Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json)
Hash identifier: v87SQYQENJR9KfoMJHaySbeKnjRy9vqxjehMJILeWe4=
Subject key identifier: 65:63:F2:8E:75:ED:DA:7C:6B:9A:1A:10:A7:CA:22:EA:14:1A:5F:F8
Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Certificate serial: 019D9962705D9A22656E6E6B47CF3875AB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
Manifest number: 0D37
Signing time: Fri 17 Apr 2026 03:00:58 +0000
Manifest this update: Fri 17 Apr 2026 03:00:58 +0000
Manifest next update: Sat 18 Apr 2026 03:00:58 +0000
Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: VL4i8cQERTxQd55utef+6y7vemogC7LjaKgvzBUPJvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:70:5d:9a:22:65:6e:6e:6b:47:cf:38:75:ab:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d
Validity
Not Before: Apr 17 03:00:58 2026 GMT
Not After : Apr 18 03:00:58 2026 GMT
Subject: CN=6563f28e75edda7c6b9a1a10a7ca22ea141a5ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:0e:e1:b4:20:cc:1e:29:ed:3c:fb:50:3c:
a8:e8:8a:75:f9:2d:a6:ed:3c:45:6c:8c:d4:b0:50:
ff:9c:a4:68:7b:35:6f:d5:69:f9:49:ce:57:49:92:
d9:71:3a:dd:c5:cb:e6:b2:13:7d:6a:ab:d5:c8:0e:
03:d1:0a:a4:fa:1f:51:16:27:03:6e:a9:16:86:19:
c2:4c:cc:a7:c6:23:67:90:07:5a:15:0c:0d:1f:2b:
03:5c:2f:37:3d:4e:af:4a:79:ee:5d:96:bf:9b:ce:
62:47:28:07:96:b3:16:bd:5f:f1:9c:e8:ce:d8:69:
2a:2e:47:15:25:44:d9:eb:34:9a:22:16:40:3d:a0:
03:4a:b8:6c:03:65:2f:6f:93:92:7e:8e:f9:4a:96:
0a:40:4e:74:e9:72:ae:97:90:cc:88:db:d8:c4:3a:
0f:04:57:4b:fa:d7:25:3b:7d:13:be:ea:67:9e:a5:
57:af:9e:82:50:4a:da:db:9c:cd:4d:91:93:26:f7:
a8:66:d0:7c:52:7c:e9:f0:a7:f5:89:63:0f:da:04:
a0:31:03:f0:82:61:24:d6:e9:9d:98:ff:a8:d3:3a:
c6:42:f0:92:eb:ce:20:8c:36:37:aa:a6:6a:14:84:
4c:94:5d:46:39:ca:71:29:c5:c6:62:7e:21:8a:da:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:F2:8E:75:ED:DA:7C:6B:9A:1A:10:A7:CA:22:EA:14:1A:5F:F8
X509v3 Authority Key Identifier:
keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1f:b4:cb:1d:c3:62:83:c3:c7:96:c5:a8:41:e7:e6:d2:10:
df:83:8e:02:34:2f:eb:25:a3:63:17:1b:00:37:5d:8e:6b:73:
6b:a6:de:0d:d2:9f:eb:c7:ad:36:4a:b8:df:32:e3:64:0f:84:
ef:32:bd:86:82:8a:3c:7c:15:83:35:29:5e:f0:3f:49:16:09:
4a:0a:b7:79:06:ed:97:61:cb:f8:da:95:1b:7a:c2:55:8c:5d:
ed:d5:9e:f5:5e:41:4e:04:3e:82:6e:30:c4:7f:cf:93:16:43:
12:d9:2b:d3:8a:46:6d:83:eb:71:ca:e4:5c:70:8b:7a:13:af:
34:1c:a3:6e:1d:a2:cc:81:68:d0:12:20:76:30:ad:fb:7b:eb:
b0:f5:c4:f8:43:16:9b:75:f4:79:87:96:e1:44:64:d2:83:25:
18:ab:35:d1:9b:17:71:05:a2:53:3b:ec:1a:f7:1b:62:7b:30:
ed:dc:74:09:38:88:8e:3d:45:b9:61:11:a5:b7:0a:d2:8b:ec:
b4:4b:f3:65:01:92:c6:81:29:4b:2d:8e:52:d6:c4:e0:65:82:
5f:9f:21:1a:c8:cf:4e:53:be:7e:82:37:14:4d:f7:ed:9f:5c:
8e:bb:0e:ac:4a:83:1a:27:58:ed:c5:99:d6:1d:a2:41:45:0b:
2d:f0:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:25 2026 by rpki-client