Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: Owo0OKZVvVbIa4lJChZfxVhQe/yAv0O7TNkfTcq1vhg=
Subject key identifier: 4D:93:4B:27:DA:6C:AE:CD:86:95:ED:72:29:D2:31:38:26:BD:FC:74
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 019D99D015293D6F4D06393CC7EEFCE43CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 09A3
Signing time: Fri 17 Apr 2026 05:00:43 +0000
Manifest this update: Fri 17 Apr 2026 05:00:43 +0000
Manifest next update: Sat 18 Apr 2026 05:00:43 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: C5kQZPTb3RE5MGMcFZLM/9TiIpRJJPBFnWareEza6do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:15:29:3d:6f:4d:06:39:3c:c7:ee:fc:e4:3c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Apr 17 05:00:43 2026 GMT
Not After : Apr 18 05:00:43 2026 GMT
Subject: CN=4d934b27da6caecd8695ed7229d2313826bdfc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:be:ea:55:f0:d8:e1:da:92:a4:42:65:1c:
c9:67:4f:24:f5:04:20:bc:a6:5f:e2:1d:08:d2:b3:
dc:c2:ef:ad:13:b9:45:1d:92:ac:0c:f4:97:74:1d:
3a:ac:3e:6d:56:67:d6:b4:16:6d:25:f8:a7:48:be:
56:83:25:75:1d:90:3a:73:e2:47:c4:25:39:f6:d3:
61:6f:1b:41:e6:f0:9b:ad:19:f5:9b:1e:7a:a3:36:
97:24:b8:af:a9:27:1b:48:c9:4c:f4:8f:e0:50:16:
52:fb:a4:83:3b:8c:85:69:bf:c9:dc:bb:f2:4d:f3:
1f:0c:a7:5b:d0:75:d2:d0:71:1b:c3:4f:46:e0:2f:
57:18:3f:7f:7d:dc:9d:35:97:aa:2d:60:38:86:21:
60:18:3f:1e:68:40:c3:cb:58:90:09:d4:52:a1:d0:
54:cd:ad:73:fc:6f:4e:ab:a2:69:5f:4a:68:6a:ca:
6e:99:74:47:dd:b6:71:c2:b6:ad:98:3f:90:d7:c5:
35:83:0e:bb:89:09:c8:7c:bd:56:76:5f:f7:63:0e:
a8:7a:d5:cf:bd:a5:88:02:b8:2b:d1:bd:b4:c3:7b:
14:6c:5f:b5:f8:8b:f9:ab:68:6e:b1:14:77:a4:b9:
ef:a6:ca:30:ea:7a:34:1c:60:13:be:13:59:39:72:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:93:4B:27:DA:6C:AE:CD:86:95:ED:72:29:D2:31:38:26:BD:FC:74
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:32:56:0f:3d:80:14:63:95:d7:bc:a6:52:df:67:b5:2d:d3:
cd:a8:ba:9c:4e:a0:a4:08:59:ab:93:e5:06:fa:fa:32:ac:1c:
1b:d1:a4:a1:aa:a9:aa:8c:c1:37:9a:49:dc:79:71:4d:7f:68:
32:d4:4f:ea:89:09:79:47:30:40:58:03:57:fe:6d:70:ac:21:
58:b7:fe:9c:32:27:71:b5:1d:aa:af:88:a0:f3:ad:70:e1:de:
ee:b0:03:14:bf:73:49:7a:c4:23:c6:47:0b:a4:ea:33:13:71:
a8:53:e1:90:e6:35:6a:91:8d:3c:c9:f4:3e:3b:03:b4:8e:a0:
6f:51:2a:69:60:03:75:64:48:e2:1f:47:34:9c:d9:ba:a3:4c:
3f:c6:9d:23:b8:ad:31:11:84:8e:3b:0b:c2:bb:9a:a3:b1:b9:
3e:c0:af:98:c5:75:38:80:e1:cb:28:b7:08:6c:1a:3b:8e:eb:
00:59:91:3a:f6:30:0b:e4:b4:69:e0:11:66:bd:3c:38:0b:2a:
63:6e:e9:71:40:28:08:b4:ac:0a:73:fd:80:43:72:3d:f1:ee:
79:49:ef:ce:a3:67:21:22:43:38:e7:1d:c5:25:c5:c1:8f:e4:
44:2c:28:9e:ce:65:a4:74:86:f4:dc:86:3d:bb:e7:d1:f2:19:
18:2b:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:40:46 2026 by rpki-client