Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: LIWr6FottkmYMBCJYcZaBIKKMbz4jlwP5xKzSoEYbTc=
Subject key identifier: 9C:7F:7C:65:F7:05:D8:52:D5:D2:3E:5B:A9:08:A3:14:32:E1:A9:00
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019D27043D29A64B6DDF9728E2C5DAACAF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0481
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: t0hwMrsW42CEBxtKS7fgnimNZesobIviEO7faCO6jJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3d:29:a6:4b:6d:df:97:28:e2:c5:da:ac:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=9c7f7c65f705d852d5d23e5ba908a31432e1a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:f0:3c:dc:fc:64:9d:74:54:0e:d9:48:3f:
27:09:5c:67:d7:25:91:2e:3b:92:8b:d4:a5:cd:d8:
71:19:ff:f9:77:b2:e8:a9:3e:2b:31:b7:02:08:68:
62:aa:28:ac:8a:d0:ca:65:fb:fb:04:39:d0:e6:d0:
ae:0a:b4:1c:e2:fb:ce:aa:fd:41:ce:e2:08:0e:44:
81:ec:e5:35:35:31:0c:4d:f8:65:ab:86:6d:73:70:
2d:75:46:d4:2a:d7:11:eb:86:6f:29:0a:2c:e3:8d:
28:34:05:69:d1:5f:ff:72:3b:5e:ed:c5:54:db:56:
3e:43:03:20:59:56:20:74:e8:a5:2c:3e:0d:17:2e:
16:39:52:4f:92:e8:b5:ee:7b:1a:02:74:b9:79:af:
ac:fa:ed:34:d2:c9:9d:65:ac:6a:0f:6a:92:dd:6a:
ee:0a:94:cf:8e:1c:4c:89:4f:a7:ee:9f:ef:31:94:
e9:63:84:13:1e:53:13:72:b1:6e:22:ce:b8:f8:ee:
26:8f:1f:d5:b4:2e:54:8e:52:89:b4:bd:52:5a:57:
09:a4:88:31:f5:55:63:a0:c7:24:f2:01:51:42:25:
1f:e6:0c:ac:28:4b:fe:be:96:54:d5:55:9c:53:c7:
24:0e:9e:40:3f:62:df:6e:a7:2c:fd:c1:b0:48:da:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:7C:65:F7:05:D8:52:D5:D2:3E:5B:A9:08:A3:14:32:E1:A9:00
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ff:b0:2c:f0:f1:d9:6a:17:02:82:81:16:d1:55:1c:a0:db:
2b:a8:a9:77:61:b3:d5:72:0f:39:9a:88:28:4a:e2:01:27:ad:
08:62:93:dc:e4:42:57:38:43:0d:f5:41:2a:74:3d:38:ec:b0:
9d:67:77:75:1a:53:b4:b8:3a:07:6d:9a:cc:74:3b:ae:09:f3:
67:67:3e:b0:23:94:49:9f:55:1b:1e:4d:e6:5c:b1:f8:d0:dd:
4a:ba:ca:8a:d3:ef:f2:91:f7:4f:0c:ba:5a:11:d9:57:21:17:
2d:64:e9:ad:f5:e6:a9:fb:45:ff:52:96:3a:57:f4:2c:cf:94:
f2:14:20:c7:fd:7b:dd:56:77:21:38:68:ee:dd:a2:3e:ef:e2:
05:01:0c:2d:7f:e5:ab:ce:d4:85:ea:0c:b8:7f:61:44:ab:7c:
7b:7d:dc:35:08:b3:f7:5f:91:4b:fe:c9:ad:dc:79:d6:81:1b:
2a:85:84:32:bc:bb:c9:13:ad:8e:61:e6:8b:83:d3:5c:bf:52:
a8:02:60:e8:65:d4:d5:7b:02:e4:f1:dc:76:8a:36:7a:3b:59:
c1:d0:b8:6f:2f:f3:bb:55:02:bf:cb:22:a6:c4:da:bd:35:ed:
10:f4:ad:b3:5e:b5:2b:b4:75:40:b5:1f:ad:1e:64:8c:3b:57:
2f:09:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:54 2026 by rpki-client