Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: usK4iwNG7s2klpW9TFF2K2xlV5MFuQw/mb8YKLsFURo=
Subject key identifier: A1:93:44:91:E6:C4:8C:DE:DC:8C:4E:73:45:0F:52:2D:06:07:34:A0
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 019CAB6B8C5C7B3AB67035C2EDD71274D16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 120B
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: s/ZPkIOtCNqOGMgLvmBX/XI+IrYWa0jhog42GanoNEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8c:5c:7b:3a:b6:70:35:c2:ed:d7:12:74:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=a1934491e6c48cdedc8c4e73450f522d060734a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:2a:3f:28:76:bb:6a:c5:e3:19:05:20:aa:
04:f6:25:bc:70:6e:db:d6:4b:33:11:3c:c6:6f:8d:
8a:f1:53:ea:a7:4e:ea:30:88:78:5d:cd:8e:d2:1c:
6d:ad:a1:6b:da:f7:89:f5:e0:48:bb:02:5a:c5:fb:
74:52:98:27:04:19:f8:f0:0e:86:6b:e2:cb:94:8c:
b6:cd:0b:ca:4b:cd:5c:4d:d1:0d:11:ec:36:82:2c:
9d:d6:b3:06:6f:2e:e3:6c:74:91:15:12:4c:b7:93:
aa:cc:e3:6c:63:f0:b0:22:ce:f6:8e:89:1d:21:d2:
be:4b:1a:bc:52:da:15:19:e5:4a:d6:3b:2d:bf:32:
e8:d8:c2:3d:4c:2a:ed:0f:39:bd:5b:b6:43:48:af:
73:bd:e4:6b:59:3e:d0:8d:6e:17:4b:27:60:d8:4d:
0d:3c:11:13:d5:4f:96:22:9d:25:ae:9b:e3:bc:ee:
42:5b:e2:d9:e4:9d:fe:f8:47:0e:ec:e8:f6:7c:60:
49:5d:ef:d8:c4:6d:e3:7a:4c:52:b9:ba:8d:1d:34:
1e:d5:67:99:f7:ae:6d:64:31:2f:da:27:94:8b:3f:
ad:90:77:f7:0e:d7:64:e3:26:1e:28:03:79:d5:14:
26:99:27:32:d8:ff:8e:0d:c5:19:7c:7d:c9:7c:0c:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:44:91:E6:C4:8C:DE:DC:8C:4E:73:45:0F:52:2D:06:07:34:A0
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a2:c1:8c:4e:b6:d9:0f:d1:ef:85:2d:19:ce:a1:d4:07:9b:
ff:ec:91:cc:0c:55:39:16:57:d4:6a:23:c0:80:8e:25:45:b0:
e4:52:87:f0:29:6f:7b:6b:37:c6:a1:20:d9:6d:f3:bd:90:00:
37:18:7a:ff:e2:f7:e6:86:5d:bf:66:6f:36:a4:46:4c:06:75:
63:7a:fd:51:bd:1e:a1:de:c6:64:06:5f:4a:e4:af:ab:28:97:
3e:62:0f:fe:36:0e:ba:a6:58:ba:d8:7e:8e:15:29:0f:ee:fb:
35:6b:59:4b:45:3c:bb:40:22:97:14:d9:7e:77:5d:09:b3:12:
40:ab:53:a2:52:29:09:3a:55:1e:3c:7a:c6:42:aa:03:5a:90:
58:72:9e:ec:56:86:d4:a4:a6:21:7f:70:04:61:b4:26:d1:55:
8e:0e:0a:1f:ce:cd:d5:9c:b3:b5:ec:6a:6c:ee:40:79:33:df:
70:b7:2a:80:d1:7d:36:6d:85:d3:87:bd:54:81:09:b1:04:bf:
a5:2d:7e:60:27:e5:aa:05:67:c0:d5:57:3c:77:b8:1c:c3:0e:
06:0a:43:39:76:2c:6e:86:a6:3a:d8:09:5f:37:29:28:a0:80:
b8:15:47:c1:e7:82:a5:16:7d:27:d2:1f:cc:3f:c9:33:59:13:
0a:ad:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:35 2026 by rpki-client