Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File: vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier: JTFAvVk5pXmo/wnvOft0pv2hSiFzAMHooFuJRlRYKa0=
Subject key identifier: 06:82:B9:C6:F7:51:52:A4:44:E3:51:DE:B8:D0:72:F4:96:0C:DD:0D
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer: /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial: 019D9AE339BFF4823D70C5E835A559DEF312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number: 0A06
Signing time: Fri 17 Apr 2026 10:01:15 +0000
Manifest this update: Fri 17 Apr 2026 10:01:15 +0000
Manifest next update: Sat 18 Apr 2026 10:01:15 +0000
Files and hashes: 1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: si1idArsSIfpJDzVdRRGcyOXA65pdo5COwzeZ9AHUE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:39:bf:f4:82:3d:70:c5:e8:35:a5:59:de:f3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
Validity
Not Before: Apr 17 10:01:15 2026 GMT
Not After : Apr 18 10:01:15 2026 GMT
Subject: CN=0682b9c6f75152a444e351deb8d072f4960cdd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:ad:4f:0f:5d:aa:4f:5e:54:b6:98:e9:70:
97:48:76:39:aa:56:90:b9:23:7e:7f:79:44:4e:fe:
93:28:20:d0:4f:85:92:ab:41:19:c6:5f:2f:01:98:
ae:75:ed:3a:36:47:f3:e2:8e:a2:21:0b:33:10:84:
a8:0f:44:cb:25:e9:f5:23:af:28:53:56:4c:e5:68:
e8:40:c5:22:48:11:28:e2:43:ef:40:b9:47:39:f7:
68:4f:98:fc:ea:25:80:96:7c:04:a1:62:51:4f:d6:
ed:15:5b:db:a8:57:f7:14:99:94:87:f0:ff:3f:d7:
c6:57:62:43:bb:1f:4d:a4:9d:ec:7a:89:86:2f:89:
1f:da:00:05:63:39:f8:99:b7:12:e3:61:a1:ef:94:
7f:05:13:50:10:ab:f4:07:69:17:15:6e:4c:24:3e:
54:c1:93:4e:67:2a:65:dd:6e:0f:be:47:f9:b7:aa:
7a:27:f9:f4:32:65:6b:c0:dc:88:2d:4f:7c:58:91:
cd:dc:8c:e9:fd:93:7b:a6:b9:91:ff:72:bc:af:de:
03:eb:3c:f5:a7:a1:14:17:9f:db:09:9f:53:89:75:
f8:82:39:b2:8e:b9:ff:d6:96:25:b9:db:a5:85:e8:
3a:d0:58:b9:0a:c7:69:4e:69:34:97:31:58:6a:04:
60:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:B9:C6:F7:51:52:A4:44:E3:51:DE:B8:D0:72:F4:96:0C:DD:0D
X509v3 Authority Key Identifier:
keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fa:44:cf:eb:c6:2d:f4:ce:fc:de:41:74:14:df:2a:b2:24:
d5:90:8e:36:25:e4:65:42:fa:1a:cf:42:e2:cf:76:9c:3d:ba:
73:1c:14:61:4f:d8:c1:49:fc:ca:03:61:21:9e:ab:31:5d:36:
08:32:ef:e8:07:a8:45:28:8d:26:9e:38:e4:42:e7:fb:4c:f1:
f4:94:4c:4f:9c:9a:ca:9b:71:3a:13:3a:2f:ed:27:4c:6b:8a:
03:eb:35:16:74:04:30:a8:79:c0:44:17:9a:fa:97:25:95:f4:
3d:5e:89:f5:31:bf:5d:cc:16:4b:d7:ec:86:cd:4b:77:98:ec:
8e:33:f5:07:d3:cd:9b:fb:15:ce:f5:04:ec:44:d2:2c:1a:5a:
96:c7:9a:2d:0b:00:1f:a5:d2:4e:b9:20:53:e3:0b:fb:c0:6f:
b3:69:ee:89:94:1f:d1:f2:25:48:32:16:47:db:25:6e:63:0c:
19:ba:23:36:e6:9d:b4:95:fe:aa:c2:56:4e:06:ca:6e:63:d0:
3e:4f:1b:66:45:37:3e:92:2f:ba:bc:ca:f2:4a:20:41:bd:89:
6c:05:57:07:b9:f9:8b:be:6b:f3:55:88:3a:c0:c9:f7:e9:9d:
96:b6:fd:b8:14:52:ce:8d:d9:6e:a5:75:97:45:cb:46:65:ed:
94:8e:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:14 2026 by rpki-client