5d:d3:e3:36:7d:92:27:d1:10:03:4d:14:ca:a8:23:b3:
c9:30:4f:ef:11:35:df:fe:a4:eb:22:4e:e6:3a:a9:bb:eb:a4:
87:71:d4:9f:d3:99:f7:f0:0e:f8:b4:77:b2:da:44:19:49:b8:
cc:8a:fe:67:19:24:a6:b5:56:44:65:cd:1e:c4:de:cc:a3:d2:
ca:a3:02:34:34:a5:33:19:f7:68:4d:dc:9a:b4:00:b5:77:55:
71:e1:28:9b:1b:35:51:4e:2b:2b:df:99:30:6e:25:cc:0c:82:
d8:2b:00:8c:02:ff:1c:11:3d:4a:87:b2:20:35:14:06:b6:ae:
1b:79:1d:02:b5:e2:80:9d:0c:69:bb:ab:81:8f:d2:73:e8:37:
b8:80:14:77:e1:7e:91:0f:82:43:8c:27:fd:07:de:f9:6c:3a:
21:ab:97:55:41:02:65:6d:b1:7e:c1:a8:f8:30:08:e8:a6:c5:
58:27:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:38 2026 by rpki-client