Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json)
Hash identifier: 3TGRDZD1+sC0mSViXZ0N9pYngMUViGQ0iieIqrDXDTU=
Subject key identifier: 15:55:D5:16:94:F1:03:23:4A:7F:A6:F6:4F:FA:64:A9:F2:8D:00:95
Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Certificate serial: 019D2704CFBD4F0F03C584A352DCBB864310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
Manifest number: 055F
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: 9mbEznBz8uez/kAEeFAAzvpAke7LHTGUsTe/NOXAv/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:cf:bd:4f:0f:03:c5:84:a3:52:dc:bb:86:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=1555d51694f103234a7fa6f64ffa64a9f28d0095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:cb:4b:af:4e:6e:63:36:85:0a:fb:f8:22:
bf:12:80:94:5b:cb:3d:c7:9f:da:84:47:ae:83:f6:
86:d2:81:37:27:aa:dc:de:8c:3a:8b:b1:a5:48:c3:
3c:69:d5:1a:47:84:34:e8:be:fb:98:d4:d5:3d:52:
22:d5:ba:7a:a5:d7:cd:c7:03:68:5f:90:24:d6:e2:
0d:a9:95:9e:fa:79:e8:5d:94:fb:25:e9:3d:30:9a:
b5:1c:4e:c0:08:3f:01:5f:90:05:c8:4e:18:3d:56:
4c:43:ed:51:cf:f9:fa:4d:7b:16:bf:e7:4a:c9:33:
33:c1:74:07:2f:da:52:d6:3a:fd:a8:ce:01:2c:c1:
4b:98:31:f9:74:d8:3d:57:e1:14:f6:e3:f4:63:6a:
0f:05:0a:7f:aa:60:02:8c:37:4f:41:8a:2f:ba:9f:
3c:23:c7:73:2c:04:31:09:8b:93:47:19:3e:19:70:
de:fd:d2:59:fb:7e:68:23:39:b1:a9:88:ed:45:b7:
20:78:3b:d9:91:87:92:d1:d4:fe:84:d2:a6:11:11:
33:c0:28:7b:ca:d7:e7:d6:da:3a:74:c1:e8:50:e9:
f0:19:9c:45:05:e5:8f:d7:a3:c8:5e:1e:9a:93:83:
9b:30:86:3e:ce:44:33:5f:60:d3:87:17:d9:ef:20:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:55:D5:16:94:F1:03:23:4A:7F:A6:F6:4F:FA:64:A9:F2:8D:00:95
X509v3 Authority Key Identifier:
keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4c:fb:a5:dd:57:c0:83:57:13:6f:28:2e:0d:5a:81:2b:fc:
8f:90:40:03:7f:dc:1a:b7:24:c9:6b:12:84:ef:df:6e:66:f2:
94:29:09:18:2e:37:97:be:ba:33:d9:5b:75:d4:a8:f3:dc:e1:
f7:3f:bc:11:0a:4a:18:b3:9f:7b:5d:37:75:94:c1:db:4d:45:
68:64:84:d1:4a:55:a5:be:e3:c1:5b:b6:df:ff:74:ad:a2:28:
0d:44:f1:7e:17:ee:7a:13:c1:de:8e:b0:09:2b:d8:c2:28:2e:
21:74:a0:b4:73:fa:74:a8:d8:cf:74:ee:0c:cc:fa:94:e8:ea:
c5:a0:ca:66:63:8d:ed:4b:2d:b0:d6:2b:f9:bd:22:12:cf:74:
29:65:55:0a:9a:d5:04:5b:fc:ec:49:dd:1b:c1:ac:be:f9:6c:
98:84:aa:d8:cc:e7:ca:cb:67:fd:b2:dd:c7:3a:e5:ca:40:57:
34:69:22:08:38:ac:7e:4a:d3:96:a3:5c:79:fc:00:2a:a6:6e:
d3:dc:8f:84:c2:1d:8a:ee:14:4c:01:8b:d6:f2:97:00:98:db:
80:a2:36:20:bd:6c:09:e1:c2:65:9e:8c:9f:08:46:df:1e:d7:
e0:ee:b1:84:ba:68:af:5b:28:c5:e3:f5:d8:fe:28:c6:06:f4:
d7:e8:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:41 2026 by rpki-client