Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
File: vNEARPy4HlrmDz7NW9zf5tk0PJI.mft (raw, json)
Hash identifier: GBTVLZio0xxcHtcaH3ciyWkyS1hXly9wOof18B3c4HQ=
Subject key identifier: 8B:66:02:2E:F8:2A:8C:11:EE:3F:EA:09:D1:CB:A6:2F:C9:A8:99:7A
Authority key identifier: BC:D1:00:44:FC:B8:1E:5A:E6:0F:3E:CD:5B:DC:DF:E6:D9:34:3C:92
Certificate issuer: /CN=bcd10044fcb81e5ae60f3ecd5bdcdfe6d9343c92
Certificate serial: 019D32D119F99D167BB7EFD7C1DEAA251E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
Manifest number: 18
Signing time: Sat 28 Mar 2026 05:00:57 +0000
Manifest this update: Sat 28 Mar 2026 05:00:57 +0000
Manifest next update: Sun 29 Mar 2026 05:00:57 +0000
Files and hashes: 1: vNEARPy4HlrmDz7NW9zf5tk0PJI.crl (hash: O4W1UC2YmsdRzeAlB3m3ddi9jYQi1vvItHJDoKCBZe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:19:f9:9d:16:7b:b7:ef:d7:c1:de:aa:25:1e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd10044fcb81e5ae60f3ecd5bdcdfe6d9343c92
Validity
Not Before: Mar 28 05:00:57 2026 GMT
Not After : Mar 29 05:00:57 2026 GMT
Subject: CN=8b66022ef82a8c11ee3fea09d1cba62fc9a8997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:bf:4b:b0:d0:b1:dc:9b:65:dd:37:17:f4:
03:68:df:fb:ba:ed:83:ac:10:89:3f:8f:d2:3d:6b:
c2:bb:72:f8:f8:11:4b:15:b7:57:30:7e:e3:fd:7a:
f5:7a:00:f6:40:9c:44:d3:2c:47:30:aa:69:92:ab:
be:5c:42:d1:fb:cd:a1:e4:c2:38:f2:0a:c1:bb:28:
ff:c4:ab:39:72:da:7b:c6:29:a4:c8:45:0a:2b:3f:
df:f6:f3:f3:ab:8e:41:33:e6:6b:27:59:88:f3:48:
00:f0:cf:96:5b:a3:a8:84:a3:88:75:d8:93:82:cb:
bc:0b:5e:9e:a9:fb:c6:b7:b6:74:3f:05:47:9d:6a:
26:d5:5d:f4:63:33:91:97:c3:78:8e:93:61:7c:f0:
c7:57:8b:06:33:39:0d:66:82:5c:4b:39:97:55:5f:
7a:73:c9:14:47:b4:49:f2:6b:33:27:5e:aa:1b:85:
3b:14:da:8f:46:3f:08:6b:80:4d:7f:b0:e7:2e:26:
d6:85:fd:24:8b:a6:80:73:bf:2f:0a:a8:27:65:32:
85:69:6f:49:84:1b:f0:4f:8d:99:e0:a3:af:bd:ec:
83:4b:af:7f:42:97:10:7c:53:41:dc:9e:37:a8:ce:
36:01:8d:28:67:3a:f0:89:65:fc:8c:d9:4a:df:de:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:02:2E:F8:2A:8C:11:EE:3F:EA:09:D1:CB:A6:2F:C9:A8:99:7A
X509v3 Authority Key Identifier:
keyid:BC:D1:00:44:FC:B8:1E:5A:E6:0F:3E:CD:5B:DC:DF:E6:D9:34:3C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:78:64:fc:4d:24:af:5b:13:9c:f7:91:a4:94:6d:d0:0e:49:
c6:c9:4c:c0:64:e7:45:8e:6c:55:41:02:05:ce:12:0e:de:bc:
91:de:23:d2:b6:66:29:3c:8d:06:8a:0e:73:26:3e:ab:8b:b0:
29:82:88:a6:01:4d:a3:f8:62:e7:1e:52:7a:e7:78:68:55:a4:
c5:16:45:4e:ec:d8:93:01:3e:84:42:d5:1f:49:5d:40:5a:90:
0e:08:82:7f:93:31:72:f9:2c:59:5d:f7:f4:b4:d6:f1:40:ee:
5c:de:b5:7f:95:62:2b:c9:1b:96:43:28:e8:35:91:5f:e8:0b:
97:46:69:19:ed:23:33:46:24:76:e1:a9:c8:6b:fe:89:cd:9b:
b6:9d:f0:88:72:4a:d0:12:8c:12:16:3a:27:3f:bd:ad:fd:69:
c0:c6:45:f8:f1:9a:66:7e:92:c2:bf:31:45:d3:f9:43:ba:5e:
5b:97:17:3b:2b:fc:61:e5:91:8a:42:25:56:40:2d:f8:49:41:
d4:a6:48:f0:86:20:22:e5:e2:27:47:37:9c:51:0e:ae:c3:c7:
6f:fa:f3:71:8e:85:27:cb:ba:b5:29:47:13:49:28:f3:67:7a:
dd:12:33:84:43:43:4e:18:6c:65:79:f4:7a:d2:f1:88:91:fe:
73:78:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:09 2026 by rpki-client