Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
File: vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json)
Hash identifier: ZR+sFN53lpY64ned4tB2/ktl2F3UmgnV5+PC0l34o5s=
Subject key identifier: F0:7F:03:1E:72:22:C4:34:6B:0E:6C:18:08:A3:09:82:C2:F2:AE:A1
Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
Certificate issuer: /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Certificate serial: 019D3752B2E1194C0DB50F44F01A54F705C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
Manifest number: 1286
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: yFUVbHNVKU8NTe+7pmaUId+Xte01oLGURKSBbBqk0TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b2:e1:19:4c:0d:b5:0f:44:f0:1a:54:f7:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=f07f031e7222c4346b0e6c1808a30982c2f2aea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:fc:7f:d9:5e:9f:a9:82:2a:24:c5:df:f7:
29:ed:1f:79:56:71:f0:00:35:18:2d:42:07:92:48:
7b:6e:58:8c:ef:a9:dd:a9:7b:9b:af:c9:86:71:b9:
56:0d:4e:64:6c:0d:03:ad:94:a4:57:41:2c:2b:64:
41:f7:7e:e5:44:b2:6e:3c:f5:49:95:7b:2b:98:2b:
5a:b1:82:99:58:a7:f9:db:f6:38:56:05:eb:74:05:
da:e2:a6:a5:d8:e6:e3:46:47:8a:2d:15:3d:80:8d:
53:4a:25:60:b6:36:47:4a:cf:22:d5:39:fb:fd:ab:
82:a1:d9:6b:3a:b2:eb:81:f9:7d:a0:d7:43:cf:83:
26:42:05:ba:2e:d1:79:cc:ee:2d:23:05:d8:ed:12:
28:d4:e7:54:8f:2b:51:4c:35:b9:da:a6:0b:25:ce:
7b:2f:84:ef:7c:da:3b:61:c6:8f:f1:9a:46:f1:0e:
26:24:7d:5b:0a:23:37:aa:4a:63:ef:79:c5:35:31:
68:f7:02:74:7b:22:f9:da:8e:eb:3a:c2:a9:59:90:
b7:d2:b5:3c:2f:52:55:b5:59:57:38:01:5c:12:5b:
b0:56:db:cd:d9:90:d6:64:a3:12:9c:b1:28:3c:fc:
f4:7c:d5:32:cf:10:86:18:a8:7f:9c:81:6f:f3:a2:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:03:1E:72:22:C4:34:6B:0E:6C:18:08:A3:09:82:C2:F2:AE:A1
X509v3 Authority Key Identifier:
keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:13:c3:0d:55:cc:3f:15:d2:1a:98:39:15:5e:e0:7e:df:
a0:40:94:d3:a2:a7:47:22:38:ab:9d:5b:4b:af:c5:47:81:46:
44:88:25:30:13:ce:8e:a7:8c:ed:b9:fc:34:b1:63:07:40:cc:
5b:ce:89:f8:a6:5d:4d:ac:2e:2b:be:47:4f:0e:4a:d7:5b:e3:
ab:4e:1f:86:62:95:56:b5:41:3d:df:64:68:7e:16:4f:46:58:
70:e0:29:51:3b:2e:08:83:4c:01:55:9e:93:71:34:6f:64:b0:
19:7d:5f:25:95:38:0c:b6:a9:11:2a:49:04:82:c3:71:29:46:
39:3b:47:35:9b:c8:6c:b8:2a:ff:a7:64:6e:5b:a1:9b:fb:52:
47:5c:ee:f4:99:c5:bc:48:de:27:3b:85:6f:3f:dc:83:eb:17:
fd:84:9d:ff:41:21:80:53:93:10:ea:68:bf:79:59:0f:00:28:
c3:0d:c1:c7:2c:10:5d:90:e2:75:0d:ad:ac:08:dc:e8:eb:11:
fc:22:db:15:ae:91:91:9f:c1:e1:fd:14:de:44:d7:55:3c:ff:
3f:5b:c1:7a:68:ea:d5:f9:a5:38:39:db:56:58:97:07:09:4b:
76:24:f8:3d:31:94:70:70:d2:59:e1:06:cf:4d:b4:c5:8c:7f:
a3:ff:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:19 2026 by rpki-client