Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: PX7EYru/3XcXnnyXGeNNEycoksQOeE3ALg0tnUk1ry4=
Subject key identifier: 2E:AF:43:99:36:5A:C3:89:4F:6F:0A:83:C5:E3:1C:4B:B5:4A:1E:A8
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019D37C09602DB787CD37DA5A514B37A13CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0EE3
Signing time: Sun 29 Mar 2026 04:01:01 +0000
Manifest this update: Sun 29 Mar 2026 04:01:01 +0000
Manifest next update: Mon 30 Mar 2026 04:01:01 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: dQzygfqHwkgxiRHI5gVXqHOc4JpZS/au74cV2DXo+sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:96:02:db:78:7c:d3:7d:a5:a5:14:b3:7a:13:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Mar 29 04:01:01 2026 GMT
Not After : Mar 30 04:01:01 2026 GMT
Subject: CN=2eaf4399365ac3894f6f0a83c5e31c4bb54a1ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:82:06:e9:08:cf:92:e6:25:4e:28:ee:73:
71:c5:14:1c:16:ec:c0:53:fc:25:34:57:11:e7:2a:
da:9c:2f:67:5f:36:70:44:d3:c0:07:95:41:5f:15:
a0:75:c9:4b:d4:b0:ed:be:73:95:5a:f4:12:df:af:
42:1b:0a:92:82:ae:be:bc:1e:67:1e:27:42:0a:13:
9f:9b:00:c7:35:42:df:ad:62:fe:60:61:32:b1:55:
35:75:76:93:3f:f4:b0:da:53:b7:35:3c:00:34:ee:
b1:5b:b8:2a:d4:23:59:aa:40:31:83:af:aa:12:69:
60:1c:7c:b2:9d:90:95:05:0f:11:82:6f:33:20:55:
71:d1:2e:ce:f5:36:da:72:14:28:07:b7:fc:4b:dd:
c4:79:49:43:5a:a2:09:1b:2a:b9:51:6b:3b:94:c9:
8b:0d:d1:cf:85:1c:6c:42:98:dc:f9:c7:67:c5:7c:
8f:e1:a8:2b:f5:5c:77:56:bf:b3:40:37:7c:53:d2:
d0:f0:e2:6e:08:9c:8d:73:c2:7e:ae:af:c6:ea:e8:
81:1e:b7:fd:37:ae:bc:68:79:ee:27:db:08:47:a5:
ef:19:5a:f1:ec:a9:15:62:b3:7c:b1:42:cf:73:d0:
4f:f0:96:98:de:a0:f9:9b:d4:d6:cf:64:5e:6b:7b:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:43:99:36:5A:C3:89:4F:6F:0A:83:C5:E3:1C:4B:B5:4A:1E:A8
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3b:eb:68:a7:e8:4b:a8:2c:90:cc:b2:2d:3a:aa:ec:19:bd:
c7:5a:b3:95:bd:e9:f3:6d:57:66:ec:61:00:1a:ab:87:a2:7b:
b1:09:19:05:df:20:d9:c9:a1:0e:8f:a4:15:76:6e:0e:ee:d7:
cf:3b:a1:3c:a0:36:6d:26:4b:6f:2f:ac:26:01:4d:cd:66:a1:
f1:c0:a9:d8:83:02:c9:2f:c3:9c:d7:42:db:4b:0d:85:58:32:
d4:44:5e:e1:c6:af:54:98:b0:2e:08:b2:de:d3:4c:0a:36:a3:
93:ac:40:e3:2b:46:eb:d0:66:c1:4b:de:d9:75:a2:ea:b5:40:
1a:b3:ec:9f:1d:8f:82:6b:7a:48:5d:7d:36:8a:bd:2c:ab:11:
cc:59:af:7a:2a:12:bc:d2:06:87:88:e5:3e:2f:3d:fa:27:d1:
1a:b8:a9:3f:03:6e:5e:59:98:c1:83:cf:0e:21:41:85:b0:3c:
ad:d7:0b:50:2f:7f:15:c4:86:c5:94:d8:46:01:d1:2f:07:d6:
d9:a0:7b:66:49:92:a3:9e:da:df:fd:1e:bb:ac:51:d0:92:e7:
6f:d1:bf:b2:80:d8:16:85:66:60:2e:3a:ec:ea:2d:c7:c4:8e:
38:5e:5a:d0:4f:d6:5f:83:cc:d0:82:da:e9:f5:b6:a2:a4:ca:
90:fd:ef:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:42 2026 by rpki-client