Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.mft
File: v88kiR7ioP_7jgeqJzq058-IDuI.mft (raw, json)
Hash identifier: DJ7hL8bi7sSJFgG6/TMUEpZ7+SgUblVKoG7kUOu7g/8=
Subject key identifier: FF:54:B6:D0:1C:5E:31:E6:7B:85:6E:F4:46:8C:38:11:25:B5:E0:D0
Authority key identifier: BF:CF:24:89:1E:E2:A0:FF:FB:8E:07:AA:27:3A:B4:E7:CF:88:0E:E2
Certificate issuer: /CN=bfcf24891ee2a0fffb8e07aa273ab4e7cf880ee2
Certificate serial: 019D37C0DE0598F594D50D80BB75A851E601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v88kiR7ioP_7jgeqJzq058-IDuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.mft
Manifest number: BA
Signing time: Sun 29 Mar 2026 04:01:19 +0000
Manifest this update: Sun 29 Mar 2026 04:01:19 +0000
Manifest next update: Mon 30 Mar 2026 04:01:19 +0000
Files and hashes: 1: v88kiR7ioP_7jgeqJzq058-IDuI.crl (hash: 3gvNGO/qnvZqMxU3c/KU7Q3gWSRObuSrG5gfoXdYoGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v88kiR7ioP_7jgeqJzq058-IDuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:de:05:98:f5:94:d5:0d:80:bb:75:a8:51:e6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfcf24891ee2a0fffb8e07aa273ab4e7cf880ee2
Validity
Not Before: Mar 29 04:01:19 2026 GMT
Not After : Mar 30 04:01:19 2026 GMT
Subject: CN=ff54b6d01c5e31e67b856ef4468c381125b5e0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:f5:a1:5b:d6:91:3a:97:d2:c3:e6:a7:1c:
d4:52:20:7a:7c:c4:17:ad:f9:6c:7d:f6:b3:ac:9d:
06:06:72:5a:4f:27:09:62:7e:d3:a0:d3:50:87:9f:
74:0a:13:08:d1:6c:77:c7:bb:51:38:9a:85:5b:98:
b0:5f:da:72:be:d1:8a:79:c8:ba:12:29:11:62:f8:
8a:4d:53:f8:91:ac:a8:45:6a:e1:30:5e:a7:8f:41:
78:6c:17:4f:fb:6e:4e:91:6f:ff:e4:29:71:a1:e6:
f5:7f:0d:34:41:db:5c:3f:e3:b5:42:04:c0:6d:b7:
d9:b2:5e:46:1b:b2:94:e7:5a:a9:68:a0:11:12:62:
8a:fa:27:41:8c:7b:08:4d:3c:ea:c7:11:66:59:61:
c2:6d:72:5a:f5:a5:41:c5:78:1c:4d:0e:38:f2:e3:
6f:98:a9:89:69:d5:8d:77:e4:1d:c0:1b:7d:b4:73:
53:b9:9c:ec:60:68:f8:a6:79:c5:46:67:a9:5a:6e:
de:22:56:f2:6e:d8:5c:9c:0f:d2:f0:27:95:c0:ac:
e3:2d:4b:90:36:f1:b6:54:cd:3d:e9:d0:0a:b4:8f:
25:66:19:40:f5:e7:9d:51:45:0f:ca:5f:f5:33:c7:
52:ff:07:5c:9c:0b:a5:19:8b:26:05:8d:48:c3:10:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:B6:D0:1C:5E:31:E6:7B:85:6E:F4:46:8C:38:11:25:B5:E0:D0
X509v3 Authority Key Identifier:
keyid:BF:CF:24:89:1E:E2:A0:FF:FB:8E:07:AA:27:3A:B4:E7:CF:88:0E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v88kiR7ioP_7jgeqJzq058-IDuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1ca230-3b9f-445b-aa10-240d22f2f895/1/v88kiR7ioP_7jgeqJzq058-IDuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b1:6e:96:8b:45:47:13:0c:a8:44:c7:f5:a3:be:b9:1c:0f:
