Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: tn8qaDHcVz/lnvURF67KtPq7A4W5ge8KU8eoPksTDYg=
Subject key identifier: FB:E7:73:96:C1:66:FF:22:5D:0E:8A:74:67:26:EA:05:1C:54:06:5F
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 019D29616E993A800A954D8D17B5FFD74F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0F6C
Signing time: Thu 26 Mar 2026 09:02:24 +0000
Manifest this update: Thu 26 Mar 2026 09:02:24 +0000
Manifest next update: Fri 27 Mar 2026 09:02:24 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: daxl1drwGOD2xLr1X1e9199ZEIAcTMyamu7i1sys8xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6e:99:3a:80:0a:95:4d:8d:17:b5:ff:d7:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Mar 26 09:02:24 2026 GMT
Not After : Mar 27 09:02:24 2026 GMT
Subject: CN=fbe77396c166ff225d0e8a746726ea051c54065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:a1:b0:6f:0e:b9:7e:c1:ba:05:32:9f:43:
45:0f:7f:2c:19:70:63:15:e4:a9:ef:eb:6a:c0:98:
9d:a4:67:e4:9e:6b:ad:f3:2b:d0:17:9e:43:71:18:
94:73:f8:cb:3b:ea:72:ff:a1:30:00:28:d4:7b:a8:
d3:08:18:e4:d6:3f:a9:ea:d7:74:fc:22:c5:28:34:
32:18:b7:1e:cc:22:a5:b3:ec:37:a2:9a:bb:32:90:
dc:7c:eb:fc:90:8e:2e:ed:b4:af:ef:c6:ed:91:c4:
5e:09:50:0c:a7:54:a7:d7:32:11:02:5c:44:5a:04:
de:69:e4:e1:d8:54:eb:c3:79:c8:ed:d3:e1:34:d5:
a0:f5:f6:f4:ad:b9:7e:09:72:8e:0e:11:b4:7d:7a:
a4:21:b2:67:b0:af:42:54:ee:8e:bf:34:90:14:05:
d9:0b:1e:44:73:72:7d:ac:8f:38:62:67:d1:c4:83:
af:51:29:1c:7d:98:72:36:6e:3a:24:59:e6:1e:33:
7e:e5:73:4b:88:f4:1d:54:6d:af:d2:30:f8:89:fd:
50:6a:ab:b3:16:7a:bf:54:07:4a:54:b0:a6:f2:8b:
a9:5c:a7:d9:04:2e:34:be:f2:04:93:ee:ed:64:5e:
05:a4:fe:ee:dd:90:07:96:b3:64:14:ed:84:06:19:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:73:96:C1:66:FF:22:5D:0E:8A:74:67:26:EA:05:1C:54:06:5F
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f1:e2:de:d2:92:65:f3:cb:77:79:3a:45:dd:29:07:4b:a8:
ee:11:80:38:cf:6f:78:56:08:43:60:18:dd:f0:65:11:c8:e6:
c3:b0:a9:4f:7a:74:43:9f:66:5c:72:de:65:b8:c0:6c:4a:56:
11:fa:5d:e6:30:c9:2c:d9:2f:8c:34:f0:69:c5:ba:7a:2c:1c:
84:6c:d9:16:56:40:e0:97:fd:92:e3:82:7e:97:97:2a:7d:66:
19:47:24:e5:15:4c:97:28:b9:82:f8:ad:ed:dd:4f:ea:12:80:
39:0e:27:57:38:77:e0:d9:5c:6c:de:84:5c:68:d3:78:90:9e:
f7:fb:c9:fa:0e:f3:20:2b:05:c4:76:8f:71:b8:e0:79:a3:6a:
37:c8:ff:ee:17:a9:53:26:59:82:2b:2f:f7:da:15:0d:70:c3:
02:a9:e8:ea:ac:ae:cb:96:78:92:58:24:5a:45:3b:46:51:21:
ac:1e:42:9f:a1:eb:55:e5:96:9d:eb:05:6b:50:d4:92:ca:fa:
c7:20:90:05:90:a5:3d:36:02:0e:68:b7:65:e4:f3:e4:8a:72:
5c:4b:3d:d7:08:10:ef:97:64:67:51:a9:7f:84:dd:d9:d2:ca:
fb:b6:8d:f2:fe:99:90:fa:26:0c:f6:8f:23:c7:4e:77:b6:a5:
5b:23:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:06 2026 by rpki-client