Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: kC1Pb2kwQXqh7WXnh314wwiGffYeWGA+REqcT17zgQw=
Subject key identifier: 96:EB:E3:17:7C:52:25:D4:B5:49:D7:A0:51:F3:9E:16:63:A8:B2:B9
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 019D28F2C0D98DE1A3A8C0EAC08C7C3117D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 130D
Signing time: Thu 26 Mar 2026 07:01:30 +0000
Manifest this update: Thu 26 Mar 2026 07:01:30 +0000
Manifest next update: Fri 27 Mar 2026 07:01:30 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: Q9UXzI6rjePcLkqeMfpchrFZgJSTq/PA4Pgdj0zAl3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c0:d9:8d:e1:a3:a8:c0:ea:c0:8c:7c:31:17:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Mar 26 07:01:30 2026 GMT
Not After : Mar 27 07:01:30 2026 GMT
Subject: CN=96ebe3177c5225d4b549d7a051f39e1663a8b2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:69:9b:e9:22:4f:7e:fd:47:e3:46:28:a8:
9c:9f:f3:1e:97:3e:8f:55:aa:c0:8e:e3:ed:5d:16:
09:a2:14:e6:5d:1c:cc:86:b7:81:b4:f2:52:87:44:
cf:7f:6a:a3:90:f6:72:70:62:91:42:96:19:f1:cc:
bb:4e:6e:8c:d5:c8:68:f4:6c:27:81:55:a8:f9:1c:
9a:66:34:51:5f:f0:dc:71:5e:4b:05:bc:d0:cd:fe:
0f:50:57:6c:3a:0d:2e:21:0a:5a:fe:8f:56:63:92:
7f:23:8b:14:f4:8a:6c:37:57:64:76:ce:01:d3:05:
75:c2:2b:c7:57:3d:6d:f9:ea:dd:0c:5e:4b:5d:30:
a1:ac:fa:52:28:83:dd:43:dd:5e:98:aa:41:2d:e0:
f4:a6:be:3f:1f:b2:11:a7:cd:7d:61:0c:bd:31:47:
02:21:8e:9c:37:89:ca:be:d5:24:bd:34:58:ed:81:
49:25:32:bf:47:74:7e:22:3a:0c:41:5c:32:dd:5b:
44:be:38:f0:8a:b9:8f:f1:42:a5:48:f7:37:6d:0e:
e9:ea:36:1f:9d:39:6c:fd:99:e8:b5:00:3a:e9:a5:
11:bf:8a:0b:ea:97:a7:49:7b:2d:15:00:ea:60:25:
1e:a1:82:e9:bc:5c:b3:20:a0:27:fc:a3:c6:47:e1:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:E3:17:7C:52:25:D4:B5:49:D7:A0:51:F3:9E:16:63:A8:B2:B9
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:22:cc:d8:69:3f:51:17:58:35:23:f9:d5:f9:ec:f7:f0:7a:
16:3f:b3:9d:d5:bf:7a:ba:08:61:c6:f0:f5:20:2f:50:52:39:
5f:a2:40:21:c8:0a:f0:92:7a:d2:88:cc:e4:04:b7:29:c5:91:
40:41:54:a5:73:66:98:d4:ba:67:a5:60:15:dd:6a:ce:09:ef:
73:42:d8:c4:cf:2d:f0:bf:33:64:0c:a7:b8:41:57:bc:80:dd:
5a:c4:d4:9e:6e:d2:e1:20:46:7e:99:c3:fa:6a:4a:5c:0b:97:
32:91:bd:02:91:ea:ba:56:cb:4d:47:48:f2:8b:fd:c4:1f:e2:
37:1f:71:f9:7d:bd:5e:75:1f:1d:ae:07:8e:bf:96:ce:39:c0:
8b:15:a1:18:c9:ab:de:4b:fb:5c:e1:1d:3e:60:25:af:27:07:
b0:32:1a:95:06:10:4e:4e:85:30:02:d8:fa:2d:77:66:ee:7f:
92:28:5e:19:22:50:75:7a:fe:41:43:89:a0:d5:77:de:98:31:
99:1c:ca:39:4b:01:b2:89:bb:ea:96:97:f6:f5:3f:79:23:19:
47:6d:65:c6:7c:8b:40:50:eb:d1:1d:75:dc:89:53:5b:27:28:
c5:a8:97:21:cf:82:36:0f:54:8c:26:95:ef:f9:23:46:a1:5b:
e6:c5:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:40 2026 by rpki-client