Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: Ij3QY2k9FNFAlIQSlHoHDyHjlBFHwVTSZon0INDGqVQ=
Subject key identifier: 91:C1:CE:F2:74:2A:C5:F8:4B:8C:81:A9:7A:3B:4B:BE:72:44:15:7A
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 019CAD59E9D159C54CAE114C96C531E574ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 0A55
Signing time: Mon 02 Mar 2026 07:01:16 +0000
Manifest this update: Mon 02 Mar 2026 07:01:16 +0000
Manifest next update: Tue 03 Mar 2026 07:01:16 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: bvag454a4ZYi9sYIzY7v5nyIO4E8XjRJ2LlIDABFZEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:e9:d1:59:c5:4c:ae:11:4c:96:c5:31:e5:74:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Mar 2 07:01:16 2026 GMT
Not After : Mar 3 07:01:16 2026 GMT
Subject: CN=91c1cef2742ac5f84b8c81a97a3b4bbe7244157a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:2d:ce:41:cb:0b:b9:1d:99:a2:3a:24:cd:
4a:cd:e8:cc:0d:fe:6b:b1:9e:6c:0a:fa:b8:63:53:
8b:d4:a8:f1:5e:35:07:5e:9e:db:25:dd:9b:cc:7e:
3e:b0:c1:42:d4:e0:84:64:a1:4d:02:16:5a:bb:f5:
2b:d6:d9:65:ce:77:31:7e:04:c8:c7:af:25:2d:f4:
93:d0:0f:a5:e2:c1:32:70:74:4a:0b:ec:94:a6:f2:
93:4b:45:6a:29:5a:0a:4b:51:9b:9d:94:38:e6:d7:
57:d8:2a:0a:26:25:f4:e8:b0:87:d5:04:be:64:3e:
86:19:1d:80:08:03:45:ce:e7:e8:8a:4b:5b:da:d4:
e5:b6:f2:ff:7e:3b:39:b5:69:89:a5:23:11:96:39:
bb:2d:36:33:db:8c:7b:32:41:65:1b:56:f9:c1:51:
b3:bc:f9:7b:26:f8:7b:92:2c:b4:8a:21:4b:b7:34:
96:55:91:68:ca:1f:db:87:fb:64:db:2f:1d:c9:d8:
9e:f1:3f:18:ae:d9:90:6e:37:67:f0:33:99:e7:39:
78:be:b1:ab:77:ad:4b:b1:95:f6:b1:5f:93:1e:0f:
73:c5:c8:5b:2e:8f:60:a0:05:3f:56:f2:4d:f6:d4:
4e:28:e8:ff:2c:ad:6e:5e:c3:bb:3d:63:3a:c1:10:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:CE:F2:74:2A:C5:F8:4B:8C:81:A9:7A:3B:4B:BE:72:44:15:7A
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b6:2c:ec:66:be:4a:3a:38:17:27:ac:85:13:ba:1b:c3:d8:
41:e1:8e:bd:0b:25:b2:a1:6b:af:92:f2:9b:79:55:dc:d4:55:
2a:ba:0a:ee:1d:f4:1c:48:2e:00:d9:df:4c:99:7e:05:4f:38:
1d:a0:bc:36:18:9c:74:30:cc:c9:1c:a0:95:c4:82:ce:95:18:
ae:84:89:f2:c1:d5:81:6f:a1:c7:b5:f5:fb:d1:18:13:de:f2:
0f:8c:15:50:41:9b:ce:3c:bd:43:bc:66:2c:38:da:76:b9:3a:
80:f5:96:df:82:a4:61:13:bb:64:de:96:0f:d3:95:73:d6:89:
12:7e:b3:09:df:79:cc:76:0f:d3:3f:fd:5f:7b:a5:1b:a0:cd:
a2:cf:7a:65:02:57:9a:54:02:ef:83:af:53:97:df:ce:89:ee:
ea:9b:fb:7a:52:ee:72:b2:32:42:f0:94:e6:80:bc:0a:cb:d8:
23:57:fa:d8:b7:1a:37:36:db:bb:0e:b7:9e:94:62:2c:50:09:
1f:25:58:71:84:2d:1f:5b:fe:0a:d8:74:5f:23:c2:6a:1a:9f:
ef:78:93:38:b6:ba:e2:72:01:34:bd:63:9f:3e:60:e2:11:aa:
df:9d:25:ba:c0:8c:62:fa:ff:66:a7:47:7c:04:2f:f3:49:76:
2b:23:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:37 2026 by rpki-client