Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: kIBrg6bNaUX1buNVGjXLsFkTjfRUs7s5yXqLf5O6IXo=
Subject key identifier: F6:84:6A:D5:E4:C4:4F:C3:B1:BE:F0:34:FD:3C:11:FA:3F:31:DE:57
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 019D38D33DDCF6C3E48F7592C4B6F17B1AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: k4lwDLS30XY5qYjzFgGB6+WQkGcQ4MPSxgDGwDXpjys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3d:dc:f6:c3:e4:8f:75:92:c4:b6:f1:7b:1a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=f6846ad5e4c44fc3b1bef034fd3c11fa3f31de57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:b3:07:2b:d3:50:66:96:1d:39:0d:eb:26:
da:92:43:2f:3f:d2:75:00:6e:49:67:9d:74:ee:3e:
2b:dc:39:33:b3:72:3e:0f:f8:25:51:34:5e:1f:dc:
d8:a6:2f:f7:4c:63:02:80:b4:2e:10:f9:ce:1e:1e:
bb:ef:0d:a2:03:cd:f0:01:11:b9:c6:65:94:9d:5f:
92:50:a8:fd:ff:da:cb:49:3a:76:6a:14:bd:1b:c9:
4b:4d:c6:a0:94:4b:50:a7:6e:71:56:69:09:2d:52:
5a:05:27:6b:59:d4:f2:cb:d1:09:aa:14:35:43:6c:
d4:8a:92:1c:78:9a:96:0d:9e:9f:b4:68:54:07:9a:
59:f1:f3:a2:21:6b:8e:7b:cd:bc:53:fb:0e:c2:f8:
3c:ed:52:8e:ba:87:32:2c:94:ca:e8:48:00:5a:dc:
39:4a:e1:53:2d:4b:1b:9c:32:a6:db:73:d1:eb:21:
d4:bf:70:e7:f7:75:53:84:cc:aa:0f:bd:90:e4:71:
a6:22:ca:1b:bd:8f:d2:22:bf:e0:f3:3d:30:7f:e3:
f9:ee:e4:12:c5:c9:06:ae:f5:36:a4:26:39:68:d7:
04:96:6e:98:d1:1e:dc:6c:23:82:95:17:90:3e:02:
fd:b1:86:0e:13:4f:db:4e:03:8b:3f:c4:b3:4a:13:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:6A:D5:E4:C4:4F:C3:B1:BE:F0:34:FD:3C:11:FA:3F:31:DE:57
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:41:0c:80:8e:07:ec:0c:1e:b7:6f:64:7d:ee:01:34:67:
55:71:bc:a6:ab:02:95:1a:45:c9:0e:bb:7b:9e:0e:18:b2:52:
8f:6f:dc:a5:79:47:74:d9:4d:15:1a:64:02:01:0a:49:de:b0:
4a:92:e4:79:dd:c8:31:bb:3c:0a:9f:0a:6b:9a:3a:c6:66:5b:
29:77:fd:40:dc:ab:1b:02:d6:1b:87:3b:fc:c8:1b:0b:62:0d:
26:29:b5:10:7e:f8:25:cf:29:aa:59:5a:8e:88:6a:1c:30:15:
59:54:7b:d5:0f:7e:15:ab:20:53:b0:d1:d6:dd:fc:78:3a:3f:
59:6b:f7:c2:2e:63:63:e3:ac:de:a4:be:03:c7:a3:2f:51:53:
f7:d2:66:98:8e:69:3c:0c:08:cf:a1:47:1d:b9:00:a4:dd:3f:
63:2b:c6:0d:94:57:99:58:2a:9a:b2:25:cd:1e:50:13:8f:01:
96:07:d6:a3:28:3f:61:e3:a9:8f:3b:fe:8a:18:61:20:01:d2:
ae:7f:eb:12:16:5d:90:44:fb:96:7f:9b:9f:08:ee:56:b3:eb:
f4:b0:0a:3d:d6:cd:a6:60:84:8f:f4:a7:0f:ed:78:6d:0e:47:
d8:8d:8a:88:33:af:01:e0:55:c7:8d:d1:3d:6b:e1:9f:93:02:
35:81:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:34 2026 by rpki-client