Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
File: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft (raw, json)
Hash identifier: jism+3RiHKrLTnxcikUencmpOQQHsNJGIY2mVE1mVUU=
Subject key identifier: 96:47:2B:3A:AB:ED:C7:71:13:82:C0:BF:0D:7E:6E:48:83:FF:E1:71
Authority key identifier: 57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4
Certificate issuer: /CN=57c4a93b49f30ba76099bbda562d47b920487bf4
Certificate serial: 019D39E5E6E88C42D66C6ED52A422D1F7A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
Manifest number: 0213
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl (hash: ncwecdmQq9kVqR3lSAxsBK7pi6Yg84VoYhHMzTL8iEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e6:e8:8c:42:d6:6c:6e:d5:2a:42:2d:1f:7a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c4a93b49f30ba76099bbda562d47b920487bf4
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=96472b3aabedc7711382c0bf0d7e6e4883ffe171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:53:73:4f:22:e6:a6:db:69:d1:9f:f7:a7:
86:ac:47:06:bd:a7:ed:e5:14:f5:5c:10:bd:bf:a9:
c7:3a:5e:9d:35:50:85:f9:7c:4f:d8:20:57:b3:ba:
ed:bb:56:f9:2b:0e:de:7b:13:86:1d:81:f3:48:db:
f2:fc:c1:dc:de:53:da:4e:5e:de:8b:fc:a6:88:93:
81:ba:83:5a:2a:79:b5:5d:f5:ff:30:57:33:2d:5a:
31:f4:1a:40:66:8e:07:00:ea:68:2c:3d:70:bd:a6:
5a:6e:72:01:3a:75:cf:f3:3f:92:8c:ff:ac:4d:e3:
92:95:72:87:6f:2b:34:55:1b:e3:06:c8:6d:48:3c:
ed:71:8e:75:90:54:24:d2:59:b4:21:69:9b:02:80:
b1:ee:79:65:c8:eb:44:8f:ad:4e:0d:7a:0d:18:e6:
ad:b6:ec:30:e1:b9:d6:cb:81:0d:5c:fe:22:bf:1f:
f4:13:84:4e:f5:e6:f0:81:86:f8:79:60:85:8d:77:
cd:7c:c9:37:d2:2d:cc:b8:77:31:56:81:61:ee:73:
d9:a7:be:6e:83:27:d2:e6:70:0a:c5:03:1c:80:61:
6f:7f:ed:26:e6:bc:31:ca:53:b3:94:60:e0:0e:3d:
aa:e6:f9:e9:78:37:93:4a:e5:3f:33:c4:4c:b4:fe:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:2B:3A:AB:ED:C7:71:13:82:C0:BF:0D:7E:6E:48:83:FF:E1:71
X509v3 Authority Key Identifier:
keyid:57:C4:A9:3B:49:F3:0B:A7:60:99:BB:DA:56:2D:47:B9:20:48:7B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6deafd-d1bc-4133-aeca-148490368b9c/1/V8SpO0nzC6dgmbvaVi1HuSBIe_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:83:dc:e5:8e:6f:e5:d0:ec:cf:b4:c3:71:ae:e5:b8:01:55:
1e:e6:69:d3:52:45:fa:63:bc:88:c6:04:1c:ee:56:c6:86:c3:
0d:a2:14:09:fd:fc:ab:e1:ff:f2:c8:65:54:df:d3:b3:a5:4d:
a5:07:d6:92:3c:28:fa:fa:15:bd:34:ff:73:ad:de:1e:be:3f:
28:84:d8:89:ac:cf:92:a0:32:22:b4:b9:8c:7d:23:45:8c:41:
78:a3:81:32:99:ea:6f:c7:90:5e:bb:ea:38:74:05:19:33:79:
6e:d6:ff:0d:39:cc:d2:3d:9c:90:dd:a7:03:16:88:5e:e0:51:
45:50:90:6a:6b:fc:4d:f0:88:e9:97:a0:99:f6:f2:03:e4:9a:
7e:ab:b9:7d:93:4e:f6:2c:1c:a0:9d:56:ab:6b:6b:06:24:df:
21:c1:06:ef:ea:5f:cb:05:b6:d4:5b:11:23:bf:3c:b3:ef:4d:
8a:cd:5f:6e:ce:d3:f3:a6:40:1c:2c:ac:74:90:9b:3b:bd:04:
f3:63:6f:3d:5b:52:90:44:50:06:4f:51:68:cb:bb:de:3f:dc:
5b:74:91:19:57:c3:e9:73:cd:b5:7d:4c:d9:ad:1a:75:7b:7b:
b0:bb:6f:92:3d:91:3e:1e:c2:54:ac:49:a9:fb:3b:ec:1a:5b:
47:e5:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:16 2026 by rpki-client