Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
File: vtJXlaaCsRmplIBal2V4U9dUoFw.mft (raw, json)
Hash identifier: XFIxdE85BnYGcfzJyJREYOMHk4SRNwOltAq/qYcGES8=
Subject key identifier: 2D:34:19:5E:C9:DE:63:76:EF:EA:48:83:9A:04:E9:DF:D9:79:CD:F9
Authority key identifier: BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C
Certificate issuer: /CN=bed25795a682b119a994805a97657853d754a05c
Certificate serial: 019CABD9526458CB593BAB6421F78A920C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
Manifest number: 0CD4
Signing time: Mon 02 Mar 2026 00:01:12 +0000
Manifest this update: Mon 02 Mar 2026 00:01:12 +0000
Manifest next update: Tue 03 Mar 2026 00:01:12 +0000
Files and hashes: 1: vtJXlaaCsRmplIBal2V4U9dUoFw.crl (hash: Ei0GEv7iZHcg3U9J2WenMfkweV7/7/lWHNnwHj8Hka8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:52:64:58:cb:59:3b:ab:64:21:f7:8a:92:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bed25795a682b119a994805a97657853d754a05c
Validity
Not Before: Mar 2 00:01:12 2026 GMT
Not After : Mar 3 00:01:12 2026 GMT
Subject: CN=2d34195ec9de6376efea48839a04e9dfd979cdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5a:10:f4:61:00:67:a3:6a:39:eb:38:35:f2:
99:05:84:0b:3d:ab:f6:1e:66:67:08:69:a0:e7:01:
a7:5f:de:d5:d6:19:67:b5:17:a6:e9:40:08:a2:c6:
df:50:90:9e:94:69:52:b2:b9:c4:aa:7f:d7:b0:5a:
96:2d:24:9a:e8:3b:dd:0e:05:dc:86:30:13:33:da:
28:28:f2:45:61:90:d0:a7:fd:ad:9b:4c:81:2e:a7:
70:29:33:6d:20:9d:e8:dd:4c:d8:dc:52:23:d0:48:
99:9c:c2:a1:66:b7:68:73:e3:cc:e2:23:96:8f:be:
b2:2c:f1:71:5a:ab:75:10:3e:48:59:ca:b2:e2:9e:
7d:13:e8:4a:fd:4f:dd:58:5f:b5:74:d3:01:3c:01:
8c:30:a1:52:e4:6d:7b:f6:06:7f:87:98:4d:37:ad:
7e:4c:bf:36:3e:77:69:67:18:e2:57:7b:c5:72:5b:
ab:a5:f2:17:78:c7:b2:70:26:12:46:f5:fd:7a:13:
55:e8:98:c0:a6:77:08:18:88:a9:a2:f6:1a:a2:38:
17:52:2b:fb:ff:20:43:15:e5:c3:ef:89:8e:81:36:
d1:f1:80:bc:38:ef:ef:50:69:6c:27:1f:32:55:19:
64:29:03:4e:4e:11:c4:8c:47:3f:d1:6c:fd:c6:76:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:34:19:5E:C9:DE:63:76:EF:EA:48:83:9A:04:E9:DF:D9:79:CD:F9
X509v3 Authority Key Identifier:
keyid:BE:D2:57:95:A6:82:B1:19:A9:94:80:5A:97:65:78:53:D7:54:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vtJXlaaCsRmplIBal2V4U9dUoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6bd104-25f6-4826-b234-11d0f20e8cb0/1/vtJXlaaCsRmplIBal2V4U9dUoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:af:0f:03:eb:8e:90:97:df:17:e8:00:e8:48:26:98:3b:e5:
8e:63:bc:ef:31:b4:c9:23:8c:5f:51:40:2d:ba:16:cc:79:ce:
82:4f:7d:e2:9a:ec:75:83:1e:a5:24:95:62:81:c8:31:96:c8:
4a:ee:ee:ad:ba:33:f7:d8:68:40:ee:b5:ec:d7:c9:44:89:07:
03:74:c9:d3:f9:c2:bd:6f:45:b2:b7:9c:28:16:e9:e9:58:c5:
f5:9a:a5:c9:c0:b6:b0:98:1c:9c:9b:f5:be:89:6c:03:66:81:
3b:dd:71:50:12:01:9e:14:77:ee:2b:64:80:51:ce:24:d9:7c:
95:71:0e:f9:ca:52:c6:f1:cb:56:ec:40:4c:28:27:9f:28:0e:
e7:e1:8d:93:0f:67:3b:af:e3:68:92:51:10:52:e4:7c:45:92:
0f:36:91:57:42:8a:05:09:e2:3f:d9:d9:ac:8a:1c:1a:6a:1f:
2b:7e:03:f9:aa:0b:75:03:98:ad:1a:94:40:fb:9d:7c:78:96:
db:f4:6a:82:bd:05:8a:84:fe:09:a8:26:f4:f0:72:fd:43:38:
3b:73:cc:c6:3e:25:4d:b5:e5:18:df:16:5a:0e:99:56:e6:d6:
17:c6:ec:47:50:b2:81:da:27:99:1e:87:1c:33:a9:5f:1e:e7:
66:2e:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:12 2026 by rpki-client