Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier: rJOgC6gxfHOKzD6XPLDP/KPhgU1BHBffbVlOF/51d8M=
Subject key identifier: 3E:F4:B9:9C:FD:DC:B0:A0:E5:20:13:E1:71:0B:75:D2:CD:46:E3:54
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer: /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial: 019D2929172D0C2434F20A0848EC95318BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number: 06A9
Signing time: Thu 26 Mar 2026 08:00:51 +0000
Manifest this update: Thu 26 Mar 2026 08:00:51 +0000
Manifest next update: Fri 27 Mar 2026 08:00:51 +0000
Files and hashes: 1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: 2iRGsjF1uF47aVs4m50GyBZkiMczQ/TgV8+sDS5Odx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:17:2d:0c:24:34:f2:0a:08:48:ec:95:31:8b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Validity
Not Before: Mar 26 08:00:51 2026 GMT
Not After : Mar 27 08:00:51 2026 GMT
Subject: CN=3ef4b99cfddcb0a0e52013e1710b75d2cd46e354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:ab:ad:69:fa:2f:97:86:c6:8b:17:5f:2a:
ed:29:6e:8d:fe:63:34:fa:b4:9b:17:0e:55:0a:55:
85:e2:dd:b9:96:fe:45:82:bf:a1:0b:18:05:de:a5:
3c:6f:c7:a0:bc:3a:e7:28:09:b2:a3:0f:c6:06:e6:
17:e6:1d:f1:1c:8c:af:3b:18:e7:c9:60:ac:d1:f5:
54:5e:35:22:8e:c5:3f:e8:97:00:78:29:32:c4:e9:
33:c2:6d:55:37:78:dd:9d:70:6f:f5:c4:29:8e:65:
d3:76:df:ce:34:12:98:c8:de:04:03:14:65:b8:b9:
b4:08:a8:3e:8f:a9:20:de:d5:09:4f:29:e3:2c:06:
90:ab:8f:79:0a:1c:74:79:7b:d4:12:f9:81:f9:cc:
4c:89:11:16:af:17:8f:0e:bd:89:2d:9d:cc:c3:ce:
8e:11:43:7e:01:68:e2:af:bd:f2:18:72:c8:78:a2:
68:c9:7c:d0:3e:7b:57:48:c7:80:b7:4f:59:35:62:
71:fa:02:4e:88:7a:e9:ef:ae:cb:63:92:a6:dc:a0:
4e:3f:44:f1:3e:2a:5f:ce:c9:7a:1c:d6:19:73:ce:
17:80:9e:de:2c:c3:24:66:a6:31:41:8f:d2:0c:92:
30:4d:40:b4:b1:34:18:1f:b5:96:ca:84:61:52:0f:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F4:B9:9C:FD:DC:B0:A0:E5:20:13:E1:71:0B:75:D2:CD:46:E3:54
X509v3 Authority Key Identifier:
keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:96:a6:d3:a6:88:8f:a7:1c:10:0a:2f:71:2a:a6:68:45:62:
1a:b9:cf:fa:45:f3:8e:16:e6:65:72:46:06:94:82:58:ec:a3:
4f:e0:32:c6:df:d7:d5:88:4c:8a:db:8e:6f:8a:e0:d9:98:c7:
52:43:47:75:c7:b4:17:dc:fb:e8:50:53:2a:0b:45:93:bb:ca:
39:c5:ff:d8:b6:4f:64:f3:aa:68:66:99:92:7c:5e:88:80:86:
01:87:28:75:dc:9e:bf:ca:50:42:06:93:12:e7:14:b4:57:2b:
b2:1c:b8:3b:b9:ca:d9:52:1f:53:2d:fc:b9:79:eb:a3:8d:e4:
d4:0a:80:33:f6:70:3d:97:87:bb:81:02:62:5c:96:82:d2:9e:
52:05:d0:30:ec:ee:c0:ab:52:24:00:9d:8a:01:76:38:e3:6d:
ab:ab:4e:c5:7e:26:85:a6:8e:e7:27:87:fd:49:8e:e3:23:9a:
b4:3b:a6:69:31:d9:30:51:1b:4a:d7:93:19:60:78:1a:41:68:
61:76:f6:93:17:b9:d3:6a:27:f3:54:e5:fd:eb:4c:22:63:d2:
82:69:b3:b2:03:43:87:9f:79:e5:23:83:36:c4:fe:20:ac:14:
6e:f7:ca:3d:aa:4a:f3:d5:f0:fd:49:f9:c0:14:eb:1c:18:d5:
60:36:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:32 2026 by rpki-client