Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: /VRrZZqbsl0yIOhxoLoChf3BZm0JlAYiSXa4eYDgtC4=
Subject key identifier: F3:2F:B2:42:65:B2:42:34:75:32:93:C9:9E:37:C0:FC:B4:26:3B:91
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 019D29619475128B120E5E694E6BB478DA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 14D8
Signing time: Thu 26 Mar 2026 09:02:33 +0000
Manifest this update: Thu 26 Mar 2026 09:02:33 +0000
Manifest next update: Fri 27 Mar 2026 09:02:33 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: WEwfRuD3a3sF37U7mVdqwI6rKjyS2Vpx0TkpsG1N49s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:94:75:12:8b:12:0e:5e:69:4e:6b:b4:78:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Mar 26 09:02:33 2026 GMT
Not After : Mar 27 09:02:33 2026 GMT
Subject: CN=f32fb24265b24234753293c99e37c0fcb4263b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:8f:55:74:ab:94:54:ec:33:01:79:ce:fa:
0d:f5:79:5b:0c:55:71:03:f7:b1:59:75:b4:39:d8:
b8:81:a7:bc:72:d1:37:c0:9a:01:18:62:33:fa:38:
c8:fa:a1:27:81:f4:74:7c:7b:be:ce:76:99:6c:06:
c1:7d:87:c2:8a:89:1a:c2:00:ae:68:ae:cb:8f:d8:
7a:29:69:dd:70:91:34:bf:e7:87:98:70:61:c8:a6:
d2:2e:40:85:22:01:ff:77:1c:24:3a:1e:73:5a:d1:
ea:29:9c:f1:b1:35:8e:b6:4f:5f:e6:b4:0c:f0:fb:
3b:f9:8e:2a:ca:e6:a1:92:7d:c7:9f:54:cc:52:67:
54:8e:4c:6f:69:a5:3f:4e:17:99:d6:ee:c9:17:a9:
98:6c:ef:28:7f:62:18:c6:53:ec:af:8e:64:64:78:
e8:b2:1d:c1:83:d1:91:8f:a3:96:fa:97:11:71:8a:
5a:82:ed:d1:a8:66:b6:a7:6a:fa:1f:8b:80:8d:2c:
41:3a:4d:43:fd:f3:4b:8b:6c:fe:b5:5c:a4:39:cd:
e8:b3:1e:ac:6e:f7:49:cb:b8:b6:90:55:98:ce:74:
66:73:cc:03:ca:88:1e:de:b1:9d:33:16:86:a5:7d:
a3:5b:5d:71:f7:6d:e4:67:d3:95:53:82:39:63:83:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:B2:42:65:B2:42:34:75:32:93:C9:9E:37:C0:FC:B4:26:3B:91
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fe:77:d5:43:7f:3b:a7:6b:f2:39:66:01:74:9a:bb:63:68:
2a:db:b9:da:6f:8b:bd:5e:fc:18:4b:bf:b6:84:1e:d7:42:e6:
b1:7e:3b:cb:de:b7:cc:71:62:6c:95:55:d2:98:f7:7d:38:76:
2d:2a:4a:f2:4b:ac:41:35:1a:42:a9:84:21:f5:c6:8d:75:43:
40:1f:8b:bb:49:eb:64:c2:3f:91:b3:63:f7:c4:1e:b3:44:03:
17:23:6e:ba:cc:28:0c:0a:1f:bb:5b:3f:0c:d5:f9:16:b1:2d:
58:c6:55:8a:ca:51:46:86:d2:73:34:14:a0:d0:ef:b4:51:78:
82:40:a4:a0:90:1e:cb:95:f9:45:38:1c:de:8f:bc:fe:a9:de:
cd:32:cd:b1:42:61:b8:c4:59:6c:cc:70:d3:2c:b7:fa:b0:98:
3c:37:fa:ae:37:aa:a4:54:6d:bd:a7:73:ea:a0:f9:32:16:a0:
a9:65:44:e3:61:91:2d:77:08:4f:37:5c:43:d7:d1:b4:e7:5a:
da:8b:8e:de:e9:62:0e:05:33:c4:70:11:f0:dd:aa:68:1d:23:
21:35:20:6b:98:3f:d0:47:66:c8:2d:cf:ed:ae:32:d9:9e:ec:
9e:5b:f1:bc:15:47:a1:bc:cc:49:01:85:49:a7:84:92:12:a6:
6e:42:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:06 2026 by rpki-client