Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File: _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier: Jb1w2VChMkGimC1zSTzy/G5VzWXnsBV9k0ggj+/Ydoo=
Subject key identifier: 36:2B:AC:07:CF:D0:A7:C5:F1:54:9A:35:60:A2:A5:5D:48:83:79:48
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer: /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial: 019D9998CF6B2AED0D525706A4F292C70945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number: 0DA4
Signing time: Fri 17 Apr 2026 04:00:21 +0000
Manifest this update: Fri 17 Apr 2026 04:00:21 +0000
Manifest next update: Sat 18 Apr 2026 04:00:21 +0000
Files and hashes: 1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: 1x6QBKKMZhb3zXbmYTK+2wUgdYmEn7F15+CA3PoGsOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:cf:6b:2a:ed:0d:52:57:06:a4:f2:92:c7:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Validity
Not Before: Apr 17 04:00:21 2026 GMT
Not After : Apr 18 04:00:21 2026 GMT
Subject: CN=362bac07cfd0a7c5f1549a3560a2a55d48837948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c2:6a:a3:6c:bb:13:05:10:fc:11:06:bc:db:
2b:9a:18:12:e1:09:a5:e7:c8:91:e3:a2:89:f3:21:
fd:d8:b8:5a:95:f0:c2:02:8d:10:0f:1f:f7:ba:53:
36:b5:b5:d2:c8:a0:e0:df:f7:a1:71:44:a0:58:ef:
9c:78:a0:32:88:a5:42:3c:4a:85:f9:1c:fe:87:da:
9f:96:42:e5:0d:fa:6e:98:32:ef:20:24:f6:1d:7d:
70:dd:17:93:40:89:ce:dd:85:42:62:ad:67:5c:7c:
26:f5:e8:32:e3:9d:62:2b:80:e8:4d:48:86:60:0b:
e2:93:4e:d4:3f:9a:2b:d9:63:2e:31:e5:bd:c6:91:
5e:ff:ec:1c:bb:18:7d:97:00:46:82:7e:58:e7:36:
d7:69:d1:20:bd:1f:70:10:44:d4:20:42:a3:96:73:
9a:09:96:3a:9f:7f:bf:41:2b:41:82:4d:04:5e:17:
e7:ae:4f:25:ee:dc:20:81:6c:44:8b:0d:af:de:7c:
bc:1e:3d:5b:ca:bc:65:42:03:2d:b4:52:7f:19:a9:
da:37:c1:7e:c2:c7:f3:f7:ea:07:0f:2b:c8:ce:04:
61:63:cd:b0:c1:3e:84:38:57:cd:12:02:76:be:c4:
9b:d0:7a:84:34:e5:70:cb:e7:2d:da:e5:ff:79:c2:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:AC:07:CF:D0:A7:C5:F1:54:9A:35:60:A2:A5:5D:48:83:79:48
X509v3 Authority Key Identifier:
keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:d6:df:85:b0:de:d9:f2:a2:0b:8f:0c:1b:3b:ca:0e:1e:
0e:74:cb:0d:42:0e:83:46:b9:c8:40:f8:e1:a6:77:aa:6b:c5:
f0:f8:06:51:4d:59:38:7e:94:5e:0c:f7:1a:73:74:62:93:ad:
2c:d8:45:e4:9b:c6:40:e9:cc:a0:c3:0f:47:cc:ad:b4:27:0f:
71:c9:db:04:29:4a:06:df:69:f4:6c:ea:7d:98:29:e4:2c:27:
2a:f4:68:34:a0:20:4e:c5:51:a6:37:c8:54:e1:4e:fa:55:c3:
78:bd:e9:08:ae:95:90:3e:0f:b0:8d:b2:66:86:b4:e2:50:2e:
2e:d6:8f:b9:7a:7e:bc:d3:ca:b6:0f:1b:09:f9:69:5f:2e:95:
d7:83:d9:4c:62:5d:f9:c9:19:59:2d:ea:17:0d:46:73:23:5b:
25:21:7d:5b:a8:48:a3:b0:9c:7b:af:16:50:8b:6f:df:92:94:
e6:d7:cd:1f:ae:47:90:f4:49:06:a0:a7:ca:96:d3:5a:b8:1e:
b1:08:89:15:c8:93:12:ef:73:24:9a:aa:50:18:e6:8a:d5:23:
f8:23:f8:3b:b3:e9:3d:2c:16:70:1f:9c:bc:29:df:84:8d:c5:
6d:c6:70:6b:b9:21:16:34:a3:d3:37:5c:0c:6e:a4:f5:89:db:
0a:0e:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:41 2026 by rpki-client