Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier: dr7elxpzzIHybL7UwRNwdYK1BPZDXMHVW/eFytYn+cw=
Subject key identifier: 9F:23:2B:1C:F8:6F:F8:9F:13:CA:2E:9E:98:28:8C:A5:A1:D1:12:8E
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer: /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial: 019D28F3340C778DF319C6B79EC827D3DADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number: 0B23
Signing time: Thu 26 Mar 2026 07:02:00 +0000
Manifest this update: Thu 26 Mar 2026 07:02:00 +0000
Manifest next update: Fri 27 Mar 2026 07:02:00 +0000
Files and hashes: 1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: elr6CNiMyhcrrMtkxll3UdXT5DAVvrrI92XjTKepWLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:34:0c:77:8d:f3:19:c6:b7:9e:c8:27:d3:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Validity
Not Before: Mar 26 07:02:00 2026 GMT
Not After : Mar 27 07:02:00 2026 GMT
Subject: CN=9f232b1cf86ff89f13ca2e9e98288ca5a1d1128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:0a:80:82:98:cd:de:77:7c:0d:cf:4c:b3:
35:a9:a3:9f:c1:9a:84:ec:51:82:c4:40:e2:3f:90:
e7:87:87:c4:61:86:10:02:6a:6a:74:7b:7d:67:a1:
ff:7b:f1:7a:e1:1b:20:5d:81:1d:92:3d:0a:e1:f1:
27:d0:db:e8:63:48:ca:b2:fb:57:d9:a8:1d:d2:74:
6e:f9:b1:67:43:5d:bd:fa:51:76:25:83:50:61:ed:
2b:d4:8a:3f:0e:24:67:6c:bf:7c:07:a0:e9:b8:3d:
7f:08:1f:55:f3:88:01:4a:1b:43:16:76:d4:e8:12:
3b:91:e5:9f:ef:91:2b:c6:68:22:e0:e1:bd:a6:d5:
4d:c1:5f:51:e9:31:ba:a6:ad:e7:ec:fa:c9:c3:0e:
e1:c7:92:1c:b3:6c:ac:99:85:18:95:8e:e5:5f:82:
e3:9e:e4:70:30:b1:1f:3a:d5:9a:49:70:e3:85:50:
fc:06:00:4f:53:0f:24:61:89:29:6c:a6:90:31:eb:
83:ca:7b:61:3e:f1:68:4c:96:21:c0:aa:4b:a0:c4:
c8:db:be:41:52:73:dd:d0:a3:a8:42:ae:e5:1d:6f:
be:aa:11:57:04:1f:55:f3:5b:cb:d6:2d:e3:68:6e:
bd:2e:56:bf:d7:bf:ff:ba:ba:1a:72:b6:21:60:06:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:2B:1C:F8:6F:F8:9F:13:CA:2E:9E:98:28:8C:A5:A1:D1:12:8E
X509v3 Authority Key Identifier:
keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:28:48:fb:40:42:f9:a5:46:64:a2:62:d4:b2:c6:96:9e:42:
68:1f:6b:16:e6:0d:9c:7c:5e:76:31:c3:98:05:b4:dd:4a:e7:
cd:c6:0c:45:2e:46:22:53:70:ab:48:19:20:08:3a:a1:06:37:
11:7f:22:2f:fd:de:f3:01:06:e6:41:20:c2:f0:de:8d:50:3f:
38:8b:c3:94:c4:3a:01:f9:88:ad:84:fb:9b:7a:12:8b:d8:7d:
eb:30:b0:22:55:e3:d8:0b:d4:14:a8:fb:b9:da:01:02:fb:89:
87:b2:45:5e:b7:ee:f8:f6:42:2d:1b:4d:c3:00:b4:c6:55:ba:
d5:66:b4:de:24:09:46:85:7e:af:28:4c:c7:9f:12:34:7a:e7:
c5:9c:c0:81:b1:19:3e:b3:6a:e5:03:ec:15:8d:9f:06:5a:69:
61:28:b2:e4:45:98:46:08:24:20:be:b5:ae:a5:71:1e:e4:4f:
d0:8f:da:c6:f7:a6:96:14:e2:04:54:a0:7a:33:09:d3:36:d4:
ed:55:68:50:d3:81:4a:53:d3:de:de:23:7a:39:e6:f1:32:7a:
4b:68:fd:80:ef:7c:b0:78:08:ee:0b:ea:17:45:4a:d9:66:05:
16:74:ef:39:89:c0:4f:7e:ff:39:95:44:01:1b:44:75:3b:ae:
e8:9b:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:52 2026 by rpki-client