Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: AW8s/+xOodE7e3tKY2exUdXlOXXUeALShlsNymXA1O0=
Subject key identifier: BC:A2:9D:98:BF:39:AB:4F:47:63:89:68:0E:E1:AF:42:43:F2:71:9F
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 019CAB33EB2140C4E47BFE52908F020F2CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 1516
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: Xjg7Hc89M5VA9MaHE9HGksGa3SBY8NKGG4ip3g5TY8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:eb:21:40:c4:e4:7b:fe:52:90:8f:02:0f:2c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=bca29d98bf39ab4f476389680ee1af4243f2719f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:af:0d:bc:74:b6:6f:ae:53:13:4b:5a:c3:
9c:9f:77:13:a8:8f:f8:b9:35:32:b5:ee:5e:a0:91:
82:80:a0:1f:e9:ee:49:05:74:f5:00:9c:43:ea:74:
d6:59:e4:83:1e:24:e3:46:3d:2e:c2:68:3b:22:1e:
11:1f:64:ff:9f:de:e2:4e:7a:41:ca:0f:4f:dc:d4:
57:e6:73:9d:bb:bd:93:27:e7:c1:c5:ae:78:e3:8c:
95:06:b1:47:e2:1a:b6:69:3a:c5:e5:a4:8c:06:57:
6d:8d:fa:84:05:ac:93:ca:10:b8:77:d1:61:ed:c6:
14:13:e1:f2:97:ff:60:ae:a4:eb:f8:c2:7f:b6:d0:
c9:ef:35:0f:01:26:3d:29:c1:75:e9:53:25:d1:57:
de:b8:41:a1:b1:02:6f:9b:43:cc:0c:89:bc:8b:6a:
36:2f:30:3d:52:3c:b6:92:32:76:98:eb:0a:1f:4e:
06:ea:df:b9:96:aa:92:ee:4b:38:d7:56:f4:0a:0a:
0f:cb:bf:ab:50:1a:e9:72:b4:3e:3c:8d:3c:2c:62:
c0:b6:df:8b:5a:6a:7a:37:d6:49:c6:cd:6e:69:2c:
31:82:58:01:3b:e5:a8:53:a2:63:a4:b9:c8:4e:79:
60:a7:13:f2:9f:d2:b9:b4:1d:b2:d8:1c:f6:3f:c7:
5d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A2:9D:98:BF:39:AB:4F:47:63:89:68:0E:E1:AF:42:43:F2:71:9F
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1f:52:dd:d6:e4:58:7b:74:25:98:a0:9d:dc:e9:17:22:22:
32:af:fb:ab:11:3f:0d:15:e6:1b:81:f1:1f:95:7b:4c:69:94:
b4:70:72:34:58:dd:8a:af:57:2d:19:88:ca:bc:d3:40:64:09:
a1:46:12:c2:50:fe:13:8c:de:4d:bf:3f:2a:09:56:64:23:43:
7d:c9:20:1e:73:bf:92:e1:b4:db:d8:4d:5b:7c:10:ab:e3:cd:
fa:47:ac:44:5b:10:0c:f3:f0:56:65:ae:ce:e4:b6:22:4a:a3:
51:be:8a:91:fd:1e:4c:2d:05:eb:7b:cf:36:e3:11:9f:65:06:
02:cb:ef:f1:7a:25:56:db:f6:a0:e0:86:b1:6e:68:5b:69:bf:
1b:46:f2:d9:2c:d9:41:b5:51:60:bc:d9:d6:10:57:4a:97:da:
3a:66:37:f5:24:79:c3:84:66:3d:5c:64:96:d8:53:ff:9e:ef:
09:9c:24:28:11:3c:60:20:8a:fa:12:90:7b:1a:b3:41:b4:33:
cd:99:c9:b4:36:d5:8b:e5:82:52:0e:ed:c8:3d:d9:fd:6d:58:
aa:62:fa:ec:8b:8d:6b:b0:3e:b3:6d:a3:9d:14:f5:c7:51:71:
cd:f9:04:1f:7d:9a:9e:d0:cd:95:1e:15:42:9e:84:a4:97:80:
d2:b6:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:33 2026 by rpki-client