Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File: v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier: eXNNJYivj1qgm7H5GsHK6qqrqPBtI68erYPqXQkcb0I=
Subject key identifier: F6:08:7C:E6:D3:03:87:C8:F3:49:F7:62:48:77:69:4A:AE:84:C7:35
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer: /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial: 019D25F158E98D8D255E44C66769D15D414B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number: 1690
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: Ch5M3kvFqMpm5CRZK7SdKFkSjW7mdjfrDx3AzQ9uoN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:58:e9:8d:8d:25:5e:44:c6:67:69:d1:5d:41:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=f6087ce6d30387c8f349f7624877694aae84c735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:d3:dc:e5:00:b9:f6:57:fa:2c:68:99:3b:
36:13:d6:76:14:8d:a2:c9:67:20:f0:27:b3:9a:d1:
d0:9a:72:7e:63:4b:95:75:3a:5e:b8:01:51:52:80:
74:45:6f:ba:69:0c:23:b1:b7:0a:81:85:e0:9f:78:
d5:0c:91:25:71:bf:ae:26:76:15:bd:9b:24:b9:db:
fc:b1:56:d3:c2:7c:10:7b:7b:ab:35:5a:5a:19:f7:
07:3a:c7:f1:3d:8f:95:85:ac:ce:f7:ca:8a:2c:66:
9f:de:2a:2a:ad:8e:38:4c:c7:54:e3:41:b6:1a:98:
f7:83:7d:25:84:9f:7c:37:51:76:4e:e5:17:36:3c:
b9:ab:a1:aa:a6:c6:50:4f:81:72:ce:a7:8a:7b:27:
d2:0e:7e:2c:75:95:41:e9:c0:5d:16:27:7e:8a:d9:
58:3e:f1:45:07:a4:44:06:d8:16:e6:34:76:65:2b:
c3:9a:43:db:b7:6d:c0:09:8f:de:28:42:e4:1c:57:
a3:74:61:ca:e2:fd:95:0b:33:6f:71:08:ca:36:03:
ea:c3:db:cc:dc:99:ae:37:4a:14:fb:e0:f7:04:6f:
40:66:9f:a6:05:60:1c:c3:33:76:62:b6:97:4e:ad:
22:6e:f4:3b:9f:1d:75:a4:ef:b7:5f:5d:ee:ae:56:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:08:7C:E6:D3:03:87:C8:F3:49:F7:62:48:77:69:4A:AE:84:C7:35
X509v3 Authority Key Identifier:
keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:6a:ac:47:a1:9a:fe:60:0a:71:4c:e6:7f:42:b2:fb:f1:
8a:7f:63:26:9f:81:43:1c:12:20:2f:9f:f3:de:0e:ce:a2:92:
e2:1a:ab:6f:ea:28:49:43:31:91:c0:e2:46:d6:c2:62:85:ea:
d5:b0:70:d8:9d:ed:6e:a2:f1:98:20:15:4d:34:19:97:be:37:
37:1d:12:31:08:00:a7:5b:e7:2a:f5:1c:af:d1:ef:68:a9:0b:
e3:55:e9:6d:f3:bc:ca:06:55:98:14:15:8a:70:0f:91:7b:7a:
3a:cd:3a:0f:ae:fe:b1:89:3c:ef:87:bd:2e:53:3a:93:38:2c:
4b:f3:72:03:50:94:58:83:d2:56:a6:f8:d3:89:f6:8c:6b:69:
1d:3c:90:24:a3:e5:b0:e2:b2:81:63:9c:39:3f:cf:31:dd:ab:
ca:45:2a:c5:07:e7:a1:47:34:8a:e1:88:7f:a7:c2:67:61:de:
02:4c:72:23:2d:04:b9:17:ba:14:06:a6:ac:64:71:50:17:b1:
0a:fe:bd:0a:c2:99:3c:44:3c:5e:3b:68:19:0e:ca:f7:af:8a:
77:61:cf:de:84:23:63:4c:92:89:07:6c:8b:56:a0:a5:bc:f2:
5b:d0:e8:68:47:60:11:d4:24:52:94:92:d5:3a:46:b1:c6:90:
f1:7d:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:53 2026 by rpki-client