Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json)
Hash identifier: N8J5XrvFUoIw5mNiboFm56cTL37+/wPpnM9zuQeGW+8=
Subject key identifier: 1B:F8:21:F8:F1:DA:8B:58:81:5E:7A:B2:F3:09:6A:68:AB:76:04:C6
Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Certificate serial: 019D386645359C664FCDED0698FA0A2C9842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
Manifest number: 03C4
Signing time: Sun 29 Mar 2026 07:01:59 +0000
Manifest this update: Sun 29 Mar 2026 07:01:59 +0000
Manifest next update: Mon 30 Mar 2026 07:01:59 +0000
Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: nJz5TzJggL3qAoCIDvcTY4lk9427Bnu9F3tU9jY7VZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:45:35:9c:66:4f:cd:ed:06:98:fa:0a:2c:98:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Validity
Not Before: Mar 29 07:01:59 2026 GMT
Not After : Mar 30 07:01:59 2026 GMT
Subject: CN=1bf821f8f1da8b58815e7ab2f3096a68ab7604c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:49:ce:30:3f:56:19:94:b8:54:7e:bf:a7:
70:19:fd:a5:56:ce:77:25:27:66:30:9e:c7:a9:6b:
89:f5:be:59:2d:c7:1a:d1:2b:74:07:9e:4d:28:c6:
37:46:98:b6:3a:52:cb:b1:e7:03:f7:de:41:5b:02:
62:86:c8:1b:fd:55:85:5c:7c:f6:ba:40:73:77:39:
d7:33:80:39:49:82:ba:c5:fe:8c:7a:09:c8:a7:ed:
a9:c4:83:9f:19:12:ee:8e:03:77:44:ab:d5:18:49:
5b:9b:99:6a:41:14:60:71:4a:0d:62:29:46:7f:c9:
8a:60:0d:e7:75:2e:f7:9e:8e:09:2f:a5:93:83:fc:
d2:63:30:ee:8e:9b:ab:8e:4c:58:7d:2c:35:c4:ec:
fb:21:1f:b9:6b:d3:1c:3a:90:9e:ba:da:33:6c:cc:
b8:5b:eb:a8:9d:5d:24:b1:50:cd:7f:8b:3f:65:3b:
35:a5:8c:09:37:48:ae:4a:0d:95:c1:de:ef:42:1d:
d1:92:21:99:30:43:33:66:54:3e:90:cf:4a:1b:3f:
ba:95:72:b6:bf:5d:d3:71:bf:03:77:e3:b7:68:a2:
f0:30:34:71:38:7f:61:c8:cd:da:40:fd:7e:2a:6d:
6d:92:02:cf:18:fb:4c:87:f6:87:2d:d8:84:f5:41:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:21:F8:F1:DA:8B:58:81:5E:7A:B2:F3:09:6A:68:AB:76:04:C6
X509v3 Authority Key Identifier:
keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:41:22:df:83:e7:c0:a8:f4:a7:8d:57:e3:ce:84:a0:59:c1:
59:cf:88:67:80:06:79:aa:88:1a:2d:20:19:db:f6:05:dd:e9:
2a:f0:df:03:85:36:b5:3d:f9:39:14:1e:1c:31:ea:ab:6e:83:
fa:6a:1c:69:f3:ee:a9:04:bf:26:35:b8:39:62:c2:a8:f2:7b:
41:47:09:43:04:18:28:8c:7b:35:ce:c6:22:06:6b:3a:54:85:
27:69:2c:a1:7f:af:79:4c:8c:3d:89:bf:8e:5a:d1:52:6f:b5:
c7:f4:df:79:02:0d:da:f8:40:16:fb:94:e2:da:12:8a:27:3e:
22:70:2f:3d:10:2d:8c:05:a4:6c:3c:7b:b1:c4:f4:97:7a:c7:
8b:f1:c2:ed:e8:79:51:06:50:d4:a7:d4:4c:28:b5:ec:06:50:
d0:1d:b0:ac:c2:12:70:c0:3f:2b:d3:95:42:d0:e1:05:f8:95:
c3:36:13:dc:66:16:9c:45:c6:46:bf:e0:c1:64:9b:36:30:9d:
e7:17:48:b9:83:ad:be:c5:38:ea:47:c0:02:9a:de:64:b7:b8:
64:a6:e5:b9:cb:78:c5:b0:c3:cb:19:f0:c3:b6:b7:90:20:b2:
07:0d:da:e6:3a:4e:05:53:2f:b1:25:86:87:ed:89:50:1c:a2:
d6:df:5b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:42 2026 by rpki-client