Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
File: Vr293X0J23mHNBsRBSMdQMfIorA.mft (raw, json)
Hash identifier: k5R6+SGcHlt3OOFGDhtZ8DK/MhN83Yryf5qe4T25zig=
Subject key identifier: 4C:1C:5A:AD:6B:7A:3D:B2:D7:43:65:4B:C9:34:F3:7A:23:EB:C0:13
Authority key identifier: 56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
Certificate issuer: /CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Certificate serial: 019D299781FAB4DF7F72DD5D4B1AFBDC3207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
Manifest number: 09E9
Signing time: Thu 26 Mar 2026 10:01:28 +0000
Manifest this update: Thu 26 Mar 2026 10:01:28 +0000
Manifest next update: Fri 27 Mar 2026 10:01:28 +0000
Files and hashes: 1: Vr293X0J23mHNBsRBSMdQMfIorA.crl (hash: oJ1qRBG73nAw7DMZAPTLVn34HKe2zm8/+pTljQOd6lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:81:fa:b4:df:7f:72:dd:5d:4b:1a:fb:dc:32:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Validity
Not Before: Mar 26 10:01:28 2026 GMT
Not After : Mar 27 10:01:28 2026 GMT
Subject: CN=4c1c5aad6b7a3db2d743654bc934f37a23ebc013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:e1:30:09:62:8b:71:e3:25:bb:f1:3c:ad:
ad:32:4d:9d:9e:21:21:7f:4b:04:e6:e9:b5:49:c9:
e4:d2:ca:ee:fc:e3:6f:ba:7e:0f:b9:b9:fb:d1:e2:
58:b1:9f:97:89:8b:c0:19:a8:8b:ad:54:2d:c3:83:
09:e9:4c:0b:e6:eb:2d:90:49:59:cc:06:82:9c:5b:
12:0d:78:d4:e2:74:4f:93:9e:f9:d6:47:df:91:39:
a9:04:02:06:be:48:8d:56:45:e2:37:ce:b1:1c:cd:
b7:c5:1b:c1:6f:63:ab:53:b0:4e:72:8f:93:d6:ca:
35:27:fd:3f:29:a9:9e:02:5b:b7:19:14:5e:9c:4f:
d4:02:06:f7:cf:85:de:7b:7c:6b:92:ac:e5:82:3c:
a5:db:b5:78:56:cd:76:f8:26:3e:c2:10:22:e3:ee:
87:6a:e7:ca:60:e8:9a:5b:4b:b3:ea:9b:ad:33:41:
be:85:46:3a:c5:a0:e4:b0:b2:b8:eb:79:9d:d0:a0:
54:e0:6c:72:92:2e:88:74:2f:65:4e:38:49:f1:3b:
dc:28:d7:7f:17:83:bc:b8:7b:ac:4a:f7:66:1e:f4:
95:f3:61:b5:da:44:b3:b2:86:2a:12:f7:2e:47:c3:
34:05:a4:c7:b7:1b:9d:a5:4a:2f:4d:fe:6b:0d:d3:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:5A:AD:6B:7A:3D:B2:D7:43:65:4B:C9:34:F3:7A:23:EB:C0:13
X509v3 Authority Key Identifier:
keyid:56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:91:fb:91:f7:21:97:8c:ed:18:cd:0d:ed:ca:e1:4e:36:
35:7b:ed:2e:e1:b0:02:82:34:2a:a6:c5:07:b4:df:30:be:01:
d5:10:e7:63:58:97:2e:47:cd:3a:7a:4c:18:7b:be:5d:9d:d8:
83:34:bd:74:ce:7c:c4:2f:37:b3:83:f8:b1:b9:35:11:a7:ca:
fa:2c:a7:d2:e4:f3:81:6b:5a:f9:89:0d:54:16:0d:34:76:1a:
64:9b:11:88:be:d3:3a:69:a7:b1:ba:04:31:a9:c9:b1:63:bd:
6f:01:9b:f7:50:b5:09:29:0b:32:ab:34:3e:e7:48:68:8e:ec:
97:66:51:be:91:13:f3:6f:7c:d0:33:8a:7e:a5:ef:b5:8b:f0:
ca:6a:ac:80:52:9e:48:e6:b8:b8:94:a7:66:9f:01:fe:f6:0e:
21:17:be:4f:51:f4:63:93:88:bd:94:19:c3:d9:b4:ea:3f:56:
3c:4f:dd:7e:47:93:9f:da:f5:19:fa:f9:18:c8:38:dc:81:b2:
b2:7d:8a:16:68:78:06:7a:bb:ff:db:de:b0:ba:b0:ff:0a:68:
12:65:8d:d1:43:76:a4:58:d6:4c:0c:44:3c:8e:cc:ec:04:a6:
98:c5:e4:12:bb:8a:70:94:01:04:a8:49:08:b1:92:bd:fb:72:
df:30:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:49 2026 by rpki-client