Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
File: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json)
Hash identifier: 89umU4YRU8xt6PH8JWu8u5bhjJh0qyT/mz//z5s6Yy0=
Subject key identifier: 05:37:44:CE:6C:3E:5C:8C:F8:99:AE:7E:65:13:F3:53:19:E9:07:32
Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
Certificate issuer: /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Certificate serial: 019D38658FA27B90F3F596342C1678218D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: SDJhPb5CrVGasv/R7D7lOj0XylEdjD6et2T9recDSfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8f:a2:7b:90:f3:f5:96:34:2c:16:78:21:8d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=053744ce6c3e5c8cf899ae7e6513f35319e90732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:5b:9a:b2:0f:41:33:74:46:53:18:ef:ea:
6b:79:52:e3:f2:b8:ec:f3:f8:3d:0a:49:c0:22:b7:
11:06:ec:bb:44:9d:8b:de:11:26:22:dd:48:86:0a:
f6:08:af:e4:3c:2c:bd:c9:0e:a8:4a:8f:c2:81:43:
d6:f9:2e:8f:3b:b9:0f:c1:e4:93:cf:96:5e:79:73:
ce:88:41:82:8f:e0:83:52:66:3a:9b:68:53:f1:6b:
e3:e4:41:fe:de:26:e5:6b:ba:34:0c:ec:6f:21:6b:
5b:05:3f:30:86:c2:b2:b7:14:07:28:a2:31:f5:7e:
69:97:10:5a:33:8c:fa:da:17:e4:a7:e0:fb:96:1d:
a2:92:63:d7:34:e3:e0:d2:56:40:c2:9a:f2:27:bb:
a5:ae:78:97:7f:62:54:8b:0e:77:19:ee:7c:1b:aa:
48:07:17:83:5e:42:41:09:ac:d7:4c:f5:5f:b0:9b:
5d:75:f9:c5:58:65:1a:5a:0e:dd:e2:89:df:a3:89:
f9:38:f6:34:f4:87:11:7c:09:c0:e3:83:58:da:6e:
f6:c4:3b:bb:86:52:22:df:d4:31:56:55:17:f7:67:
a5:e7:76:80:75:5f:b3:ca:8c:ac:b3:aa:0f:ba:4d:
01:62:cb:79:5a:bd:39:f6:bd:12:11:14:ab:07:ea:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:37:44:CE:6C:3E:5C:8C:F8:99:AE:7E:65:13:F3:53:19:E9:07:32
X509v3 Authority Key Identifier:
keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f9:97:4d:8e:aa:dc:69:8f:20:b9:1b:38:4b:0f:d2:93:64:
f1:14:a7:62:fb:dd:cd:88:1c:6f:63:3d:75:8e:57:54:1a:87:
62:c8:b2:86:7b:98:26:65:99:60:15:d2:5c:a3:f7:9c:52:98:
04:b5:bc:81:6c:19:05:64:bd:24:ab:e1:42:fe:80:26:4e:c1:
36:c8:06:3c:e9:69:32:e3:16:ed:99:da:73:41:63:48:b5:b8:
db:b3:ce:1d:ae:80:94:85:6c:a1:62:71:8c:40:44:e8:f3:9d:
9f:53:72:09:13:ee:e2:db:63:ab:6b:62:a4:2e:35:80:00:b8:
0d:66:59:5c:32:10:6e:24:e6:91:a2:0b:73:ea:c3:e2:e9:51:
a0:91:f6:29:30:bc:71:e6:56:bf:5e:27:11:54:5d:4e:a2:f9:
28:52:30:5e:19:5b:7d:6b:60:37:a2:78:19:73:19:d1:18:5c:
e7:12:a4:7a:a3:7c:12:4d:db:64:fe:75:e2:a7:e8:73:82:fe:
c5:a8:42:16:8c:e5:c4:3d:d3:d8:a8:9e:fb:ae:63:4a:6a:04:
4b:bb:83:1a:39:db:4b:ad:51:19:fe:47:dd:90:da:5c:2b:b5:
1b:53:93:74:3a:e7:89:8b:e0:a2:06:a8:04:b7:d3:2e:6f:ee:
a2:2a:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:35 2026 by rpki-client