Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
File: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft (raw, json)
Hash identifier: LmyYGFTy506m5stqsQ5ICrCsSPNV/KDttucmm1O58hA=
Subject key identifier: CC:45:29:7E:31:07:06:7E:00:BC:B8:B5:1D:08:6B:BA:9E:3F:FC:9B
Authority key identifier: BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C
Certificate issuer: /CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
Certificate serial: 019D3865E68BC6BE9E27C565D09E9CB36760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
Manifest number: 17A1
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl (hash: F5csXTiA7u67m+GgkZuA5pdqLGz/R7Xajjov6CtWRDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e6:8b:c6:be:9e:27:c5:65:d0:9e:9c:b3:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=cc45297e3107067e00bcb8b51d086bba9e3ffc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:0c:3a:c8:61:f5:24:77:7b:b0:fc:86:cd:
c4:c2:b0:e1:2b:ee:a9:88:2d:36:4a:d5:e3:5a:0b:
e7:13:88:05:b9:2a:e9:0c:ed:2d:d0:56:0a:4d:18:
16:4e:c2:ac:bf:94:ea:c4:de:68:28:d6:e9:f4:d8:
52:f1:37:fb:23:a1:60:50:e8:42:7c:8a:a9:06:cd:
54:52:e3:bc:32:20:0e:93:a9:cf:0b:3c:9d:c8:bd:
e6:95:c2:6b:24:1d:e8:74:b3:5c:a4:26:49:44:a9:
78:f7:44:9b:19:cb:d7:b2:be:11:3b:c7:74:5e:03:
ed:9f:07:9d:07:e1:d5:f1:14:33:bf:ea:54:4b:71:
c9:af:d8:97:ef:bb:d8:4b:b7:3b:84:79:28:ef:53:
b7:b9:d4:5d:28:f9:05:b1:68:0b:30:02:02:a2:a2:
35:8c:1d:b9:d6:8f:39:f1:62:79:12:61:4d:c1:15:
6c:52:73:10:2c:f0:4a:8f:32:cd:13:87:7e:af:d9:
6b:fc:5e:60:eb:0e:f8:2b:1a:20:d2:d1:ae:74:db:
89:60:d5:a4:40:3f:4e:91:3e:45:5c:1a:ad:ea:13:
2f:d0:16:bc:8d:1e:41:dc:2d:c0:9c:ec:78:a5:37:
98:1e:e4:5e:c2:6c:fa:50:a7:0c:c5:af:c6:2c:c7:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:29:7E:31:07:06:7E:00:BC:B8:B5:1D:08:6B:BA:9E:3F:FC:9B
X509v3 Authority Key Identifier:
keyid:BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:dd:20:6d:61:48:82:81:c1:5e:b2:14:10:25:e7:04:cc:
0a:19:24:1a:40:30:6a:9d:06:bb:b5:a0:3d:9c:f7:62:3d:ee:
a7:a2:0b:46:c3:81:5f:fc:32:2b:e7:62:12:5e:a8:a6:b6:22:
40:6e:da:3a:c7:d7:92:e2:ec:f7:7e:f3:e9:ef:b5:4d:11:af:
fd:88:9e:97:d3:31:10:20:2e:3c:73:03:35:5b:b1:76:9b:4c:
df:de:44:40:8c:50:10:de:5a:db:a7:c2:89:c9:12:2e:7f:82:
c8:3f:2c:a6:63:d6:8b:d1:21:c0:d1:9e:81:f3:a4:b1:64:fb:
91:4e:00:12:86:f0:2d:78:3c:26:eb:11:93:eb:01:44:b9:54:
6f:c0:60:e3:59:68:5e:7b:e9:30:35:68:ea:9d:99:35:be:96:
3f:da:3d:de:93:36:40:a2:87:2c:52:50:35:48:66:fe:1c:6b:
f8:de:d6:a6:d7:24:66:4d:29:37:c5:20:85:4d:f1:81:1c:af:
90:59:dc:bd:1e:62:15:50:c1:0c:5a:08:45:e4:6f:85:d9:7e:
f6:80:88:a9:16:41:3a:a0:0b:de:b9:65:3e:3e:5a:03:29:84:
50:99:71:40:8a:53:4d:2f:d2:3a:29:52:81:ad:b8:05:3f:11:
df:f4:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:11 2026 by rpki-client