d5:f3:83:82:ae:b4:77:16:b0:65:41:91:6d:bb:98:bc:57:8b:
1a:bc:4b:2a:c8:ed:f5:d6:c0:09:4a:20:1d:9f:01:7e:70:e1:
8e:d2:56:47:09:59:97:c6:f4:42:f3:5c:26:28:0e:13:47:38:
9b:78:f9:1b:98:29:c9:82:4e:71:c7:43:d2:7a:4f:e6:be:80:
e4:f1:ad:5a:65:32:f4:a0:79:d0:09:19:5f:ea:ba:37:1f:51:
84:6d:81:8e:3c:e5:4e:83:33:af:bb:1f:5f:92:30:56:ce:94:
21:1f:34:27:9b:ec:57:02:7c:89:af:2c:25:c2:15:8e:5e:25:
49:49:48:8a:e5:36:c6:c3:87:74:c5:79:a5:b2:7d:33:3b:1b:
c1:20:4b:cf:d5:ee:5b:90:b2:a4:da:df:38:4b:cb:12:fe:11:
db:22:87:21:48:00:38:c7:85:ba:ba:41:12:76:07:6a:81:73:
a0:08:3b:8b:5f:a1:6c:48:14:e1:d4:0d:98:33:c9:d4:c1:67:
99:f7:83:45:fc:6a:fd:a4:9a:09:08:1f:e0:6b:c2:86:6a:95:
a9:d8:93:7d:58:a3:60:b4:71:b0:da:c2:09:0c:b8:52:5e:9a:
03:ea:bb:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wN4FmPWU1Q2Au3WoUeYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2YyNDg5MWVlMmEwZmZmYjhlMDdhYTI3M2FiNGU3Y2Y4
ODBlZTIwHhcNMjYwMzI5MDQwMTE5WhcNMjYwMzMwMDQwMTE5WjAzMTEwLwYDVQQD
EyhmZjU0YjZkMDFjNWUzMWU2N2I4NTZlZjQ0NjhjMzgxMTI1YjVlMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiab1oVvWkTqX0sPmpxzUUiB6fMQX
rflsffazrJ0GBnJaTycJYn7ToNNQh590ChMI0Wx3x7tROJqFW5iwX9pyvtGKeci6
EikRYviKTVP4kayoRWrhMF6nj0F4bBdP+25OkW//5Clxoeb1fw00QdtcP+O1QgTA
bbfZsl5GG7KU51qpaKAREmKK+idBjHsITTzqxxFmWWHCbXJa9aVBxXgcTQ448uNv
mKmJadWNd+QdwBt9tHNTuZzsYGj4pnnFRmepWm7eIlbybthcnA/S8CeVwKzjLUuQ
NvG2VM096dAKtI8lZhlA9eedUUUPyl/1M8dS/wdcnAulGYsmBY1IwxDDiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9UttAcXjHme4Vu9EaMOBElteDQMB8GA1UdIwQY
MBaAFL/PJIke4qD/+44Hqic6tOfPiA7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjg4a2lSN2lvUF83amdlcUp6cTA1OC1JRHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xY2EyMzAtM2I5Zi00NDViLWFhMTAt
MjQwZDIyZjJmODk1LzEvdjg4a2lSN2lvUF83amdlcUp6cTA1OC1JRHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xY2EyMzAtM2I5Zi00NDViLWFhMTAtMjQwZDIyZjJmODk1
LzEvdjg4a2lSN2lvUF83amdlcUp6cTA1OC1JRHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7FulotF
RxMMqETH9aO+uRwP1fODgq60dxawZUGRbbuYvFeLGrxLKsjt9dbACUogHZ8BfnDh
jtJWRwlZl8b0QvNcJigOE0c4m3j5G5gpyYJOccdD0npP5r6A5PGtWmUy9KB50AkZ
X+q6Nx9RhG2BjjzlToMzr7sfX5IwVs6UIR80J5vsVwJ8ia8sJcIVjl4lSUlIiuU2
xsOHdMV5pbJ9MzsbwSBLz9XuW5CypNrfOEvLEv4R2yKHIUgAOMeFurpBEnYHaoFz
oAg7i1+hbEgU4dQNmDPJ1MFnmfeDRfxq/aSaCQgf4GvChmqVqdiTfVijYLRxsNrC
CQy4Ul6aA+q7MQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:17 2026 by rpki-client