Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
File: vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft (raw, json)
Hash identifier: M2IqZCbh2yR25HBxX/aQ9Ys37GneRGDhnPc7eDjLAFo=
Subject key identifier: BC:FB:7E:1C:65:8B:D2:1E:26:98:70:51:0F:B9:37:E2:30:9D:47:2B
Authority key identifier: BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47
Certificate issuer: /CN=bc403804a88bd19deda04fb93541bfd0d0c65447
Certificate serial: 019D273A934D5995160D4B9B23C7E1A2AAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
Manifest number: 9D
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl (hash: CmaFgS/M4wvuV2qL4R2YOgkAdyRM1zRHW+H6Xpgc+ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:93:4d:59:95:16:0d:4b:9b:23:c7:e1:a2:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc403804a88bd19deda04fb93541bfd0d0c65447
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=bcfb7e1c658bd21e269870510fb937e2309d472b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:ba:42:70:9b:fc:b9:ac:98:7c:3e:29:76:
cf:49:cf:e8:06:87:4a:ca:3a:81:12:37:95:2b:cf:
f4:a7:3f:0a:de:61:b7:aa:73:4d:88:b8:77:b9:4d:
e8:61:0b:f4:bd:cf:30:8d:b8:50:2c:de:a1:0c:97:
de:b5:66:a7:f8:8f:e6:02:3f:20:a3:d8:77:11:63:
2d:d7:23:7b:94:8e:cf:70:f5:1b:87:a8:be:f5:97:
1d:2c:97:3e:27:07:d6:b3:2a:aa:7f:87:7b:3a:50:
c5:72:90:25:54:4f:ad:16:fe:f6:da:b2:e9:de:2b:
58:a9:68:48:ef:38:6e:1e:9c:d0:af:82:56:f1:2c:
9e:5e:6d:bc:11:48:ce:1d:9c:22:a4:d8:fc:99:e3:
bd:55:70:d0:38:64:e0:44:77:6f:88:bb:b3:11:29:
21:fd:6f:fc:6e:be:a8:7d:a9:70:ce:56:fa:18:b7:
d3:d8:fe:15:79:70:a2:16:47:5c:d8:2f:26:18:91:
0b:d0:16:70:82:62:21:4f:85:b4:33:c7:08:5f:79:
b9:ab:4b:c7:58:33:99:d3:39:94:95:3d:84:81:bd:
a8:15:36:60:08:97:d1:26:a3:12:8d:13:3d:b5:7f:
4b:a4:34:fb:c8:5a:db:2c:b2:fa:93:b1:0c:c7:2d:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FB:7E:1C:65:8B:D2:1E:26:98:70:51:0F:B9:37:E2:30:9D:47:2B
X509v3 Authority Key Identifier:
keyid:BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c4:13:78:59:57:6e:ae:20:85:70:6b:48:c5:64:a1:79:f7:
23:18:d9:f5:50:eb:42:88:b5:f7:27:73:8d:69:c2:84:8b:c9:
a5:a4:de:47:b2:08:5e:82:69:ca:8e:68:0b:4f:ef:81:e5:b3:
2c:7e:37:11:22:2e:2d:18:f5:ed:0d:65:d2:00:5b:54:29:33:
66:da:ac:4c:75:cb:f7:ba:b3:2f:0e:fc:e8:7a:4f:01:ea:85:
1c:35:e4:f1:0c:f5:05:d6:2b:67:aa:7b:87:a1:75:79:4b:22:
96:55:91:e9:13:2d:ce:98:a5:88:c5:0d:72:18:4a:03:56:78:
ed:cb:26:b3:fb:5f:39:f9:58:bb:5d:04:ac:b6:22:28:c2:4a:
1c:ad:4f:fa:b5:d9:9d:b9:d3:4c:87:d6:26:74:8a:ac:4b:e3:
42:27:f1:c6:f3:fb:b1:f1:5f:c7:ef:4f:af:88:9a:23:2a:07:
9f:ea:eb:0e:9a:83:27:ad:60:45:bd:43:fa:e6:99:d3:d7:1a:
74:11:6b:39:bb:ea:35:75:d3:c4:28:ed:55:3c:44:3a:d1:93:
26:59:f3:f9:79:80:14:50:57:09:73:53:2b:fd:df:6c:52:73:
dd:83:69:50:76:bb:53:62:4d:d9:6d:1b:08:2b:e4:77:57:6b:
59:e0:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:45 2026 by rpki-client