Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: o1tgl85xXbUswR9VtjSovs8hxQGbHlYFTTkWM6ROmFQ=
Subject key identifier: 26:80:53:8E:45:C1:88:CF:50:D2:7A:B4:A6:E0:5B:B8:17:FC:4E:B3
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 019D265F6A07A2C3F1B7BD786F4FCED98DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 19:01:20 +0000
Manifest this update: Wed 25 Mar 2026 19:01:20 +0000
Manifest next update: Thu 26 Mar 2026 19:01:20 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: VS1Xto/oHFbrnP+tNST7OI3KWD0izdhNgd9YQW+4gys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:6a:07:a2:c3:f1:b7:bd:78:6f:4f:ce:d9:8d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Mar 25 19:01:20 2026 GMT
Not After : Mar 26 19:01:20 2026 GMT
Subject: CN=2680538e45c188cf50d27ab4a6e05bb817fc4eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:1c:22:36:9a:e2:4a:58:e3:ba:4d:63:26:
56:3a:06:05:e5:0e:c1:93:a4:79:ea:2c:89:58:44:
62:e6:70:7a:f8:5f:7b:90:3c:f9:07:3e:87:17:b7:
ab:61:d1:ca:de:b7:8f:3f:c8:b2:01:1b:26:7c:6c:
b0:1e:36:c7:e6:e9:e0:a2:36:02:5f:5f:c9:12:b6:
01:df:be:36:4d:6e:26:bf:71:19:1c:63:6e:ec:1a:
ba:8a:d8:8b:d0:86:08:7f:a3:c7:e5:13:0a:85:80:
ad:c8:dd:de:91:b6:89:0b:49:6a:92:53:ad:3b:6f:
a1:c1:82:cf:84:b7:fc:fa:83:3f:19:39:aa:61:11:
e3:07:0e:a9:e3:cc:f5:c9:76:de:da:2b:55:2a:29:
19:2c:38:99:78:2b:23:48:c5:b9:41:24:33:56:5b:
22:48:5e:00:27:bd:f9:47:34:f8:30:50:b8:15:ca:
bc:d3:51:ec:29:d7:3e:17:ae:89:b8:48:1e:21:3e:
6c:c0:fe:4f:2a:d7:f1:65:76:f2:cf:1d:16:26:80:
8b:c7:c6:ca:98:eb:96:59:32:79:24:8d:c3:88:7f:
1e:2d:39:35:25:09:9f:70:f6:f8:46:72:9d:8f:5b:
f6:60:7c:f6:bf:12:5c:73:1f:23:96:c1:0b:f3:a9:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:53:8E:45:C1:88:CF:50:D2:7A:B4:A6:E0:5B:B8:17:FC:4E:B3
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:91:4b:a7:d0:37:1b:95:36:01:f7:d7:02:67:9d:af:6c:a5:
aa:62:2f:f8:fb:15:e2:ac:37:82:d0:89:fa:28:09:55:d6:54:
91:8c:72:14:64:7e:ed:9a:bd:bf:37:41:b1:36:57:22:ce:27:
aa:b7:ea:08:5b:b1:61:11:01:02:a0:ac:43:37:4c:96:95:c2:
16:cb:94:c6:1f:8b:3b:02:4d:d5:2e:b6:1d:f6:c6:b9:1d:87:
d9:77:6a:ed:2f:a6:66:46:b9:fd:7c:58:fe:b6:ea:03:b0:a6:
24:01:ca:c7:62:79:96:3a:9d:fa:30:f6:2c:c1:a3:30:da:1d:
33:a5:c4:85:cb:f4:79:44:95:94:17:fd:0e:4d:2b:4a:90:d0:
03:2b:8a:41:f2:2a:29:03:58:0d:d5:01:36:2d:10:cc:e2:6f:
d5:64:e2:c7:f3:fc:93:1a:93:79:8c:61:9b:65:8f:42:be:1c:
89:c0:86:05:2f:0a:88:a9:68:a5:b1:91:a6:7b:f6:5a:e1:09:
b8:63:6b:bb:73:38:bf:8b:b5:8c:09:c3:bc:9a:01:98:79:b7:
c1:2a:69:6f:06:ae:01:e3:07:90:5b:18:63:e8:ca:1c:54:0b:
e3:8a:33:bf:27:bf:55:29:74:54:7d:65:08:e7:e4:79:87:10:
9d:77:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:07 2026 by rpki-client