Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: YRes2Qnc3Dtx5XvAZzpQ6fTqGUE7LeKAbizCU0v3Ofc=
Subject key identifier: 43:10:63:D7:BC:71:C1:D9:73:80:BB:86:5E:1E:8A:9C:DA:9D:14:4F
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 019D38D349CE7D2E14CE9C6B73859C81A444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: hNnE9AO+1ONC4OqkSdtmpSyekjLZ/NBWiPeROf6+FjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:49:ce:7d:2e:14:ce:9c:6b:73:85:9c:81:a4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=431063d7bc71c1d97380bb865e1e8a9cda9d144f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:23:dc:27:fa:5d:ee:1c:e0:4d:1b:07:29:
5e:a0:cc:a7:3a:1d:fe:4e:e8:8a:a0:f2:81:ed:e1:
0b:2e:be:00:b0:38:30:a8:fa:6c:c5:2d:c5:5f:14:
4b:bd:8b:6a:a1:a0:5e:8e:e9:86:e7:81:86:24:66:
43:ee:a1:ef:d8:49:bf:ae:4e:3f:90:08:98:69:7d:
57:48:63:bf:66:39:cf:38:49:0c:2c:47:a7:63:1f:
1b:80:d2:3b:20:b4:22:da:41:d7:0c:4a:56:35:97:
49:e7:15:ca:1e:75:8d:d4:55:e9:a9:86:18:3a:e6:
df:b0:ed:60:4f:e3:71:8c:b5:8f:ad:d3:20:0b:0d:
fa:bc:2f:ac:a8:47:16:f3:25:29:69:46:76:87:ed:
9e:c2:b5:83:25:d5:d3:3f:9e:88:ab:78:54:bf:b4:
14:ed:66:4d:c3:f8:e3:db:74:fd:84:b8:0f:78:b7:
48:50:87:e5:13:af:6d:45:31:39:f1:71:1c:a1:17:
63:9c:eb:91:e9:e3:cf:d8:6a:89:1c:83:c3:99:41:
28:4b:b3:a3:a2:60:99:67:80:81:b9:b3:19:8d:a9:
bd:a9:92:7d:0b:1c:fc:81:ca:96:a0:2e:2c:ae:2e:
4c:4d:36:4f:0a:3c:d0:5b:2e:0d:88:bb:e4:e6:e0:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:63:D7:BC:71:C1:D9:73:80:BB:86:5E:1E:8A:9C:DA:9D:14:4F
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ca:bb:8e:39:14:69:31:00:1c:3a:1d:6c:b2:13:70:83:89:
98:ca:1e:aa:f4:e4:60:61:e6:2c:16:8b:3d:ea:cf:61:47:46:
91:7d:44:8e:2a:fe:58:32:63:3f:fc:52:6a:8b:a8:4e:1a:6d:
a1:9d:15:aa:92:97:40:6d:66:7a:d4:76:b2:9c:71:09:3a:19:
f3:17:05:c6:ca:86:c2:c0:11:aa:09:ec:63:9f:f9:c9:05:92:
5d:c8:56:1c:7b:87:e0:99:09:a8:2d:80:4e:d8:11:19:03:6e:
ac:c7:e0:70:1e:52:c3:b2:02:87:7a:e8:37:c2:42:1b:48:a6:
b5:5d:16:75:f5:cb:92:9c:1b:dc:e3:f4:3e:06:00:82:9d:53:
e5:79:af:c8:39:be:7f:c1:84:af:43:27:e1:fa:de:c8:06:be:
47:7e:ce:c0:c6:56:5c:cc:b1:76:3c:45:d7:1e:07:0b:c2:47:
6c:d4:00:a6:34:a6:c4:c1:2d:80:ca:e6:3d:70:f6:a0:dc:2d:
9c:d2:48:a0:54:df:37:15:92:94:92:56:be:65:c9:d6:19:bd:
33:a3:0d:a4:82:3b:de:ad:33:26:1d:f9:b5:e7:77:97:2a:f3:
55:5b:c3:ce:57:0a:d1:26:78:04:70:05:14:5c:cb:cb:30:f2:
44:f7:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:18 2026 by rpki-client