Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File: vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier: COCov3AQtsgUfzKhid8br7ZcT4p5dHgaUZxkkTOwJIE=
Subject key identifier: 12:8A:88:AC:33:BC:E9:10:77:C9:45:94:B5:5E:DA:BD:12:22:8D:37
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer: /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial: 019D9AE33FE324FBE4AEF1F0BD619C5E1B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number: 09AB
Signing time: Fri 17 Apr 2026 10:01:17 +0000
Manifest this update: Fri 17 Apr 2026 10:01:17 +0000
Manifest next update: Sat 18 Apr 2026 10:01:17 +0000
Files and hashes: 1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: +s5YpC/T4f969A7QwGwcpFLKvPmvYjdWcxD+miZRvZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3f:e3:24:fb:e4:ae:f1:f0:bd:61:9c:5e:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Validity
Not Before: Apr 17 10:01:17 2026 GMT
Not After : Apr 18 10:01:17 2026 GMT
Subject: CN=128a88ac33bce91077c94594b55edabd12228d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:7c:9f:bf:e9:36:39:79:22:8c:4d:2b:98:
56:75:1f:bc:59:79:b8:73:ea:16:7a:2c:2b:73:ea:
3d:3a:68:8e:91:66:6f:fd:9a:0b:52:b2:3e:6a:6a:
46:c8:d3:79:1c:ce:6b:a9:52:c4:a5:23:7b:39:ec:
ff:ef:0d:3b:be:32:0a:13:e0:c7:c7:b5:fd:5b:12:
6b:2a:f3:09:42:44:0d:51:e9:29:83:fe:77:d8:23:
90:cc:62:b6:3e:c2:f0:3f:bb:39:42:bf:0e:5d:48:
98:27:9f:9e:a6:59:a8:9d:55:62:bf:ad:34:47:79:
c3:96:6e:a7:85:d4:60:06:e9:d8:39:c0:63:d5:f2:
20:25:36:b1:57:42:bd:74:b4:07:05:e5:0e:8c:9d:
dc:f2:94:6a:fe:16:cb:76:16:da:92:f9:f1:31:17:
8e:89:e1:a1:55:3e:15:00:82:77:ec:b1:67:b4:a1:
9b:1e:50:e0:89:ff:2e:43:33:9e:be:e6:86:c6:1e:
77:f2:e0:0a:c5:61:6b:f7:48:9d:3f:40:7c:91:97:
e4:fe:38:24:75:7b:e0:e6:f7:a0:88:6e:52:11:c6:
15:c6:62:90:03:45:54:c7:b7:fe:29:02:85:73:9d:
02:ae:ba:35:1d:fa:08:5f:bf:ec:87:00:a1:b1:b9:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8A:88:AC:33:BC:E9:10:77:C9:45:94:B5:5E:DA:BD:12:22:8D:37
X509v3 Authority Key Identifier:
keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c7:e6:b3:a3:1d:4d:39:f8:69:03:42:ba:ef:18:f7:df:8c:
f3:a9:ae:e7:ae:d5:60:c1:aa:63:1f:6b:95:cb:c4:0c:68:9b:
c9:0f:a8:32:4f:7e:47:67:8c:56:79:d5:35:a4:74:1c:ef:de:
7f:89:fe:e9:1e:a9:a0:11:87:b2:7e:12:02:63:8b:b5:a4:33:
97:ea:25:64:61:e4:c0:12:7e:40:26:b4:a1:08:5e:f9:93:83:
01:24:97:7c:75:9e:58:1d:24:4d:98:a0:f5:e3:b9:31:9a:3f:
44:66:7a:93:f9:f8:30:4d:7a:f5:b2:a6:2d:b7:41:14:00:a7:
0b:8e:ce:40:42:89:16:57:17:4e:b9:d9:af:96:0b:a9:d2:31:
75:75:f8:f0:14:ed:4d:ab:fa:7f:f6:ce:56:57:a0:61:d8:25:
76:60:e0:29:8e:c6:0e:5b:2d:b5:29:62:6c:9b:fd:bd:c0:09:
b7:2c:a9:bd:7b:8f:e7:81:3b:d1:73:9f:cf:f6:b9:0b:d2:8e:
32:d7:b0:e7:23:40:49:4e:54:73:93:0d:25:d8:11:20:78:92:
ec:74:23:b7:ad:fa:92:4f:d9:96:c8:26:89:2f:4f:bf:6c:e7:
f1:72:79:83:03:ef:ce:7f:cc:ad:7b:a3:b8:6c:29:1c:2d:7c:
88:d9:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:49 2026 by rpki-client