Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: MoTjxJ86ZlUtp4XAtIksfF9hTqiyyu0yA5JYzHlJou0=
Subject key identifier: 4D:CB:23:84:CE:1E:6B:A6:A7:71:EB:BC:8E:3D:FA:3D:11:12:50:A3
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019D3977C475D94753B0F67770CE8C3675B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 064C
Signing time: Sun 29 Mar 2026 12:00:43 +0000
Manifest this update: Sun 29 Mar 2026 12:00:43 +0000
Manifest next update: Mon 30 Mar 2026 12:00:43 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: Ssu4GV9F5Uw+/aDQaNQWulOU++SGPJ9C63q1WWSPdno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c4:75:d9:47:53:b0:f6:77:70:ce:8c:36:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Mar 29 12:00:43 2026 GMT
Not After : Mar 30 12:00:43 2026 GMT
Subject: CN=4dcb2384ce1e6ba6a771ebbc8e3dfa3d111250a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:51:c4:25:88:d5:70:5e:f9:df:55:25:63:
04:8d:97:9f:57:2e:9f:6f:5a:03:26:90:f8:15:57:
a3:fc:b2:a1:15:68:25:65:2c:cb:b8:6a:6a:86:75:
fd:9c:38:0a:62:51:e7:e0:0c:dc:d4:31:a3:15:d7:
ba:0e:c3:d5:d2:88:f2:4b:72:eb:2d:7a:0d:5f:5e:
64:76:14:88:a4:5a:62:2c:f9:7e:7d:92:d4:76:ad:
cd:f7:6a:38:a7:22:b6:a3:11:82:de:52:2c:aa:4d:
0d:61:09:a6:63:0e:34:42:99:f1:79:81:53:4d:aa:
49:91:5b:f0:e9:ff:d4:17:e9:5f:4e:3d:f6:e3:0e:
3c:6f:02:64:28:e2:0f:3e:13:82:97:db:2b:b7:05:
8e:8b:c7:e6:9c:83:59:a0:b5:dd:dd:9a:95:4e:22:
d3:a5:ab:0e:c3:d2:23:4c:aa:00:08:bb:36:5b:82:
ef:12:90:5c:7e:96:07:57:66:5e:50:18:d7:7f:25:
c3:ce:36:29:d3:e2:a1:41:4d:c4:6b:4f:4c:35:87:
ac:ac:36:b9:34:ba:cd:33:aa:c6:61:33:21:73:9e:
26:4b:1c:f4:a8:fa:b7:3d:b9:41:4b:fa:88:aa:e0:
5e:c0:4d:05:45:ea:5d:4b:31:79:50:d0:5d:b3:9b:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:23:84:CE:1E:6B:A6:A7:71:EB:BC:8E:3D:FA:3D:11:12:50:A3
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:67:73:d8:d3:ee:61:d7:ab:29:b5:7b:64:77:b3:55:33:81:
65:57:55:3a:bb:d7:18:f9:21:86:de:7f:f6:9c:aa:3a:35:fc:
a8:92:05:68:fe:cb:6e:49:c8:c4:dd:49:78:84:aa:c7:0a:91:
b9:3c:cc:eb:86:f2:96:cf:46:44:d2:da:78:b5:76:62:73:ad:
86:93:2a:f3:5f:b6:9d:a8:3f:53:2f:e8:95:27:2a:b1:fb:eb:
9e:1f:cf:92:73:94:50:90:fa:c6:71:d6:cf:67:13:d1:1e:fb:
b9:47:4c:0c:5d:0b:56:1a:a4:ff:fa:d0:2a:17:0b:fd:5f:ca:
a8:6c:21:af:8d:c3:27:08:35:39:7e:09:f6:8d:21:95:0d:b2:
97:cd:a7:a1:8e:24:49:68:c2:a3:1b:8d:1a:ce:61:59:32:cc:
84:30:27:1d:49:1a:f3:58:7d:2f:ea:9d:8d:f7:cd:64:42:b1:
dd:ba:19:60:b9:15:d5:6d:d1:1d:ff:76:be:60:85:eb:3c:08:
5b:7b:ca:dd:dc:81:d7:e8:2d:62:0d:40:1c:53:0b:36:da:8b:
33:98:9c:9f:c4:f0:04:06:ac:bd:5e:67:6d:68:3f:5e:4e:5e:
ab:f6:e1:a0:c6:52:75:b8:cb:db:f6:9a:31:46:7d:b3:6c:9f:
db:15:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:37 2026 by rpki-client