Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File: viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier: 0BQ13dGjeYzQty2/v+YqBE0cbSMjaLIWmkE5/Sw6YA0=
Subject key identifier: A9:E8:8E:C6:7F:17:E9:A2:29:B1:4B:FD:F8:6C:AC:9A:3E:A4:3A:84
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer: /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial: 019D3A5373668F9A8B19DEC9255B32988DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number: 15A3
Signing time: Sun 29 Mar 2026 16:00:40 +0000
Manifest this update: Sun 29 Mar 2026 16:00:40 +0000
Manifest next update: Mon 30 Mar 2026 16:00:40 +0000
Files and hashes: 1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: NB8Xo12jloGCog9Xn5MiyUt2VbkjQtDBmxRE87b3SVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:73:66:8f:9a:8b:19:de:c9:25:5b:32:98:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
Validity
Not Before: Mar 29 16:00:40 2026 GMT
Not After : Mar 30 16:00:40 2026 GMT
Subject: CN=a9e88ec67f17e9a229b14bfdf86cac9a3ea43a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:bd:95:dd:7d:0d:a0:2a:4b:44:96:d4:6d:
be:07:c3:62:48:a7:84:71:7d:c5:00:19:cb:60:18:
e9:53:bd:64:98:3f:55:a8:13:4b:df:78:b8:68:4f:
83:de:ad:20:11:6e:98:dc:55:5c:dd:51:e5:23:48:
fe:e7:e7:e2:f2:71:4b:e5:86:50:6f:5a:22:1c:4a:
29:0b:53:78:61:1a:45:62:9e:7c:9a:db:d1:73:76:
bf:48:63:08:fd:95:26:34:6b:68:cd:ea:97:56:4a:
00:ef:6d:ef:71:a3:22:0a:a8:66:21:9a:b9:85:50:
c6:e1:2e:fe:5b:72:2a:11:24:f4:6c:d0:18:ec:06:
9a:b3:e3:d8:f9:74:f5:e1:1e:79:d8:5d:c1:26:7e:
58:87:c4:56:6f:99:c1:79:5f:e7:fc:09:bd:1f:0c:
4e:0e:bc:19:e2:8d:f1:3f:5f:05:5c:e4:8e:c0:df:
1d:37:40:e4:b6:6b:b8:1d:9e:b3:0c:1f:83:f7:03:
7f:b1:af:97:f5:0e:d0:39:e2:6b:cc:54:04:dd:c7:
91:ea:98:a2:77:40:18:52:ae:2f:71:02:08:bf:26:
19:8c:c1:74:33:1f:64:69:82:8d:28:70:08:be:e8:
7d:f8:60:b4:04:77:d0:6d:6b:9d:dc:64:04:ec:83:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:8E:C6:7F:17:E9:A2:29:B1:4B:FD:F8:6C:AC:9A:3E:A4:3A:84
X509v3 Authority Key Identifier:
keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:15:60:25:2a:f4:3a:27:95:7a:eb:11:a0:0f:c2:00:32:57:
a4:af:37:34:16:d0:04:7f:02:ff:39:d6:8a:21:e1:22:74:60:
23:9a:9c:8f:9f:74:55:c7:15:29:20:54:b8:ab:7d:a9:de:71:
a7:20:83:9c:a1:54:bf:7e:fb:6c:58:74:89:b0:82:a8:e5:11:
a5:88:0a:0c:44:d7:4e:87:7e:c0:45:03:de:4e:0b:4b:44:14:
d0:3a:e8:34:84:69:c8:6a:14:0f:94:57:66:55:d1:95:7e:7d:
86:b3:42:99:ea:24:2f:c0:b7:a4:98:a9:60:7a:ba:89:a6:7a:
90:13:79:06:16:9f:1d:d0:6a:c4:14:a3:19:ee:ab:e7:b5:a6:
9d:51:d8:5c:f8:8f:71:4b:67:79:50:b9:e7:b0:bd:c2:02:76:
91:8e:8d:77:ee:71:85:67:bf:a8:f8:11:f1:78:89:46:2c:4e:
6e:a5:ae:d7:4e:45:e5:eb:32:e6:4c:87:97:94:06:76:c1:92:
b4:bc:5a:0c:72:15:ff:78:56:70:a1:cb:eb:e6:0f:d3:3f:c0:
46:67:f6:bc:79:71:b8:2c:bc:a7:99:26:35:69:9c:f7:44:ab:
fb:24:11:16:fe:27:8c:08:f4:ca:dd:4a:c5:59:c6:8d:a7:57:
e2:ce:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:16 2026 by rpki-client