Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: W+T1HC7TNa/iZi7PU6Ho2RyZJbHtuvcTJThu5Yituwo=
Subject key identifier: BC:98:C4:6F:E3:D9:1B:00:10:77:AF:99:8F:9D:A7:C7:31:DF:17:47
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 019D27044F93E5777C94726D2E51A55A4356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: Y+F5NW9lvxEcZd4vGXF+CLtIsT6olmaJHaEvkhO3X6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4f:93:e5:77:7c:94:72:6d:2e:51:a5:5a:43:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=bc98c46fe3d91b001077af998f9da7c731df1747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:65:12:31:bc:4a:73:6b:0b:08:d7:8d:0a:
ac:26:8d:1a:c7:1c:42:96:8e:15:78:4e:c9:da:05:
ff:0c:b7:9a:67:16:2f:70:8b:47:2a:c0:24:7f:53:
ff:7d:a0:21:22:b1:5a:70:cf:c1:af:5e:f9:32:c3:
48:90:05:c4:a1:27:30:da:0f:97:88:be:a9:68:f7:
c8:af:d0:e1:2c:6b:27:c4:f0:ab:7a:04:0f:3d:47:
ff:43:73:d8:a6:29:ee:e0:64:19:ef:04:2f:74:2f:
3b:3d:f9:54:b3:da:1d:be:b6:bf:00:cf:f5:9a:1a:
28:d1:34:07:98:96:0c:58:d1:8e:26:29:3f:e2:84:
59:b7:a4:34:97:f2:08:ca:bc:25:33:93:57:04:a0:
7b:40:b4:a8:21:98:7a:2c:2c:4e:23:06:96:1d:93:
1a:05:e2:65:a2:e4:fb:34:68:f6:42:a6:32:a6:f2:
38:5a:94:7c:6a:a8:4b:9e:84:9c:f3:e2:ab:d8:d1:
6d:13:50:28:a3:8e:94:5f:9e:bd:98:a6:b0:81:c7:
a9:b5:69:52:b2:d4:4b:61:5c:b0:f0:aa:57:34:dd:
1f:fd:63:60:e5:c8:9d:32:4f:bd:9d:82:da:c5:02:
99:9e:02:f3:f3:5a:91:19:eb:8d:2a:91:09:9e:3e:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:98:C4:6F:E3:D9:1B:00:10:77:AF:99:8F:9D:A7:C7:31:DF:17:47
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:17:8c:39:11:9e:3b:72:54:31:15:1e:44:c2:bf:ad:2b:4c:
ef:0d:fa:af:3a:81:6d:70:d4:4c:b0:4c:43:7a:97:b0:e5:64:
66:c7:bd:99:45:cb:14:7b:51:bd:ec:92:c8:e9:30:83:aa:90:
7b:d5:31:bc:61:98:ad:bf:30:21:70:64:59:7c:38:c4:62:66:
f0:5b:26:41:18:2b:d8:40:f2:2a:b6:0d:fe:5c:ac:fa:68:1b:
87:ae:02:d9:08:b3:8a:d3:0d:cc:87:ab:08:82:e9:ad:b9:d4:
13:66:a6:21:ab:e9:61:8e:1a:1f:0c:f8:6d:e3:4a:6c:d6:a1:
16:f3:e1:47:f5:df:28:b3:27:97:d2:2f:7d:cd:6e:0f:0b:1b:
51:fd:e8:6b:85:bb:29:f1:82:ea:40:16:a9:de:0c:ad:65:0d:
d8:e8:f3:35:78:e6:06:6e:2f:38:a0:75:17:61:84:36:03:e9:
29:75:64:0a:f6:26:ae:99:88:00:ec:38:fa:d9:24:79:2a:72:
b6:88:76:34:fc:5e:18:ab:1e:b9:7f:3d:d5:a4:1b:62:5d:55:
dc:37:e7:0b:85:c8:22:6d:a2:f8:f9:38:c4:19:38:96:df:76:
a4:4e:1d:53:89:07:a8:94:1e:66:db:b0:e3:79:c5:56:61:cf:
a0:5b:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:46 2026 by rpki-client