Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: wSfiKwu5qwHPhlkmZAGf9n9EKPAAsphdNpfjgHlBNLQ=
Subject key identifier: 35:6E:7B:92:0D:94:D4:F6:4F:1A:0C:A4:92:37:CC:01:F2:EB:98:2F
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 019D28F30AA49B78C75769E8D4481F3875D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 14BB
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: fY8TCDBli4eUU/CcXqF4vvnJt69Qbm2jc2c2tw/VkKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0a:a4:9b:78:c7:57:69:e8:d4:48:1f:38:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=356e7b920d94d4f64f1a0ca49237cc01f2eb982f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:bc:10:d8:6c:b2:88:b9:9f:19:ff:be:c9:
02:2c:a8:6d:22:1d:8f:32:8a:15:55:c9:7b:3d:14:
3e:ce:6c:fe:52:91:02:3b:7e:cf:45:bb:65:13:ff:
00:f5:1b:fb:6e:5f:a5:4c:4e:6b:ba:29:31:d0:d3:
0e:0b:90:b5:ea:fc:8d:e3:cf:d6:87:46:17:98:4d:
a3:e8:a7:55:a0:5e:12:8b:e7:b0:2a:72:f8:07:80:
8c:20:0c:dd:2c:c2:2b:b1:ae:67:f1:5e:8b:50:50:
d2:f1:98:c3:27:f1:f7:0e:d6:21:f2:21:11:1b:f7:
b7:b6:83:9f:4c:79:c2:c5:24:93:65:24:a7:0f:25:
2f:b9:43:03:6f:4c:5b:ac:7c:0f:9e:19:8d:02:a4:
84:f1:73:98:32:29:33:b3:45:dd:b8:0c:4a:cc:04:
f4:5f:a7:a3:4c:52:47:4e:bc:c4:dd:9b:25:95:df:
5a:6c:01:c1:fe:f6:43:ed:7c:45:3e:a5:17:7c:3f:
a5:67:6c:3d:4f:53:02:d0:08:83:86:8b:79:9a:b2:
e9:89:75:b5:4d:e3:cb:9a:47:70:d9:1e:db:97:f3:
bf:4d:c2:e4:52:99:78:04:69:ba:97:b0:e2:65:48:
d7:f6:5d:58:13:66:43:02:31:74:50:4f:bb:d6:43:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:7B:92:0D:94:D4:F6:4F:1A:0C:A4:92:37:CC:01:F2:EB:98:2F
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6c:07:85:eb:3d:39:32:26:ac:c9:18:7c:55:30:9b:c2:9b:
fb:34:de:82:8f:15:40:1d:d3:ef:9f:c0:41:76:5e:c7:90:b8:
ad:e2:36:ff:79:37:87:98:61:25:8f:5d:ba:29:51:fb:ab:f0:
cd:06:a8:04:cb:98:99:12:ee:ee:e9:f4:a1:b4:02:e1:60:88:
20:39:d5:06:c9:b5:b6:59:6c:ef:44:6a:f8:64:91:9d:83:96:
37:47:48:59:6e:7c:84:cd:d4:e4:7c:40:65:a4:5f:6e:f3:36:
a0:f5:3b:9c:b8:89:fa:7f:4a:bc:81:f8:1c:52:25:97:27:dd:
c7:55:5f:69:95:c2:b1:a4:6e:fa:9f:a7:f7:97:73:c6:3b:2a:
3c:57:3c:8d:0b:c3:3e:3f:d3:53:68:a5:07:1d:0c:4f:a8:1d:
eb:eb:c5:95:e3:66:78:48:ca:d0:ae:3d:47:d3:2d:0b:0d:2a:
45:64:87:3b:9f:6c:9f:42:a0:bc:dd:ba:59:ca:43:ae:23:dc:
c6:5c:8e:e5:54:61:c4:92:7e:f8:64:08:47:70:5c:ff:71:1d:
12:ae:18:d0:7c:99:f8:a3:e8:b9:8a:ed:ec:50:a0:3e:f0:2b:
cf:dc:ad:19:15:f1:ef:0f:17:3f:22:23:47:9e:b8:43:a5:3f:
fd:d7:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:30 2026 by rpki-client