Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: 4zpoGa45Q2sIBOwLcDnsKA9ldf/GIcs8/fJLjGztwDY=
Subject key identifier: 36:87:17:58:57:77:9B:7B:5F:86:A1:26:64:AB:53:35:67:47:3D:0D
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 019CAB6AC5F574EFFCE5D34052C4B6702163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:27 +0000
Manifest this update: Sun 01 Mar 2026 22:00:27 +0000
Manifest next update: Mon 02 Mar 2026 22:00:27 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: 9bkKDHYvpPTSCgrEtxizIwRie2FJFSCXP6Lw3Eyaw54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c5:f5:74:ef:fc:e5:d3:40:52:c4:b6:70:21:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Mar 1 22:00:27 2026 GMT
Not After : Mar 2 22:00:27 2026 GMT
Subject: CN=3687175857779b7b5f86a12664ab533567473d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:b9:3e:b3:e3:30:9f:7d:59:d5:c0:03:d8:
99:e8:47:bc:2d:88:a5:a8:0d:c3:a6:07:b4:75:39:
2e:81:62:5f:9a:44:da:37:fe:ab:e3:9d:d0:2e:26:
8a:1f:cc:ac:96:44:02:ef:5f:ea:3d:07:68:63:1c:
e3:a8:bb:f9:fe:12:d6:ab:5e:15:45:3b:42:5b:3f:
2d:8c:24:de:25:2b:a0:29:76:83:80:8e:d1:2a:37:
3c:e9:66:4d:4b:19:44:97:8c:a9:4a:79:21:db:5a:
ac:4e:aa:d0:3d:74:63:7d:16:3b:08:d2:71:39:e3:
7a:44:09:3a:c1:87:a9:a4:f4:d0:25:db:bf:ff:5b:
44:12:a3:71:03:1c:da:a7:0f:aa:4e:3c:66:ba:f8:
11:f7:7a:80:5d:3d:55:0a:4e:85:b2:b2:10:4e:53:
48:24:89:b7:ed:70:dc:22:6a:3c:e2:82:47:e8:a8:
c3:93:92:9f:b6:87:57:ee:e7:47:97:ac:bd:0b:e2:
2b:0d:e3:c9:aa:03:d0:67:db:50:c8:68:c2:79:b9:
33:89:e5:54:a6:67:ea:41:b5:ed:b0:ac:03:86:11:
2b:9e:45:1d:c8:e8:ff:10:cc:1c:af:b7:72:9a:2a:
a6:7a:70:f4:66:1f:31:ba:ff:82:9d:87:5c:ba:58:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:17:58:57:77:9B:7B:5F:86:A1:26:64:AB:53:35:67:47:3D:0D
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3f:58:31:04:24:fc:61:2f:a7:6f:ab:f1:26:75:f9:b8:83:
10:11:82:e3:84:d0:c3:6f:e3:94:f4:65:a8:a9:d3:4c:23:4d:
7c:06:2e:93:98:b8:f2:87:e0:9b:a1:59:9d:67:33:53:a7:6c:
71:b7:49:73:1c:fb:c3:83:85:13:34:72:85:74:3b:fb:43:9b:
8e:c5:c4:29:0d:03:86:c1:cc:7b:7c:ad:48:22:dc:d5:06:46:
2a:58:09:66:97:31:86:c2:25:15:48:e6:6d:2d:21:51:f5:0d:
be:ee:1b:95:2d:18:0f:b9:56:06:c2:10:03:32:6f:19:fc:20:
82:eb:d6:84:03:66:46:a8:ae:bb:cd:af:2c:c6:18:93:23:5d:
5e:80:e0:08:f8:d9:a7:c7:c5:80:13:ef:96:58:de:dc:1e:5a:
4e:a9:64:f1:56:4a:21:5e:b2:9c:9c:95:43:c0:d3:ec:b0:5e:
39:d9:6a:b6:cb:3f:07:14:f4:2d:a7:04:2b:35:0d:2d:b9:8b:
6b:4c:ea:26:04:9f:2c:7f:6b:ad:30:c9:2f:b6:41:70:2c:34:
3e:30:e1:2f:4d:1f:9c:d3:78:ad:6a:8a:d5:f8:36:b3:c7:95:
9b:c6:a6:f9:96:67:23:c4:5b:2a:2f:cb:d7:24:5b:92:f1:9a:
0b:27:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:31 2026 by rpki-client