Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
File: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft (raw, json)
Hash identifier: hRDwhqsXwMF80M/As8OGJlYbg2bS+t2E1qFu5/InynQ=
Subject key identifier: 67:10:BA:94:F7:7F:72:27:9D:5A:92:1E:29:93:08:52:71:AB:89:2B
Authority key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
Certificate issuer: /CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Certificate serial: 019D3A53B28D1A795F21A2B406F72316025B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
Manifest number: 0F2F
Signing time: Sun 29 Mar 2026 16:00:56 +0000
Manifest this update: Sun 29 Mar 2026 16:00:56 +0000
Manifest next update: Mon 30 Mar 2026 16:00:56 +0000
Files and hashes: 1: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl (hash: NmSCw7Ph5SiCQPma42Gz1amzcrbqW4REWRsbQHe5wfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:b2:8d:1a:79:5f:21:a2:b4:06:f7:23:16:02:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Validity
Not Before: Mar 29 16:00:56 2026 GMT
Not After : Mar 30 16:00:56 2026 GMT
Subject: CN=6710ba94f77f72279d5a921e2993085271ab892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:04:0a:38:97:5b:12:b8:bf:19:2a:4c:ad:
0e:83:e5:5d:97:78:d2:c8:32:c2:4e:82:e4:76:51:
ba:32:56:90:d1:71:35:57:52:db:ef:97:95:8a:a9:
eb:49:fc:46:e9:dc:98:76:53:cf:8e:ad:65:78:98:
8f:9e:e4:c5:71:e0:7a:50:4e:4f:2d:92:9d:ee:c4:
bf:a3:13:1d:85:02:04:73:15:10:55:45:b7:ff:61:
5b:16:61:4a:80:77:ed:2b:6a:80:c0:c9:81:f7:0b:
15:2f:23:95:93:a4:b4:4f:e1:b0:e1:c3:1d:7d:f3:
9a:c7:3b:a5:b7:98:66:08:2c:3b:46:aa:b6:3c:19:
f4:f1:f2:9a:97:1d:51:ef:56:e6:43:cc:c3:6a:bf:
44:9a:86:bd:b4:9e:dd:9d:b4:d8:4a:00:bb:a1:d1:
c4:1d:57:55:6d:0f:4f:68:6b:93:e9:6d:d3:8b:0a:
29:c0:43:61:7d:9f:11:61:16:83:7d:ab:c5:11:7c:
f3:8e:5d:50:bd:7d:f8:5b:f3:f4:c6:a7:f7:eb:5f:
5c:e0:67:f8:b0:b3:ab:66:e3:26:f8:c2:e3:01:2c:
91:d7:f2:f8:4d:64:30:80:d2:b6:94:ae:3f:50:8f:
24:84:72:0a:a2:35:de:69:9c:e6:05:ce:c0:1a:21:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:BA:94:F7:7F:72:27:9D:5A:92:1E:29:93:08:52:71:AB:89:2B
X509v3 Authority Key Identifier:
keyid:BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:bd:9d:69:8c:fb:0b:e6:fd:4c:63:60:88:df:c8:bf:43:
08:14:2c:05:44:eb:9d:94:42:3f:8c:ff:35:d6:aa:63:03:fd:
d8:29:e5:bd:06:78:a1:45:a9:9f:72:ed:3b:97:74:f7:e9:65:
63:07:1d:38:7a:ab:92:b8:1a:af:c3:dd:df:4d:48:9d:6e:ee:
32:50:c4:59:34:f3:48:b8:64:3e:00:0e:e2:d3:31:2c:6e:8b:
26:01:a5:49:74:f7:e4:57:80:37:d8:a9:55:58:ba:b6:a2:d2:
39:7d:0e:f0:9f:17:c7:e6:58:d4:e5:77:c5:88:13:f3:94:b6:
e9:83:fb:3c:e8:ee:ca:0d:f7:66:4a:62:14:c9:5a:52:1a:f5:
1f:01:99:56:8a:12:79:e3:5e:7e:eb:03:3e:56:a8:49:84:b5:
0b:c9:fb:d0:d8:fd:b0:84:b5:e5:bb:08:e1:8b:9d:e4:af:4b:
a0:28:7d:e8:ea:49:bc:7d:8a:b4:22:38:8a:c4:56:ce:61:c4:
01:3a:6e:96:5b:90:82:94:3c:f3:19:b5:ea:e4:da:9a:96:cb:
96:f6:2c:44:06:dd:98:81:06:07:43:2f:26:6e:7f:1a:47:96:
b9:51:f5:77:e4:c3:cf:d1:0a:84:88:0a:da:64:d8:1a:17:53:
ad:ce:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:14 2026 by rpki-client