Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier: O8+QMhU2E8G2jAIOawQgEXbVNsQpgaYwz86v/82Hb+Y=
Subject key identifier: A9:C1:4B:73:4A:76:A2:38:70:61:B8:CC:43:BB:11:40:D2:FD:E4:6E
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer: /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial: 019D3752922E0935E0CB00B525AD06EDB04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 02:00:51 +0000
Manifest this update: Sun 29 Mar 2026 02:00:51 +0000
Manifest next update: Mon 30 Mar 2026 02:00:51 +0000
Files and hashes: 1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: ZES+isXWzUj/gFlFuNr8AwiCpmHkmqkYNPALvR4tRnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:92:2e:09:35:e0:cb:00:b5:25:ad:06:ed:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Validity
Not Before: Mar 29 02:00:51 2026 GMT
Not After : Mar 30 02:00:51 2026 GMT
Subject: CN=a9c14b734a76a2387061b8cc43bb1140d2fde46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:00:7f:ce:f3:c8:34:33:b4:4b:b5:92:68:
c5:96:5b:5e:8c:e8:e4:f5:da:09:18:cb:8e:3d:37:
56:6a:ce:9e:c2:cc:a5:f6:37:1e:e6:82:45:08:93:
2a:66:6a:87:d8:e5:6e:ee:ec:26:9a:1d:04:f0:41:
b0:ea:41:79:e9:53:66:4e:17:86:b5:67:ee:0f:60:
cc:1b:cf:be:76:78:78:b7:04:58:22:1e:72:32:15:
09:92:09:ca:fe:4a:53:8a:5d:92:7d:52:fd:0d:96:
33:47:b7:15:d5:e5:14:dc:f9:0f:c7:c7:78:38:c9:
5e:bb:fc:60:04:14:55:be:86:e7:0a:a2:e0:20:63:
73:0c:e4:3c:05:8b:a3:36:2e:d6:88:0c:db:64:04:
de:13:d0:61:a0:48:00:10:4a:13:11:f8:ef:89:ed:
9c:b1:97:a0:91:d8:77:18:c0:58:6a:e7:fb:28:d8:
de:40:98:36:e3:70:1f:5f:87:02:c7:ea:4b:9f:b5:
05:ac:1c:bd:5d:ce:67:5f:2c:08:d8:ed:fc:23:96:
25:be:52:60:8f:70:6e:75:f6:69:ba:7a:45:25:48:
eb:ba:b1:8a:f8:45:14:03:72:fc:32:4a:ce:a8:d6:
b5:40:a5:ab:7e:63:da:df:2a:ef:05:9c:4e:e2:ea:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:4B:73:4A:76:A2:38:70:61:B8:CC:43:BB:11:40:D2:FD:E4:6E
X509v3 Authority Key Identifier:
keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:11:3a:0e:b6:60:61:dc:93:4f:84:65:97:06:f2:c1:9d:3d:
5d:e0:32:8d:6b:bf:4e:b3:c5:8e:2a:7b:f0:94:50:1a:05:b3:
1d:04:97:60:ad:3e:a9:44:34:6b:82:ec:03:b4:ce:27:6d:e7:
d2:cd:b5:2f:c2:f4:76:db:29:a3:fd:31:c5:f1:ae:b7:cf:98:
0f:78:e4:cc:4c:b2:ac:af:bb:20:a5:67:74:ba:58:70:c6:65:
c2:96:94:8e:23:fa:bf:d3:05:e6:d9:18:86:c6:0d:ca:32:8b:
85:99:c0:6c:6e:4b:c2:e6:d0:28:a3:28:2d:d5:d2:15:4f:c5:
dc:68:68:31:78:a0:ab:d2:39:4a:a7:20:72:fa:ad:07:48:f4:
8c:38:7d:f2:6d:42:40:fb:b4:c9:d6:71:08:5c:57:7b:1e:55:
7b:e0:55:09:c9:5f:e2:d8:67:e8:f9:2b:68:42:9f:54:30:35:
8a:e7:f8:6d:f0:fd:9c:03:7a:fc:77:f8:11:b7:af:53:2f:8c:
0c:8a:d6:b2:08:e5:86:8a:14:88:ed:47:9a:75:f9:e4:04:15:
5c:46:17:9f:9a:7c:c9:d2:4e:c5:b2:8d:b3:39:0b:38:8b:da:
66:34:22:08:c2:9f:52:e5:6f:95:bd:a4:7c:a1:f3:08:a8:94:
27:4a:43:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UpIuCTXgywC1Ja0G7bBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTA2ZTRkODJmYmFlMzRjMTUyYTM1ZDQzZDBmZGY0OWQ1
NGJlOWUwHhcNMjYwMzI5MDIwMDUxWhcNMjYwMzMwMDIwMDUxWjAzMTEwLwYDVQQD
EyhhOWMxNGI3MzRhNzZhMjM4NzA2MWI4Y2M0M2JiMTE0MGQyZmRlNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1gAf87zyDQztEu1kmjFlltejOjk
9doJGMuOPTdWas6ewsyl9jce5oJFCJMqZmqH2OVu7uwmmh0E8EGw6kF56VNmTheG
tWfuD2DMG8++dnh4twRYIh5yMhUJkgnK/kpTil2SfVL9DZYzR7cV1eUU3PkPx8d4
OMleu/xgBBRVvobnCqLgIGNzDOQ8BYujNi7WiAzbZATeE9BhoEgAEEoTEfjvie2c
sZegkdh3GMBYauf7KNjeQJg243AfX4cCx+pLn7UFrBy9Xc5nXywI2O38I5YlvlJg
j3BudfZpunpFJUjrurGK+EUUA3L8MkrOqNa1QKWrfmPa3yrvBZxO4uq25wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnBS3NKdqI4cGG4zEO7EUDS/eRuMB8GA1UdIwQY
MBaAFLwQbk2C+640wVKjXUPQ/fSdVL6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzct
NjM0OWExN2FiYjQzLzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzctNjM0OWExN2FiYjQz
LzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRE6DrZg
YdyTT4RllwbywZ09XeAyjWu/TrPFjip78JRQGgWzHQSXYK0+qUQ0a4LsA7TOJ23n
0s21L8L0dtspo/0xxfGut8+YD3jkzEyyrK+7IKVndLpYcMZlwpaUjiP6v9MF5tkY
hsYNyjKLhZnAbG5LwubQKKMoLdXSFU/F3GhoMXigq9I5SqcgcvqtB0j0jDh98m1C
QPu0ydZxCFxXex5Ve+BVCclf4thn6PkraEKfVDA1iuf4bfD9nAN6/Hf4EbevUy+M
DIrWsgjlhooUiO1HmnX55AQVXEYXn5p8ydJOxbKNszkLOIvaZjQiCMKfUuVvlb2k
fKHzCKiUJ0pDiw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:22 2026 by rpki-client