Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json)
Hash identifier: /xhksqJyF8Mz5KY0V0tMaoDoU2oG1YY4wZ/rbAijWxg=
Subject key identifier: BB:9F:10:81:A6:97:7F:DF:31:2A:D3:EA:53:3E:E5:F7:91:4C:5C:63
Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Certificate serial: 019D270476FE246A59BBE1CF3F77756446FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
Manifest number: 03BB
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: SBbuSBI6pGYF0znhQNTqrVRAQdKnWLsbW9CtR9JlZZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:76:fe:24:6a:59:bb:e1:cf:3f:77:75:64:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=bb9f1081a6977fdf312ad3ea533ee5f7914c5c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:89:44:e6:83:25:e1:41:05:12:f4:70:97:
46:d4:dd:a9:b1:57:eb:ee:08:d0:71:06:23:4b:95:
b6:44:2f:60:5f:bd:dc:ca:11:c6:92:11:23:5b:e8:
cc:0c:67:fe:07:88:93:5c:07:18:69:0f:f7:1f:d9:
de:e5:42:7e:7a:39:48:f8:4d:f4:db:ee:7b:3f:1e:
f6:ed:ae:e6:47:68:38:00:2e:b4:bc:c9:4b:5e:b9:
0f:2d:3d:f5:11:61:5a:a0:63:f1:f7:1f:e5:69:63:
a0:2e:ca:89:00:e0:08:ff:d7:c0:1f:d3:1e:88:52:
d7:8f:7c:04:b6:d4:3a:55:2a:d2:a5:d9:86:0f:cf:
8f:4a:65:7c:26:a3:35:95:09:b7:da:ff:cb:1f:6e:
f5:a5:ae:12:51:7b:d6:d6:f9:39:9d:56:6b:1c:80:
29:ca:cc:5a:4c:a2:3f:a7:b7:d3:51:5a:ee:91:61:
ec:a8:e1:d5:92:ca:7d:28:4f:45:b9:d3:81:0b:82:
d9:bb:9b:ea:21:e9:79:2b:54:ef:a8:ac:a1:9c:a0:
05:8b:27:53:2a:9f:de:4e:21:19:95:0d:83:c8:48:
ca:8d:1c:b8:91:74:c1:9e:a4:f3:fe:4e:98:49:02:
3c:35:4a:91:3b:3c:9f:8c:84:41:09:99:13:32:ba:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:10:81:A6:97:7F:DF:31:2A:D3:EA:53:3E:E5:F7:91:4C:5C:63
X509v3 Authority Key Identifier:
keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ad:42:5f:95:5f:1b:6c:72:ea:8d:f6:9b:50:05:4b:d3:fe:
38:90:27:2e:09:cd:91:32:3b:81:3e:38:87:ed:cb:4c:b1:1c:
18:71:84:ab:f5:49:e1:78:66:6e:4a:16:b3:43:f7:d8:aa:6a:
cd:7f:93:64:f7:7b:b7:8d:bc:60:14:4c:2e:29:a1:f8:85:32:
40:42:e8:10:00:51:74:94:01:2b:3b:69:a4:39:95:81:08:96:
44:98:8e:8b:61:3e:23:23:04:5e:8e:b2:1a:f3:5a:63:a2:7a:
d5:19:a2:9d:08:a3:55:36:2a:3e:19:97:45:db:51:d4:fb:6c:
31:6f:9c:7a:e5:e8:de:57:8d:10:f1:d8:ac:34:fb:6f:8c:03:
dd:5d:74:02:53:61:bf:86:25:73:15:8e:3a:24:89:45:43:18:
31:39:58:96:99:5a:3d:e6:9a:09:e9:ca:77:c2:bf:72:8f:2b:
7d:a9:c7:48:d9:73:0b:b1:f6:e8:36:e3:f5:27:4c:4c:99:ac:
29:e2:af:d5:a8:6a:2a:f2:0f:e4:51:c2:75:36:63:51:b3:03:
7c:ef:43:8c:da:71:ae:b3:af:12:4b:65:6d:b2:57:bd:8c:50:
c2:cb:6a:60:e1:4f:9b:7d:db:1b:cf:a5:a1:e4:2b:79:41:23:
a0:6f:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:44 2026 by rpki-client