Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: 6u1PmON5CfRuJ3hh9tazv3lRdMaH9fHId6cQswgxSfM=
Subject key identifier: F5:3C:C8:A8:63:3E:AA:50:4C:AD:CE:44:17:CF:32:FF:2C:B6:AA:0D
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 019D277279C45E83EBDC9BAB1CFD4708B20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0DBB
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: 9W+0dBiMrTw3dSR6QDUGyWglSWIGeZiwRu4qboNxp8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:79:c4:5e:83:eb:dc:9b:ab:1c:fd:47:08:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=f53cc8a8633eaa504cadce4417cf32ff2cb6aa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:4a:01:4e:ce:cb:7b:c7:d8:90:90:0a:6d:
6d:03:af:4b:05:e0:ce:55:13:22:70:9f:2a:0b:22:
50:d5:1b:3d:27:6a:79:0d:e2:84:99:91:12:20:d5:
ca:f9:60:04:8b:e3:8e:b2:6d:fd:04:a9:fb:67:51:
2c:b3:e8:ab:f9:51:79:78:1a:94:1b:98:af:b8:74:
c4:27:a4:dd:54:1e:59:3c:58:9c:29:89:1e:eb:a4:
44:ac:4a:cf:71:bd:50:dc:ea:de:b8:d4:db:dc:f2:
6e:bd:fa:fd:02:35:11:28:25:2f:b3:27:2b:f2:f1:
90:6d:a2:b4:17:6e:69:71:16:8a:6a:35:48:e0:3d:
29:f1:5f:21:b2:70:6b:70:17:e7:09:b1:d4:95:d2:
ae:07:81:9d:f6:f5:41:72:bc:aa:87:f1:95:a3:8c:
db:ad:b5:70:be:59:6f:d5:9f:79:09:fe:15:44:be:
0b:d5:7e:2d:c7:ae:f7:29:5a:1f:f7:d7:62:a9:13:
69:67:d6:d6:af:88:5d:4f:3a:7c:8c:5f:45:2e:9b:
1b:26:3b:9b:73:f3:bf:39:23:fa:52:81:d1:06:c7:
45:ec:f0:ab:e5:94:f4:c2:2e:22:30:5f:38:8d:14:
e8:ff:57:0a:cf:2a:9b:bf:9d:d0:bc:8b:06:4b:19:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3C:C8:A8:63:3E:AA:50:4C:AD:CE:44:17:CF:32:FF:2C:B6:AA:0D
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7e:84:53:82:65:25:dd:5a:52:5f:28:1a:7c:96:52:cf:35:
93:ce:35:72:62:37:03:50:af:c8:c3:44:2b:83:a0:88:77:7b:
c8:93:13:71:53:2b:a6:11:91:0a:df:e0:5c:5d:f7:ba:a1:69:
b8:25:6a:60:2f:98:ba:b8:13:ed:fe:c7:8f:09:18:91:fe:20:
9d:b6:1a:46:27:ed:a1:d0:dc:a6:cf:3e:cb:79:5a:8f:e4:78:
fe:81:a8:d3:a9:b5:b9:0f:d0:74:54:b9:ba:7a:ab:7e:ae:2e:
0d:4e:a4:c2:51:18:4a:6c:11:2f:b1:42:24:be:68:6b:f1:3b:
11:8f:11:45:ac:0c:ac:cd:a0:2c:ad:87:4e:b2:04:c2:44:f5:
94:37:7c:22:9b:a5:87:0e:1d:f2:65:12:cc:77:cb:a6:ea:ff:
16:fd:4f:2f:27:f9:79:71:03:f1:53:65:f7:e2:56:ca:e8:81:
65:40:ac:26:fb:2f:39:d0:0e:b5:f1:54:64:cf:54:e9:99:81:
2b:f0:e5:8c:0f:2f:9b:b3:65:99:da:80:c0:e7:f9:c0:a6:5a:
4f:3d:dd:5b:29:ce:6f:aa:51:d1:e8:05:05:49:31:17:eb:59:
ef:a3:9b:1c:87:8f:f6:8f:1e:56:68:56:be:68:4c:92:ea:a9:
72:ca:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:57 2026 by rpki-client