Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: 3T3pWzPeKIeH96JQJBXdxGRgrmMgrA1ONZ3iAyhzMdg=
Subject key identifier: F3:B7:CC:BF:80:9C:F8:20:B4:6B:47:AB:C5:0B:86:59:B2:4D:88:63
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 019D9AAC7197C955C5EDD1D266F1EA04F5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 1592
Signing time: Fri 17 Apr 2026 09:01:25 +0000
Manifest this update: Fri 17 Apr 2026 09:01:25 +0000
Manifest next update: Sat 18 Apr 2026 09:01:25 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: I+xHkWSJ3NJDP4J7AOeRBGKqoSTda7Bsu+ze5Ow+7gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:71:97:c9:55:c5:ed:d1:d2:66:f1:ea:04:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Apr 17 09:01:25 2026 GMT
Not After : Apr 18 09:01:25 2026 GMT
Subject: CN=f3b7ccbf809cf820b46b47abc50b8659b24d8863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:2f:bb:44:c6:5d:50:81:37:db:4a:0e:a8:
e0:69:f1:78:d3:10:c0:e1:23:98:07:36:be:37:5c:
59:ab:94:ff:00:8f:10:5f:a1:79:db:60:63:92:35:
8d:b0:dd:a8:19:5c:53:e3:82:e4:ba:c2:db:7c:fd:
a6:74:f4:07:39:b9:28:2a:dd:31:95:61:cc:63:f7:
1e:36:bc:2e:e4:b4:f3:5d:9a:84:c4:c4:fe:3b:fa:
c9:99:bc:ba:e9:77:61:58:0c:46:3f:7f:14:9f:17:
42:85:46:5b:69:b7:70:48:d4:7a:77:b1:f8:de:75:
0f:ed:12:22:5f:d2:46:2b:81:5e:9c:c8:fc:16:fe:
03:c7:26:47:02:1a:0a:fa:74:9d:db:43:d5:2c:ce:
4e:d7:7b:39:b8:61:7e:61:c4:7a:18:20:08:fb:ae:
bb:c1:c3:c8:b8:d4:04:0f:80:33:91:92:8c:30:5f:
97:20:5a:c3:5f:07:76:88:57:15:ce:b0:75:2e:e1:
84:99:fb:39:e0:1e:57:af:f4:71:74:21:9f:73:04:
0e:55:ab:f3:65:64:5a:1b:50:d3:81:67:65:54:8b:
af:21:27:71:be:fb:84:6b:f2:e2:8b:72:8b:1d:e1:
77:90:ee:a6:0f:be:0e:5a:94:50:b6:8e:e1:2c:f8:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B7:CC:BF:80:9C:F8:20:B4:6B:47:AB:C5:0B:86:59:B2:4D:88:63
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bf:26:4b:99:5b:d6:1c:23:ea:e9:ea:04:4f:36:6a:33:76:
d9:b1:4b:fa:54:97:7b:29:76:12:fe:29:6c:b9:87:d7:11:48:
f2:3b:e5:21:f5:e8:04:26:c5:d7:e2:9e:d5:78:58:66:e9:26:
6f:37:58:50:d0:a7:de:6b:1a:2c:ba:c7:f1:22:02:3f:68:fe:
e1:84:71:e3:e8:a0:38:a9:10:20:03:56:e5:88:25:ee:34:63:
2d:e4:4e:9f:4c:47:e8:f4:c8:d2:c8:98:39:19:f8:09:f6:26:
04:e8:ef:69:39:c2:d6:df:55:47:26:6a:e7:ef:49:59:19:0f:
38:18:18:d1:1b:c1:26:a4:8b:20:84:46:d7:17:b5:95:f8:86:
07:c0:c5:21:32:6e:96:44:62:a2:b4:c8:c6:92:31:19:4f:b7:
1e:11:ec:e4:f5:6a:34:0f:9a:4d:50:c9:17:fd:7d:37:e5:ae:
14:ba:89:a9:52:91:a8:c2:d2:88:a6:9a:c3:2e:8c:0a:fe:90:
d9:53:a7:78:b2:37:81:fd:3c:db:8a:51:ec:20:c7:a9:02:4b:
69:4b:e1:7a:3e:5c:23:40:9f:2e:ef:49:60:7e:97:27:cb:c2:
b6:55:2a:62:b9:15:79:bc:00:8e:2e:87:c4:4a:a1:f7:ed:d9:
0c:b6:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:17 2026 by rpki-client