Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: IB6WXJtZDSsBviQJDcgQO7mbBhnftJvXNQRWji9FeXM=
Subject key identifier: C1:47:A5:54:A2:B7:B9:7D:C4:E1:5B:5B:A3:4F:53:E3:C1:EE:58:66
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 019D36E456F47AE296C667E91A7566C24D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0DC3
Signing time: Sun 29 Mar 2026 00:00:27 +0000
Manifest this update: Sun 29 Mar 2026 00:00:27 +0000
Manifest next update: Mon 30 Mar 2026 00:00:27 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: eDUWd2VwyASnRd5KUiD1nFroIPrfJ0TVubtju9V6ME4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:56:f4:7a:e2:96:c6:67:e9:1a:75:66:c2:4d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Mar 29 00:00:27 2026 GMT
Not After : Mar 30 00:00:27 2026 GMT
Subject: CN=c147a554a2b7b97dc4e15b5ba34f53e3c1ee5866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:c9:2d:d1:df:00:80:af:f5:1b:07:47:79:
95:f2:14:4e:b1:eb:df:5e:20:27:2f:cc:72:f2:d8:
a2:5e:dd:3b:ba:8a:73:b0:4a:58:7f:1c:55:19:1a:
0d:48:ff:cb:4a:f0:57:09:8d:d7:8d:50:1b:5b:cb:
70:f2:04:17:c4:87:09:a9:3e:5a:c2:1b:ec:7c:44:
4d:fa:9a:ce:f3:b9:62:b4:b5:d1:85:d2:a1:70:6d:
0e:03:7d:20:be:5e:d3:a1:e2:58:71:63:96:ee:9b:
77:08:4a:f8:71:db:b5:29:35:cb:18:2b:b5:0a:76:
a9:7c:cc:47:aa:68:6d:77:e1:07:9f:7a:ab:ba:3d:
84:dc:6b:d6:b1:28:b9:b0:00:d4:9b:53:af:72:1d:
c2:53:63:72:0e:12:a1:0e:48:d6:b2:3e:bb:00:5e:
58:4b:69:7d:db:2e:0e:d3:7b:65:30:df:ca:24:d3:
5a:85:61:37:b4:b1:51:ed:ce:eb:47:7a:05:23:2c:
0e:c3:e9:78:b9:af:2d:cd:64:c0:3e:e3:c1:47:ab:
1f:13:ff:2c:5d:a3:40:9a:94:b5:4c:e2:6e:3e:cb:
cf:74:5d:81:38:40:aa:65:e6:87:e5:19:e8:98:d9:
b3:73:f1:ce:0b:a2:0e:e0:f8:8c:d3:9e:8a:67:80:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:A5:54:A2:B7:B9:7D:C4:E1:5B:5B:A3:4F:53:E3:C1:EE:58:66
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:10:ba:db:25:0c:72:8a:a5:b0:59:d7:f7:ef:56:1c:74:f4:
1b:8a:23:46:d4:28:25:32:1a:7b:4b:c1:ab:9b:72:3f:4e:4c:
c1:db:56:64:31:00:aa:a9:79:bc:61:6b:5e:5b:05:72:c5:c8:
13:73:97:46:b2:0a:68:b8:13:95:28:06:ea:e7:e7:08:67:df:
e0:bb:e1:c2:78:fd:2d:34:80:b4:90:cf:e0:8e:9f:61:27:3a:
44:d6:d0:b2:b2:43:01:f2:58:75:84:ef:19:8a:99:52:72:c7:
53:ca:fd:0c:56:da:99:75:dd:7c:b3:95:39:51:1e:04:97:f2:
00:2b:83:bf:d2:f5:5c:7a:22:34:4c:5b:ea:c7:05:3a:77:ef:
29:d2:9e:05:3e:be:6a:65:06:5d:91:c7:9d:c8:7e:b1:84:cc:
82:e9:7c:40:93:5c:d2:76:02:e4:cd:a5:62:63:ac:85:3b:c5:
1e:b0:fc:90:cd:41:0b:56:a5:48:a1:ec:c6:9a:d2:88:72:f3:
db:0b:73:14:1c:ca:ad:28:eb:3d:f7:5b:82:d6:62:b1:e1:5c:
0b:94:ed:fc:30:4c:d1:11:a3:c4:18:03:86:b0:4b:4d:68:3c:
ca:94:75:c3:de:b5:38:28:60:7d:4f:fd:ff:83:bf:7a:c7:7b:
e3:ed:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client