Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: xLxjfVEf3hX4nhZpk0e19Y53fQTtdGC2q0S9PpMfPL0=
Subject key identifier: 70:3D:35:66:09:6B:C0:57:AE:61:FD:32:67:7D:36:31:D1:4A:6E:AB
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 019D2960FCD8AFEAEBDDC54980C4855DF1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 15A6
Signing time: Thu 26 Mar 2026 09:01:55 +0000
Manifest this update: Thu 26 Mar 2026 09:01:55 +0000
Manifest next update: Fri 27 Mar 2026 09:01:55 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: gsH5I2AsiwwtKl/xj+Bhv0orzt2YcsIk1ngwnsW70uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fc:d8:af:ea:eb:dd:c5:49:80:c4:85:5d:f1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Mar 26 09:01:55 2026 GMT
Not After : Mar 27 09:01:55 2026 GMT
Subject: CN=703d3566096bc057ae61fd32677d3631d14a6eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:44:1b:2e:d1:9e:e3:8d:e7:f5:fc:b7:8b:
05:31:58:ff:82:0e:ed:88:d3:46:c3:9a:f6:35:62:
f2:c6:65:a5:79:98:46:d4:f3:da:13:4f:bd:c9:21:
33:e3:65:8c:4f:8a:15:d8:d2:9d:6b:be:d7:03:87:
87:5b:ee:43:f2:f0:2f:1c:b4:7c:7b:59:83:d2:b6:
c9:6f:ee:88:bc:68:a5:b3:fb:29:15:00:52:b4:2c:
b6:f3:60:7c:70:60:2b:74:30:18:7a:17:4d:99:2c:
5d:18:15:d7:7d:f3:ff:67:7a:1e:0a:52:94:e0:4a:
c8:6a:bc:d0:81:db:76:95:49:bb:66:12:98:9d:53:
0e:7c:2e:c6:f8:97:24:9b:52:8f:eb:62:35:6d:28:
34:cc:01:39:c0:ce:f0:77:6d:1c:6a:14:7c:ef:ef:
5f:ae:94:da:d2:67:08:c3:c8:c9:b3:de:ec:5e:50:
74:7e:22:51:b7:5f:bb:e8:87:8c:b0:fb:21:57:25:
fd:7a:63:dd:4a:1b:66:5f:b9:f5:ca:45:80:fa:72:
87:b2:8a:ec:20:96:4d:83:ea:8d:15:06:3c:40:7f:
99:fa:db:89:51:12:ff:0a:ac:fa:e7:5d:61:6a:dd:
1f:be:fc:ba:78:55:69:02:0b:2b:f1:71:25:1b:29:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:35:66:09:6B:C0:57:AE:61:FD:32:67:7D:36:31:D1:4A:6E:AB
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:30:e9:2b:c1:bb:a4:5d:34:64:b2:b9:1f:51:bb:04:45:22:
57:8b:3c:c9:a8:a2:40:98:f2:8a:43:fd:ff:f8:bd:4f:0e:25:
d4:27:9e:36:38:08:fe:81:9a:1f:1b:8b:cb:43:85:03:45:bc:
bb:82:08:ec:9e:d4:40:fb:4c:97:37:a0:7c:4c:ff:7c:e9:77:
d6:b0:ef:70:c4:de:ae:8d:9d:9d:b1:56:91:a3:12:ba:21:82:
c8:71:ea:13:20:b6:ac:e9:e6:f0:c5:2e:0e:f3:2e:e3:c6:fc:
34:fe:d6:90:51:49:18:38:97:d1:f8:92:1d:6b:8d:73:86:e3:
c8:d7:23:01:e0:68:08:09:9e:75:01:d6:06:01:12:f3:66:ee:
a7:ac:22:7c:3f:36:c1:8b:6f:c4:fc:af:6d:1c:b5:6e:cb:91:
a8:2d:0a:19:57:a9:a6:e4:2f:6c:a4:5d:dd:d0:25:f5:a8:51:
fe:26:bb:b9:58:82:e9:e1:37:85:29:ac:7c:19:7b:6a:04:ff:
c8:64:a1:a0:a3:d6:e6:a1:a5:be:4f:43:ca:c3:e0:a3:a3:5d:
e4:59:c4:ee:e7:85:a7:de:0f:21:20:af:42:af:83:7f:4c:83:
ea:06:29:98:f3:50:7a:0c:ed:d8:b1:53:f4:ce:d9:9d:e1:f5:
67:24:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:44 2026 by rpki-client