Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File: _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier: 4cZsyUgxv0s7plyCokk14+1cUjYdAbiqy9l32xLCiSw=
Subject key identifier: 8F:9D:AA:84:38:C0:65:6E:A3:79:3A:AD:7E:04:39:86:43:3F:4F:90
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer: /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial: 019CAA2192C2304A14608F63F8A5951A5AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number: 0D28
Signing time: Sun 01 Mar 2026 16:00:52 +0000
Manifest this update: Sun 01 Mar 2026 16:00:52 +0000
Manifest next update: Mon 02 Mar 2026 16:00:52 +0000
Files and hashes: 1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: IIA9TdpTaHONcyf7qxyW+g/6eT67MTFdarbkBpWkeX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:92:c2:30:4a:14:60:8f:63:f8:a5:95:1a:5a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Validity
Not Before: Mar 1 16:00:52 2026 GMT
Not After : Mar 2 16:00:52 2026 GMT
Subject: CN=8f9daa8438c0656ea3793aad7e043986433f4f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:01:36:1d:b5:1e:1b:f2:a7:6a:70:23:6c:
d5:89:ac:2e:0a:bb:5a:c3:48:76:14:c8:25:fe:13:
11:f3:94:2f:f1:2d:4c:ca:c9:e7:0c:99:5c:5c:94:
91:33:8f:47:a2:6c:8e:1a:c8:77:b9:8e:a8:e5:9b:
37:7e:6d:46:26:77:45:3b:d9:43:bb:7d:dd:67:30:
7c:5f:a4:67:db:47:75:dd:6e:11:aa:9d:47:42:35:
d3:9e:bf:0b:88:ef:57:22:69:dc:aa:c5:f2:f8:85:
64:09:45:a4:d4:34:4a:b7:be:8a:94:94:9a:15:5c:
75:c5:7b:2d:43:39:6a:fc:92:6c:e3:05:ea:5b:e4:
67:43:02:81:1d:e0:2d:94:e9:93:0d:99:93:72:c1:
59:f6:b5:90:e9:ad:fd:a9:72:6d:b5:6c:c2:18:3f:
ce:7c:36:aa:85:d3:d8:a2:ec:4b:34:05:8f:b2:08:
87:19:1a:e0:6c:ad:91:12:38:99:4e:52:8b:95:09:
85:76:a8:ca:23:25:7a:12:a7:c5:81:a8:b0:75:01:
a7:ad:f1:42:07:e1:76:72:dc:c2:b4:b3:c7:2f:dc:
7f:86:57:ed:bc:0d:b8:0c:86:e5:ee:6a:e8:3e:69:
ee:2d:58:c7:c8:84:d1:3f:09:08:5b:3c:b5:5e:9a:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9D:AA:84:38:C0:65:6E:A3:79:3A:AD:7E:04:39:86:43:3F:4F:90
X509v3 Authority Key Identifier:
keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:79:85:91:3f:b2:64:01:82:aa:b7:59:93:31:96:23:aa:
b4:47:6e:fa:4a:6c:12:5c:2c:97:6f:1c:e1:3e:c6:35:81:1e:
de:39:ce:77:a7:be:e4:13:37:a3:4a:17:a1:9e:8a:45:6d:db:
40:2a:80:57:cb:da:73:73:f3:69:31:8b:82:51:00:29:d7:40:
43:b0:30:26:15:b2:fb:cf:cd:d7:b3:27:f0:ce:83:8d:1a:35:
f5:28:f8:35:8f:d4:8a:7c:4f:30:46:36:35:42:bf:e5:e1:07:
23:11:39:65:4c:a8:51:f9:af:8e:00:24:18:5b:f0:80:8e:00:
b4:b3:7e:b5:cc:4b:67:d6:f1:ee:c9:90:a6:52:30:b1:e0:2e:
ca:f1:79:7d:92:a3:be:12:78:a0:58:4f:4d:7f:01:a7:5b:a3:
8f:96:b3:bd:a1:98:b5:5e:a7:cf:a5:8a:af:b6:7f:70:c4:f0:
76:1e:dc:43:23:8b:3a:d6:af:d7:2d:0e:f2:ee:1c:76:5d:ea:
1c:cc:e5:1e:62:c9:74:91:12:7f:e3:53:30:75:b4:61:51:41:
a1:ae:0e:d4:55:86:c5:9f:d7:9a:c2:0b:60:64:89:47:9d:0c:
38:70:ca:e5:6c:13:cd:42:37:31:07:86:0f:3e:b3:84:75:bf:
6f:dc:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:22 2026 by rpki-client