Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
File: vL4wndalMhnOvVZb4fI0uT5WLjk.mft (raw, json)
Hash identifier: FFZieA8mckORmakMt2J+Frt/wvbtF7QSj6ZVgNf5Xn4=
Subject key identifier: 09:59:87:80:02:FC:6A:DF:2B:6E:B7:2C:D3:F9:5E:21:5A:C9:39:EF
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Certificate issuer: /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial: 01A1DEA7A93AE269C8EEDE30E3E0225B9844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
Manifest number: 02C5
Signing time: Sun 15 Nov 2026 10:01:32 +0000
Manifest this update: Sun 15 Nov 2026 10:01:32 +0000
Manifest next update: Mon 16 Nov 2026 10:01:32 +0000
Files and hashes: 1: vL4wndalMhnOvVZb4fI0uT5WLjk.crl (hash: 56wzdLJTlIDk5uuPQJTIGSSbI8TSNuZFkM3E64AxDbM=)
2: y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (hash: wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a9:3a:e2:69:c8:ee:de:30:e3:e0:22:5b:98:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Validity
Not Before: Nov 15 10:01:32 2026 GMT
Not After : Nov 16 10:01:32 2026 GMT
Subject: CN=0959878002fc6adf2b6eb72cd3f95e215ac939ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:e9:0d:cf:a6:ca:67:6b:68:fa:8a:af:24:
92:f1:ae:10:e8:9d:64:1c:be:a8:76:8e:22:97:19:
63:82:aa:cb:2c:64:0d:46:5a:e0:87:15:60:f3:ac:
a4:ec:5a:74:9a:6f:1a:06:e7:f1:3c:ca:1d:ff:04:
42:c2:f8:e6:87:b1:6c:1a:bd:68:62:19:48:ad:be:
7a:f1:e7:bb:78:72:aa:45:16:32:60:17:e3:06:0b:
48:20:a6:82:6e:df:5e:ad:26:a1:46:54:ff:ed:c2:
20:58:82:8f:73:95:52:a1:be:72:a3:d2:04:2a:e3:
b9:4b:97:b7:87:13:3b:6a:5a:3b:f4:90:2c:33:e0:
6a:86:d5:76:0a:f1:e5:4a:fa:f1:80:45:27:3a:94:
88:fb:bb:b1:88:ab:bf:94:c5:11:a8:fd:3b:d4:de:
a5:ec:70:69:f4:ce:54:77:94:98:ac:06:3b:16:13:
73:50:fb:29:af:ec:10:17:43:43:fb:90:96:ad:2b:
71:35:f3:15:82:78:79:0b:bb:60:19:c1:61:39:87:
d1:86:06:56:a7:f3:70:f8:4e:60:e0:cf:3d:8d:da:
48:d5:08:d1:ae:0f:98:08:61:06:bb:64:1e:00:15:
9e:51:4e:df:59:f5:85:31:99:a8:53:01:51:42:cd:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:59:87:80:02:FC:6A:DF:2B:6E:B7:2C:D3:F9:5E:21:5A:C9:39:EF
X509v3 Authority Key Identifier:
keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f4:54:c2:a8:ec:73:5f:3f:52:53:d1:37:9b:a4:45:e1:de:
c1:16:04:37:0c:87:31:b3:46:4b:e5:06:25:36:2e:b2:27:38:
e5:06:c0:a4:d1:5a:d1:e6:e6:e1:90:76:42:f3:b1:7c:08:84:
64:07:a3:0e:cb:91:c6:72:bc:94:30:56:2d:b2:eb:65:49:98:
f5:2d:5a:b9:86:21:bd:7c:a7:8b:18:0e:26:5e:7f:bd:2b:63:
e0:c4:66:68:94:c6:93:69:bb:eb:d7:dd:28:26:6a:a2:33:b2:
92:77:a8:64:0d:6f:33:4a:c8:52:71:65:c7:32:0d:54:f8:cd:
0c:ce:f3:76:7e:6c:64:c0:86:ce:5f:0a:39:95:92:e0:d0:91:
07:7f:4a:3f:0c:99:6c:d0:b7:30:e8:75:0f:cd:6e:b5:eb:8a:
e5:9e:b7:30:30:dd:97:b5:fc:ce:26:b2:8a:b1:6e:78:fe:83:
1a:32:22:0f:06:47:da:15:f7:45:a2:56:99:f5:46:4e:35:91:
92:86:49:8e:79:ee:1f:c5:40:b6:8c:e2:b2:1b:a3:ab:36:2f:
77:8e:7c:cd:26:df:7a:30:59:7b:28:1a:c6:e9:a6:49:7b:0e:
b6:3d:d1:fe:81:31:02:1d:cd:4f:b4:ca:cf:56:c9:7a:4e:bb:
fd:be:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:12 2026 by rpki-client