Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: Vst5zVQwawn9dp5NoTycIGLb9QQHmwgkEXXOtbnzZkI=
Subject key identifier: C1:FD:4B:3C:7F:3A:97:AC:E9:EB:E8:1F:69:0F:82:F4:07:DB:AE:E9
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 019D3865BFB2798BDFD7B693095CB1727756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 14C3
Signing time: Sun 29 Mar 2026 07:01:25 +0000
Manifest this update: Sun 29 Mar 2026 07:01:25 +0000
Manifest next update: Mon 30 Mar 2026 07:01:25 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: 48vnhKyFUzkLljzIwfT809cBmDZyELxWrllEnvkgo4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bf:b2:79:8b:df:d7:b6:93:09:5c:b1:72:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Mar 29 07:01:25 2026 GMT
Not After : Mar 30 07:01:25 2026 GMT
Subject: CN=c1fd4b3c7f3a97ace9ebe81f690f82f407dbaee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:a0:5d:ed:55:b0:2b:17:83:87:6e:5c:66:
b6:2b:f2:54:59:ec:66:b8:c2:6e:51:52:16:b2:ae:
5f:be:5c:9a:d8:cf:e4:14:a5:86:ee:96:f6:80:03:
82:82:2a:77:8d:42:9e:d6:90:21:6b:1a:88:5c:b5:
c9:9a:22:b7:6a:a7:c7:3a:01:b2:df:d7:ef:bd:03:
d5:8d:34:44:00:a4:9a:00:52:fa:93:f0:88:09:a8:
82:b3:e2:09:a6:f2:c2:68:99:a8:4c:67:71:d8:61:
5d:e9:62:f5:4d:ab:cb:52:a3:cc:5f:db:83:67:21:
b4:86:4f:b8:30:70:2a:70:b8:64:a7:4b:7d:2b:a7:
c1:7a:59:a4:c8:7c:d8:3c:9d:c5:f3:6e:67:c6:4c:
61:b8:29:d8:26:4d:4e:20:e9:45:3e:b0:76:b7:25:
27:1e:e0:46:a6:a0:ee:5c:de:33:45:24:03:8e:b4:
87:fe:e8:78:f9:87:47:90:6a:87:9d:aa:bf:db:91:
43:3f:04:39:e7:69:dc:ee:24:81:2b:9d:88:23:2e:
df:fb:cf:86:9e:fa:e2:b2:19:30:5f:21:dd:28:c0:
61:99:24:5a:c3:8e:64:5e:17:3c:2d:7c:4c:99:d4:
30:d4:c4:8b:bf:6b:4f:fd:dc:a5:e8:7c:aa:a4:22:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:4B:3C:7F:3A:97:AC:E9:EB:E8:1F:69:0F:82:F4:07:DB:AE:E9
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b7:f5:15:09:a6:f4:f4:8c:c6:d8:fc:76:e3:37:43:b6:73:
7c:cb:3c:8c:e2:1f:11:a7:19:5c:c2:fa:88:ed:7a:11:55:2d:
62:26:f4:ad:5a:d4:3a:a9:ba:f8:98:eb:17:91:7f:12:7e:1d:
79:42:2c:9e:02:37:1c:7c:cb:e4:ba:3d:49:a7:00:54:49:11:
0e:cb:7b:19:2e:fd:07:df:b6:69:80:82:54:cd:69:62:19:03:
0b:f8:80:29:a2:4a:18:89:49:3d:43:b4:fe:eb:72:6d:22:56:
cc:42:1a:f1:81:7f:49:7d:01:ea:89:14:45:b1:9b:35:b7:19:
b5:a7:6c:74:aa:42:b7:32:bf:3d:8f:7d:56:6c:2b:2b:d5:cc:
f2:f7:54:d3:14:98:68:a3:da:6c:69:cc:c0:80:9d:ea:5c:3e:
34:c4:44:ef:db:31:43:91:a7:e9:11:c1:07:4e:48:f5:d6:af:
e6:1e:5a:9e:75:98:fb:bb:62:e7:c2:3a:dc:51:1a:34:3c:f8:
d3:24:c4:7d:ff:0c:13:e6:d3:b6:f0:15:8c:f4:93:cb:55:79:
0f:95:49:5f:0c:4a:6b:eb:33:6e:b8:86:d8:61:ee:10:07:4b:
b2:62:f2:0d:9c:05:b0:a3:83:c8:d7:16:77:15:07:a7:5d:64:
cc:8e:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:41 2026 by rpki-client