Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File: vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier: HVdms7CSOgr+19mClKMrKvd2uyLCbMPZnzyK3ZdKtsE=
Subject key identifier: 7C:C4:24:33:9B:77:18:B0:1A:4A:A2:09:18:11:A6:32:CA:78:99:24
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer: /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial: 019D99D0972BB429A6AC127EC273CD0046B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number: 08ED
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: 0+w08ijppXFFPRLT55yjlVD02Kqc1uK1ca0Q3CQ7OYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:97:2b:b4:29:a6:ac:12:7e:c2:73:cd:00:46:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=7cc424339b7718b01a4aa2091811a632ca789924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:6b:10:4a:10:2b:16:bb:ab:0a:2c:75:cd:
0e:9e:50:c4:03:44:ff:6d:34:91:83:b1:1f:39:12:
61:22:51:5d:2a:f1:69:b8:41:75:3a:f7:18:65:d0:
07:09:00:c3:9d:d1:b1:b6:39:a9:99:d4:4f:93:af:
79:b1:e5:7a:a2:8b:09:d2:fa:2b:6d:10:33:db:6a:
d9:5f:a6:23:00:e5:91:02:c1:c8:7a:93:dc:1e:9a:
0b:b4:aa:aa:90:b6:a9:13:22:fa:85:ba:76:57:0e:
20:0b:dc:18:39:0e:0c:93:40:da:52:0b:1e:25:83:
4c:4b:a9:7d:46:5d:88:f7:64:01:17:e0:cb:b3:6f:
1b:7c:bf:47:97:c2:58:7c:0b:d9:08:02:44:8e:9c:
66:57:68:c6:4b:04:ba:dc:a2:a4:a7:e7:d7:55:62:
76:f7:77:c5:df:82:a8:95:bc:67:1c:8f:ec:e6:9a:
15:b1:42:41:9a:14:95:1c:48:95:a9:78:8f:0c:bb:
88:d0:f7:ae:03:fe:ed:66:24:58:fa:57:2e:aa:ae:
2b:4a:90:cb:f7:c0:5b:e5:c5:c7:5f:75:75:c6:2a:
0c:48:98:a1:8e:37:2d:87:4e:3c:c0:9c:a2:1f:73:
75:0c:ca:80:30:04:d1:0d:6e:ef:22:09:8c:cd:be:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:24:33:9B:77:18:B0:1A:4A:A2:09:18:11:A6:32:CA:78:99:24
X509v3 Authority Key Identifier:
keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e0:4f:69:00:df:f3:38:4f:01:38:f7:4c:2c:da:41:3a:f7:
d1:c7:39:e8:1f:e2:3e:4e:fd:c4:cf:96:9d:c8:55:4e:97:a5:
85:c3:76:0a:c8:07:f3:5a:f2:aa:2f:d6:3c:00:ff:00:5e:f8:
c4:6d:bb:e0:71:c7:e3:ab:fa:04:5f:1e:e5:32:29:d6:fd:c9:
8d:53:50:9c:cf:aa:98:1e:25:00:cd:2e:f3:ad:7e:43:bc:32:
df:de:eb:cf:88:e8:73:58:6f:04:fd:33:54:10:60:a6:8e:10:
20:cc:d7:b1:e9:c0:b0:bf:2e:2e:6d:95:76:bb:cd:7e:d5:13:
a6:3b:b0:d1:5a:83:c8:09:99:36:cb:f6:0d:7e:ad:99:c5:1c:
a4:3e:ca:1b:03:b9:4f:84:0f:1d:08:46:8e:5d:7d:66:a0:5b:
30:4d:f8:b8:cd:80:99:8e:bc:28:82:61:8b:32:30:48:f4:9b:
cb:fa:33:b5:88:3f:93:75:07:73:2f:be:8e:a5:1c:c3:f0:c2:
0d:d8:ef:03:cb:eb:9c:98:16:1b:1c:30:9d:32:76:db:07:43:
0b:83:27:a3:51:53:ee:f8:e8:12:83:9d:1e:27:e3:97:af:cb:
a8:c4:31:ec:9c:c0:93:23:bd:c7:8d:98:f4:e1:69:bd:b8:d2:
8a:cb:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:13 2026 by rpki-client