
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: Obvx+HT0uXDo09IdRcatRhI1yE26Ll08IimQljZz+4Q=
Subject key identifier: 0E:BF:C9:5E:03:B4:99:B6:83:FA:16:0D:FF:51:FB:A3:DF:27:B8:C2
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 019CAA8F79EE488660956DA2F4D5B48FEA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 06A1
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: wRI86Y9dgaOjqVVAu1SzP1Tz9SseWovmJI5gvMdlXDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:79:ee:48:86:60:95:6d:a2:f4:d5:b4:8f:ea:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=0ebfc95e03b499b683fa160dff51fba3df27b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:a3:73:dc:99:18:c3:cf:6f:62:4a:34:b8:
49:22:e5:99:e1:d9:37:8b:aa:b2:c5:12:0e:98:32:
2f:09:a3:a5:96:9d:8a:0b:94:fd:69:a6:c9:fc:ed:
e9:d7:f7:8d:76:73:41:86:1b:a8:d9:95:fb:86:5a:
72:e9:03:dd:b8:58:dc:ec:5f:97:c9:7a:70:2b:e7:
3c:79:7e:ab:c3:a2:ce:32:63:5c:69:29:56:4f:84:
80:f6:b3:fa:14:48:96:b3:f7:e8:4e:c0:39:08:4a:
26:1a:3b:79:e6:b5:d2:e6:12:71:23:c1:8c:ed:94:
14:12:ec:57:9e:33:8e:83:38:26:08:a1:17:5b:46:
f4:46:08:a2:5c:ef:a3:96:5e:67:63:e2:2b:fb:e5:
0d:aa:79:82:09:77:20:d9:99:09:64:b6:d3:d5:b8:
33:86:c8:11:c3:be:72:61:38:3e:6d:6f:d4:22:5d:
49:9c:6f:f4:c4:bb:9b:ab:49:2f:1d:71:db:13:4e:
f8:d5:61:5b:d0:6c:f5:93:c6:d9:b7:55:bc:7b:46:
c3:76:aa:77:63:58:55:f3:c1:44:44:b3:ae:07:6a:
46:99:ce:b7:eb:ac:18:38:1b:e2:74:d3:6b:bd:fe:
eb:01:4e:8c:82:2a:7b:cd:d9:18:79:c8:71:e8:1d:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:C9:5E:03:B4:99:B6:83:FA:16:0D:FF:51:FB:A3:DF:27:B8:C2
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cf:64:45:a9:f3:48:85:19:21:d9:a4:08:d7:2e:79:b3:79:
9d:bd:98:51:9e:6b:46:e1:99:80:a1:2a:fb:37:f3:cd:ac:97:
6a:99:e3:fe:fc:6a:7c:99:15:f7:4c:33:8b:a7:75:d6:e7:b5:
15:00:cb:17:83:50:3f:37:af:47:03:f6:56:b8:48:b0:08:60:
e5:86:00:51:a0:28:ae:27:8f:7e:7b:51:42:e5:c5:b9:de:ee:
b5:a3:18:cb:d1:63:a4:92:86:96:98:0b:94:fe:26:c4:bc:7a:
a4:dc:d8:0c:0e:e4:8d:f7:a4:63:be:6e:55:a4:78:92:57:28:
b8:b8:a8:cc:e2:63:8b:e4:1e:a7:f4:58:0c:a5:48:ed:06:1d:
50:23:9d:e5:09:d2:3f:f2:d4:5d:3f:ea:e1:f9:bc:ac:bd:d8:
a3:dd:e5:29:6f:94:4c:15:bf:be:be:8c:af:49:8a:51:61:88:
1f:f3:77:aa:59:6d:e5:b4:a0:54:2a:6b:44:c5:16:06:d1:c7:
72:67:3a:44:98:4d:d0:03:f2:f7:02:b8:25:74:68:03:36:96:
b4:8a:59:85:3f:51:d8:b9:17:33:1b:87:bc:ec:79:f6:5b:1b:
3b:fc:c5:fb:35:04:72:36:82:94:4f:05:9c:7a:90:a7:b8:40:
33:a2:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:31 2026 by rpki-client