Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File: vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier: Oc6zdpVgQTzulxaCUEIa5SzzbGidBoFssdg6ocWE2Sw=
Subject key identifier: B2:2D:E9:A8:D7:E3:86:8A:33:6F:6A:63:1F:9F:63:D6:2B:BB:6B:C0
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer: /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial: 019D9AAC2A41D73BEBE317758F029C2AB72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number: 0B5A
Signing time: Fri 17 Apr 2026 09:01:07 +0000
Manifest this update: Fri 17 Apr 2026 09:01:07 +0000
Manifest next update: Sat 18 Apr 2026 09:01:07 +0000
Files and hashes: 1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: JjLw4etd3gxXFd9CmIXbWH8uUl5Unk72fbWSxX9fJCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2a:41:d7:3b:eb:e3:17:75:8f:02:9c:2a:b7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Validity
Not Before: Apr 17 09:01:07 2026 GMT
Not After : Apr 18 09:01:07 2026 GMT
Subject: CN=b22de9a8d7e3868a336f6a631f9f63d62bbb6bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:71:5c:b7:db:0e:d0:57:74:bb:a6:91:7e:
0b:f5:a3:08:c3:02:84:d3:06:4b:b0:b0:70:20:d5:
6b:8f:39:b7:92:e8:2e:eb:b2:20:80:20:bf:da:c2:
a3:d2:67:71:d9:f3:30:52:11:56:f9:ae:31:08:f8:
ab:3b:d6:4b:45:35:29:bb:c4:06:55:a2:86:a0:0d:
7e:26:04:3b:1d:32:24:ba:4e:9e:bc:e2:89:49:5a:
2a:e3:85:3f:be:57:9f:0f:7f:15:35:99:a2:9d:dd:
6b:cc:79:7d:53:98:2b:c4:d5:96:ad:d4:ab:92:70:
57:b3:2a:3d:8d:ca:dc:9e:c0:63:53:61:00:70:85:
1f:02:c1:97:1b:57:d6:94:ef:db:e6:28:6a:1c:37:
f0:3c:a1:05:92:f0:e0:2f:69:fa:52:1e:bb:6e:fc:
90:77:5d:a4:5e:84:43:80:ca:bf:3a:e8:10:de:a8:
5f:3e:90:24:8b:9a:8b:ee:d2:66:f9:a3:7a:b1:be:
7e:cd:1e:9a:9b:cc:c9:e7:0e:81:e8:11:78:02:7c:
12:de:98:21:26:60:8a:48:2e:44:f9:ca:f8:7a:88:
21:ce:0e:e0:72:07:ae:c6:79:23:40:0c:4f:1e:31:
61:19:fc:de:72:b5:0c:e7:a1:02:70:32:0d:0f:45:
8f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:E9:A8:D7:E3:86:8A:33:6F:6A:63:1F:9F:63:D6:2B:BB:6B:C0
X509v3 Authority Key Identifier:
keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7f:ad:2d:e0:7b:85:5a:79:90:39:a4:b0:03:c2:87:17:70:
0a:c5:71:72:36:04:cc:27:4c:3b:42:4f:61:07:71:de:c8:80:
c2:30:01:0b:fd:80:48:4e:1f:43:d1:84:b7:35:39:6b:ea:1c:
a9:37:70:12:a6:b6:69:9b:60:90:8a:50:5d:d3:49:67:d5:66:
22:95:b2:46:13:4d:58:1e:0d:31:de:b4:bd:d3:61:c2:63:ab:
77:f7:48:b0:98:03:f6:31:a5:6a:2e:cc:9a:ef:70:53:d3:4d:
01:06:99:d9:88:70:cf:ec:5e:4d:50:0a:a8:d4:db:ed:4b:3d:
d9:bc:d4:a3:89:c3:0b:3e:ae:f8:d5:99:75:08:36:8e:75:cc:
a9:e0:05:94:20:be:e5:a4:36:ad:fb:b3:03:aa:30:0b:02:ec:
17:0f:00:2e:4c:1e:b3:30:4c:85:b1:bb:17:78:53:76:31:05:
0b:4a:30:4d:82:1b:ed:e2:5e:f0:76:37:61:ff:c5:7c:d0:91:
c0:8c:ae:4f:b1:8f:0f:2c:d4:f5:f6:6d:81:78:15:1e:d7:08:
9a:7c:5d:c2:ed:25:25:50:5f:84:ec:ca:c4:78:98:8a:b6:64:
2c:b8:dd:e1:ac:55:33:f9:71:8f:76:08:be:5b:21:9a:b5:8a:
3f:d4:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:43 2026 by rpki-client