Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: EE7L8deVHz/2tZ2WMlhwbho4T4aGReO9uyvMli8Ne6Q=
Subject key identifier: 74:12:AB:4A:7F:2A:F6:4A:FA:87:85:B5:70:5B:83:C4:DC:D2:F2:02
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 019CAE360032873611B678D657698DB5E163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0E48
Signing time: Mon 02 Mar 2026 11:01:40 +0000
Manifest this update: Mon 02 Mar 2026 11:01:40 +0000
Manifest next update: Tue 03 Mar 2026 11:01:40 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: qz0Pfv33WG8ES2xyRTPYYDB599SiNZc+tOvF4+Bri7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:36:00:32:87:36:11:b6:78:d6:57:69:8d:b5:e1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: Mar 2 11:01:40 2026 GMT
Not After : Mar 3 11:01:40 2026 GMT
Subject: CN=7412ab4a7f2af64afa8785b5705b83c4dcd2f202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:40:aa:cd:f3:24:f7:94:2f:29:67:f2:22:
2f:fa:94:7f:94:a2:d2:92:ee:2a:b2:88:05:5a:45:
a8:44:58:dc:45:e9:09:ba:eb:13:99:f2:79:e7:76:
c9:da:7e:e9:a6:67:82:1f:21:09:0f:ee:47:5b:8e:
1e:7c:6c:e7:d1:34:df:cb:df:da:8d:30:be:f6:ff:
1b:03:72:c7:f2:95:2a:f3:95:af:03:65:11:34:74:
b4:06:bd:e6:f9:98:fe:fa:0c:7b:1f:94:fc:7c:b7:
3e:bc:56:5b:a2:59:7c:a3:63:3f:4b:e5:33:60:a5:
07:ca:09:8a:01:44:7b:cc:20:05:7a:fe:3c:71:ba:
49:ea:60:4a:9d:27:30:dc:58:22:7a:08:20:76:18:
91:96:48:6c:3c:05:ed:57:39:56:88:b6:c4:99:fe:
20:0b:fe:91:5e:ea:16:91:1e:4a:c1:6a:4a:a2:a0:
d5:67:f3:0c:e5:59:39:a4:ac:0f:ba:e8:99:5c:05:
49:94:1b:64:55:12:cd:78:7b:a5:58:ae:20:af:cf:
e9:20:54:de:ae:23:6d:80:29:32:9c:e6:54:8e:76:
b9:ce:29:d1:ec:fa:7b:7b:a0:9e:9c:0d:40:f8:f2:
74:1b:b5:33:49:27:21:a5:c5:55:36:35:16:7f:aa:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:12:AB:4A:7F:2A:F6:4A:FA:87:85:B5:70:5B:83:C4:DC:D2:F2:02
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:51:f2:44:41:74:c4:88:d3:6d:c8:50:5a:2f:ba:d6:4f:9f:
3b:bd:bf:44:8d:1f:69:50:0b:a0:00:1b:50:2c:e5:af:97:58:
8f:b2:8c:1d:88:52:da:87:45:78:fa:6a:d1:21:00:e0:bb:77:
d6:d9:61:0d:83:1c:42:e8:60:40:d4:b6:8c:53:e7:21:10:3b:
87:3f:fa:8c:fd:1e:6a:45:19:c4:d5:03:55:d6:c8:e7:b7:86:
e1:b3:09:35:72:5a:4a:20:15:7f:45:2d:d1:de:5d:11:23:30:
0b:b6:5d:7f:25:c6:3b:8b:2b:ba:70:a7:71:38:27:c5:f1:e2:
ee:f5:a0:15:ba:47:69:3d:43:2b:10:75:aa:d5:07:81:91:3e:
8f:44:35:35:ae:34:41:c5:21:09:21:4a:d8:38:a1:2c:bf:bd:
4a:5d:82:47:7c:ff:71:c1:17:7d:02:b0:03:94:09:05:da:f6:
12:32:d6:4c:9d:e8:1f:ce:c5:0e:2c:3b:b5:c4:76:e4:79:a9:
c5:e8:79:40:08:86:1b:61:6e:d3:8c:6c:55:91:3f:80:b0:96:
a7:73:0b:be:51:03:ec:a6:89:7a:fc:4c:8c:99:83:bc:52:09:
95:20:b9:d9:d2:4f:0f:96:b8:d3:89:a8:45:e8:d6:3d:19:6e:
f4:35:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:35 2026 by rpki-client