Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: 2WZiGGGWswcT00nnVykWmdwo5YHv3z0mMO69p+prVWg=
Subject key identifier: 06:48:57:8F:60:ED:41:D6:C8:48:72:CB:3F:6E:1C:72:C0:14:5E:3B
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 019D270426F0AE078644B329678383C27B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 127E
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: jFjc00xNlxivIYpbLALEsvQXaBAQ2oHZ1IKKslOWb2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:26:f0:ae:07:86:44:b3:29:67:83:83:c2:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=0648578f60ed41d6c84872cb3f6e1c72c0145e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:5a:0d:a3:3d:9a:95:02:73:cd:47:b3:8e:
18:10:54:2e:50:2d:3f:be:f2:f5:4e:05:66:d6:51:
91:4b:64:00:91:26:2f:87:c3:32:eb:46:21:b0:8b:
83:4d:2a:d4:c9:43:e1:8d:dc:42:c2:d9:3f:39:81:
e1:5e:92:a2:75:c3:5b:61:e8:12:24:13:43:e2:ad:
78:92:19:15:65:84:41:33:58:1e:43:91:eb:dd:e4:
94:67:92:d1:57:7d:6b:04:47:da:b3:d3:cc:9c:0f:
26:96:18:8b:81:1e:5b:d5:12:fe:3b:ce:e6:84:0e:
c6:10:9f:4d:88:18:e2:08:50:0d:3a:53:46:7e:6b:
48:60:ea:d0:37:4b:90:b1:86:e1:a9:3f:2a:c6:01:
53:32:62:ed:b7:46:43:e3:c8:d0:a2:14:7e:77:32:
04:82:47:e5:fe:9f:33:e4:a6:c0:44:28:17:d8:23:
f5:49:7f:25:35:ea:74:fa:cd:2b:39:42:87:50:8a:
df:11:06:09:f3:6c:96:25:37:9d:d9:33:c3:8a:13:
38:00:c6:f6:b5:85:28:06:42:96:a8:ff:d6:db:0d:
d7:b4:68:75:35:d0:81:82:f9:60:73:e4:e8:ad:da:
3b:f2:9c:33:89:71:1e:63:6c:3e:9b:51:4f:04:6a:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:57:8F:60:ED:41:D6:C8:48:72:CB:3F:6E:1C:72:C0:14:5E:3B
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ba:6c:42:c6:fa:f0:5c:3a:a3:bb:0c:b4:30:d3:67:47:d4:
69:a6:51:7d:3d:7c:0f:19:52:ec:2b:ac:91:cb:de:9c:f8:69:
55:a1:b6:b0:aa:d0:b7:cb:6d:cf:8d:3a:32:92:03:6e:36:8d:
53:46:ec:d0:b0:d8:b0:f2:ea:0f:00:31:ae:e8:ac:ea:3e:08:
ff:7c:14:9c:15:5d:42:b1:f1:8a:0c:20:08:ad:3c:2e:70:50:
57:dc:70:57:54:b5:4e:ba:73:7c:b1:0a:21:d5:82:9e:4c:7e:
14:ae:b0:d7:1e:62:d1:ec:42:5d:d5:76:a1:5b:f3:47:16:fd:
ad:e3:3c:3a:52:95:b0:40:0e:38:46:13:73:2f:d8:3d:1d:1f:
07:7e:19:97:fd:31:4c:5c:97:03:ef:d3:62:44:3f:eb:25:a8:
0a:a3:67:d2:90:ab:f0:c8:88:8b:70:0f:35:24:f9:27:5c:88:
86:18:83:52:d5:8d:61:c7:3a:e2:15:55:88:97:f9:e1:ab:36:
02:f5:e4:e9:a2:cb:23:ff:e1:03:b8:b1:2e:bf:ed:b0:51:2b:
c7:bd:cd:82:08:0e:ac:0d:8c:e3:3b:aa:20:5f:78:63:08:dc:
bc:87:1e:2b:7a:f7:73:af:8d:e5:48:15:1f:e6:0c:35:f2:92:
e5:ad:66:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:41 2026 by rpki-client