Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: J9CRMDKoJjGUiHemqrBAm6ur4pKI+9I1XLtyP1IYsvU=
Subject key identifier: 90:0F:0E:F5:71:F2:77:EF:B1:78:53:D9:1E:BD:BD:A7:32:0F:C7:A2
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 019D3A5494863C89D13E30F26F7E51C73AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 16:01:54 +0000
Manifest this update: Sun 29 Mar 2026 16:01:54 +0000
Manifest next update: Mon 30 Mar 2026 16:01:54 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: +mmsPWSsmwTQBM6+LHOGTrTAZ1UhSe6CKckHTE94eic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:94:86:3c:89:d1:3e:30:f2:6f:7e:51:c7:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Mar 29 16:01:54 2026 GMT
Not After : Mar 30 16:01:54 2026 GMT
Subject: CN=900f0ef571f277efb17853d91ebdbda7320fc7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:73:9f:b7:89:a9:cc:19:b9:d5:e5:46:84:
1f:c6:65:aa:0e:2c:01:dc:68:85:0e:0d:38:d1:b8:
e0:47:28:2e:5c:73:6c:ea:ed:92:56:70:75:28:28:
bc:30:04:1e:fb:f0:8f:0f:b6:63:db:51:ad:a5:ee:
57:46:a2:1d:a5:f8:aa:9a:65:ee:e7:ab:34:15:40:
39:76:23:aa:6c:a0:c2:0c:83:d5:cf:5a:9e:2f:f9:
e6:5a:ca:07:11:22:09:3b:06:dc:59:e7:be:53:51:
c2:dc:63:f4:a9:06:37:3a:60:70:de:a9:b1:e1:aa:
10:db:83:02:f7:8c:7f:79:53:66:44:0d:f1:18:01:
e7:69:23:18:ae:8a:15:46:5b:24:20:59:7f:22:8f:
7f:6e:75:c3:fc:dd:17:4c:b2:89:97:cd:7c:ed:46:
69:35:be:b7:96:44:f9:60:63:72:aa:5e:1b:c1:6d:
3c:da:77:39:a9:b8:07:ef:ca:5b:db:ce:10:6d:63:
34:b7:2b:1d:3c:16:48:89:ed:05:68:54:fa:44:5c:
76:26:eb:9d:52:85:17:b6:6c:cb:aa:b5:7e:f9:00:
08:b1:a9:36:ba:73:d1:7f:f7:b1:10:08:08:db:47:
6c:02:43:bf:60:f9:2f:50:9a:9f:c1:19:d5:fa:8b:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0F:0E:F5:71:F2:77:EF:B1:78:53:D9:1E:BD:BD:A7:32:0F:C7:A2
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ff:41:ff:99:3a:62:b2:f5:22:c7:0d:de:b1:69:e9:53:e2:
2d:f3:f3:f0:27:4e:4d:81:d4:39:86:b1:b9:7b:5f:dc:2b:0e:
83:8d:b4:dc:9f:b5:1e:8f:14:ab:62:a9:77:54:ea:5b:cc:a4:
72:27:af:ca:31:0d:e7:0a:72:d2:bd:c3:4d:42:d8:53:29:c9:
03:3b:88:3f:89:7b:cd:87:0f:8a:9c:0e:b7:1f:7a:96:4b:63:
19:1d:d3:e6:59:25:8c:6f:04:c4:11:fd:b4:bf:24:a1:c1:4b:
d9:02:23:b9:22:ef:6c:2d:7c:d4:a6:66:b8:f2:93:6c:43:4d:
23:f0:45:05:db:98:b6:cd:30:e3:31:dc:25:df:5c:51:ba:18:
4b:f8:d2:72:56:cd:8f:b8:40:32:dc:85:79:09:3d:d7:dd:56:
e0:e2:e7:c3:cb:ad:52:ab:6c:d4:58:2f:9a:3e:42:ed:cc:60:
91:3c:cf:ff:d7:79:f9:ac:ec:f7:b2:66:fd:0a:17:42:1f:b5:
f0:5b:f2:59:23:f8:4e:91:dc:c2:7f:dc:67:2e:68:14:ea:49:
10:1f:25:0e:0b:e7:29:d5:9b:90:5d:27:97:eb:b1:f5:26:5b:
fe:3b:92:5f:18:24:ed:b2:a3:0c:31:87:2b:fe:76:c2:ac:cd:
b6:58:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:17 2026 by rpki-client