Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier: xOqDnekBWddQ7gb4Lw2KvDl55pbb6X68vGmNH9w6fio=
Subject key identifier: 27:22:AE:55:1E:5B:1D:29:76:2C:C2:7A:D2:1D:0E:34:84:B0:1D:B0
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial: 019D2AE02FDA04501CE3D030D510F0403AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number: 10ED
Signing time: Thu 26 Mar 2026 16:00:28 +0000
Manifest this update: Thu 26 Mar 2026 16:00:28 +0000
Manifest next update: Fri 27 Mar 2026 16:00:28 +0000
Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: PH+NqlnPIlBrv0GChifpXyeotEth+CAcSClEh+Jo4eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:2f:da:04:50:1c:e3:d0:30:d5:10:f0:40:3a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
Validity
Not Before: Mar 26 16:00:28 2026 GMT
Not After : Mar 27 16:00:28 2026 GMT
Subject: CN=2722ae551e5b1d29762cc27ad21d0e3484b01db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:14:d0:65:dc:85:6c:57:fd:7b:eb:07:01:
d2:22:cc:5a:db:94:c0:d5:d7:b4:e2:75:a5:6b:d2:
46:5b:d8:57:be:a5:5c:3f:8f:67:fc:53:e3:31:ba:
3e:7c:e6:9f:29:46:e8:c4:b6:9a:56:43:12:be:58:
d0:4e:e0:05:84:f3:30:4c:56:05:d3:1e:f0:44:c6:
e6:60:77:2d:d9:cc:7c:17:bf:97:40:5a:b1:5f:be:
3e:e9:b0:88:c0:27:61:c7:7f:d5:c3:d3:23:d8:03:
e3:4e:0e:f8:2f:ab:aa:81:e3:b3:ba:0f:eb:18:30:
48:b6:40:ae:2f:70:a0:79:6f:53:5c:1c:95:6a:fc:
27:55:c9:fd:aa:ab:4e:7d:08:d8:e4:17:97:1b:08:
b6:bd:de:f3:40:e9:74:02:4f:35:e9:bc:af:9c:64:
98:be:b8:05:5a:d6:f9:ba:ef:6f:31:bf:38:35:41:
92:32:4b:93:de:66:e8:e1:4a:7c:a5:f0:1b:c8:9e:
25:d6:8d:63:c1:64:a5:74:f2:ca:e8:10:2e:5b:6c:
52:5d:66:5e:f9:b9:e4:28:1d:a0:e8:14:e5:04:b0:
a5:33:17:d0:ce:1a:60:19:0b:82:ec:2f:c8:53:06:
9b:31:13:2b:d5:25:73:ec:93:1e:a3:89:27:c7:6f:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:22:AE:55:1E:5B:1D:29:76:2C:C2:7A:D2:1D:0E:34:84:B0:1D:B0
X509v3 Authority Key Identifier:
keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ab:20:4f:07:17:77:43:0c:88:36:74:dd:95:22:5a:02:2c:
6e:f3:32:5e:61:02:f8:78:55:73:8f:9a:55:50:2a:f7:4d:23:
11:20:89:cd:b1:71:1a:f5:df:6c:3c:73:39:4c:03:82:29:7a:
19:01:00:10:0d:a7:8a:74:ff:7b:73:2b:9c:2c:a7:33:b3:81:
0f:72:23:2e:56:e9:1b:4c:43:d4:f5:d8:bf:47:75:e7:16:7b:
a1:91:a9:97:ee:15:dc:19:48:3d:f9:bf:96:36:78:44:6c:d0:
3d:be:21:7b:df:c7:3f:77:8a:e4:0f:90:f4:a7:75:88:ef:34:
a5:fc:03:9b:07:15:f0:88:79:5e:3b:84:a9:31:f8:e2:1f:73:
5c:ef:30:61:5b:3e:d1:46:30:6e:ff:d0:23:b3:40:e1:7c:d6:
f9:11:ca:b8:a6:f1:13:20:8b:04:40:ee:37:9f:f2:fc:8d:14:
2d:40:6b:59:41:3b:f9:d6:2d:1a:c3:62:e8:8f:e3:a1:6c:0a:
e2:ca:1d:8b:02:ff:35:be:ac:88:07:49:3b:5c:8b:e0:d0:3f:
e4:96:d0:99:da:97:8b:06:57:a2:8c:dd:cc:4b:a5:3b:81:69:
92:a0:d5:5d:87:3c:79:08:e0:36:bb:28:c4:cd:39:5b:3f:d5:
18:e3:af:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:24 2026 by rpki-client