Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: NnGIwByQeQda/MtbdY8u5LZhyR1lguXq+VVntAkdIWI=
Subject key identifier: 23:93:0D:5D:BC:F4:32:0F:AE:DC:54:15:EB:D7:F8:D9:27:02:8A:40
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 019D38659339F34485015EF108BCE13D3792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 1315
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: nPMQSQ7Qzxh5P6zI8V2O+GK97CKZRKTedISFwI018eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:93:39:f3:44:85:01:5e:f1:08:bc:e1:3d:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=23930d5dbcf4320faedc5415ebd7f8d927028a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:89:9b:2c:ab:b4:59:a1:5c:69:53:c2:23:
75:fd:8d:e1:d5:4c:76:c5:bf:6e:fb:4c:ea:0e:83:
0a:cb:96:98:e5:95:44:aa:f9:2d:0a:20:40:eb:f2:
78:ba:7e:7c:e9:96:95:8d:5d:ab:1d:c6:44:bc:38:
d8:bb:d2:dc:a6:9b:aa:98:be:df:b8:e6:b8:7d:0e:
a0:e2:e1:af:c2:95:04:bf:0c:4b:08:62:48:5d:ec:
7a:9d:2e:17:cd:ab:b7:e5:3a:2b:29:53:7e:73:82:
7a:f6:12:c1:84:82:87:57:64:17:db:1c:17:3a:bc:
e8:48:60:83:8f:d1:2f:a6:52:b6:d3:a7:46:6e:52:
f4:81:f0:d1:72:ff:47:58:02:76:4a:2b:8d:da:87:
3e:74:50:90:10:56:f0:08:5f:f9:05:2f:24:f9:ae:
3f:82:ca:23:f5:16:23:7c:6d:55:26:a4:0e:f3:28:
a4:4b:54:8a:b7:48:d4:b4:f2:1d:22:d8:cc:68:d2:
cb:fb:fc:2a:31:af:b9:51:16:af:52:19:e0:90:12:
5a:d7:10:cd:4c:a0:38:14:97:6b:1b:c9:18:e8:22:
1e:be:91:23:1b:f4:dd:da:6d:83:21:03:6a:61:e4:
69:ca:06:2b:e9:1a:92:cd:a7:7a:56:6b:95:ea:bc:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:93:0D:5D:BC:F4:32:0F:AE:DC:54:15:EB:D7:F8:D9:27:02:8A:40
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:eb:4f:01:9d:15:6e:28:24:ce:d0:4c:5a:44:f3:6d:34:2a:
63:62:89:6e:4c:27:0e:c5:a6:39:d1:c1:ea:20:5d:06:c8:28:
ff:ea:53:9d:b6:b3:44:80:4c:7d:b2:54:fe:45:c9:d1:a7:74:
ce:da:07:e7:43:c2:d6:13:c8:7e:dd:a0:ed:1f:25:77:5b:7b:
a6:92:32:65:a8:b9:ce:92:42:01:e5:bd:9b:64:cf:4d:5b:0f:
88:98:ae:3e:78:c4:ea:91:3f:48:69:1d:a4:5b:52:9b:27:b6:
d7:15:d9:20:28:42:0e:0d:51:93:41:55:00:80:df:9e:ee:c0:
c5:35:a6:58:26:64:37:e5:13:9c:66:7e:a9:c5:36:65:0a:33:
a7:66:a2:39:a3:eb:70:db:c9:8c:29:c5:e2:93:42:ef:69:bd:
9b:1a:93:8f:96:52:92:e3:ef:25:75:25:59:ac:0a:a7:c2:ca:
3b:e3:0a:4f:81:8c:31:26:df:0e:bb:90:d5:ca:de:4d:31:68:
01:d8:3d:73:a3:de:a6:81:c5:c7:4d:6c:f2:b0:aa:2b:71:6d:
26:cd:6e:74:1d:d0:18:e0:a8:de:26:43:76:c1:41:05:24:31:
0f:e2:2b:d3:3d:d8:04:92:76:f3:ad:35:41:d9:8c:11:e4:d6:
e4:a0:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:27 2026 by rpki-client