Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: 3WFkKMF9l7Z/AHdA7rm6XefTBV7PiRF8Yx6O70gb99k=
Subject key identifier: 91:A7:9D:B3:67:0D:DB:AD:9F:B9:6C:0C:63:3A:EA:11:7E:1F:5F:5C
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 019D38667BF42D5AF5F52D51E33E7E7EE6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 08F2
Signing time: Sun 29 Mar 2026 07:02:13 +0000
Manifest this update: Sun 29 Mar 2026 07:02:13 +0000
Manifest next update: Mon 30 Mar 2026 07:02:13 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: Lg39yQb6pYnwEdH1kzKo52TDxqP4WENtbFO207eshm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7b:f4:2d:5a:f5:f5:2d:51:e3:3e:7e:7e:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Mar 29 07:02:13 2026 GMT
Not After : Mar 30 07:02:13 2026 GMT
Subject: CN=91a79db3670ddbad9fb96c0c633aea117e1f5f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:d8:b1:f2:0b:fe:58:7c:02:ea:1f:1f:ef:
18:f4:51:45:98:ac:a5:51:80:92:31:e6:55:fc:3f:
9b:03:67:10:59:48:34:16:fb:f1:bd:6a:95:eb:ad:
d8:d2:27:48:af:63:7a:53:03:f7:0f:4b:95:ac:d1:
0d:3d:26:a7:d5:c9:97:b1:7d:a0:cc:13:c9:32:d7:
37:9c:55:63:1e:bd:0a:48:22:99:63:a3:ee:cb:65:
7a:2f:f3:05:93:96:cf:c2:68:db:5c:19:c1:f9:ee:
87:f7:fc:a4:32:e8:b0:c2:38:5e:ee:3e:1b:4f:c1:
c0:d7:9e:12:1f:98:df:a2:92:d6:f9:58:15:eb:ce:
c4:7a:d6:68:ec:87:4c:76:00:0e:16:f4:b3:99:cd:
e2:fe:13:ef:6e:f3:8d:79:54:2f:5b:4b:91:68:6f:
17:6e:97:20:fc:07:5c:74:4d:0e:fb:4d:fc:55:b3:
67:c7:57:6e:88:2e:5e:6f:6a:6b:e5:f2:1e:ae:b3:
ec:00:a5:27:7d:20:66:c8:13:09:d8:50:7d:28:09:
04:19:4c:2a:ec:4c:f7:6f:cb:01:ce:0e:ab:10:0d:
8f:18:e4:47:79:e1:bb:06:a8:c3:2d:84:48:87:9b:
1c:0e:38:ba:5d:74:b5:bd:78:6e:8d:72:35:8b:29:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:9D:B3:67:0D:DB:AD:9F:B9:6C:0C:63:3A:EA:11:7E:1F:5F:5C
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:56:42:77:34:b2:67:fc:62:a5:35:b4:f9:07:8e:ad:0b:7c:
5d:1a:d4:ae:a4:40:e0:81:e1:83:93:51:c7:9d:55:60:88:73:
e9:69:a7:76:8a:ad:59:e7:9c:e8:df:11:df:11:ee:ea:53:77:
be:0f:01:b3:6d:84:67:79:26:e4:cb:0d:b4:cb:76:46:63:56:
00:f0:47:b0:0d:f0:1a:73:81:34:bb:c9:0b:1e:d4:02:ea:7c:
da:03:c7:af:27:c6:5b:e2:43:1c:82:68:8e:be:95:97:7a:27:
7f:7d:d8:f8:30:37:05:a5:18:7e:d2:cb:74:e3:be:8c:86:db:
43:50:02:ea:80:ab:d9:9d:ba:06:70:d1:98:3e:77:6c:a3:c3:
5d:11:45:a2:4b:32:2b:45:72:2a:3a:a0:88:b7:1d:e1:af:55:
79:9c:da:02:e3:c4:c8:5c:b4:3d:51:9e:0e:be:1b:56:19:71:
ca:e9:d1:e8:1c:58:da:aa:2c:14:1e:10:f6:5c:21:6a:0d:3c:
94:a4:0a:e6:cc:9a:43:80:a4:b8:cd:bf:b3:67:b1:f2:86:ed:
a3:1a:79:ec:3c:99:ea:bc:c1:5d:32:85:15:5d:33:dd:2e:36:
c6:21:6d:9e:a0:7f:af:b0:60:92:9e:b1:e3:bc:19:a8:33:eb:
e2:62:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:44 2026 by rpki-client