Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File: vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier: nu9IIttyl7uS1XGPiyTRJvdABKcV1U4OTkwoCMLi9EE=
Subject key identifier: D0:3F:DD:A2:9E:AE:1E:18:46:97:8F:10:C4:99:41:75:19:41:87:74
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer: /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial: 019D38663A396593353715751B92E9B74D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number: 080E
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: AamNRDlR9exl/CKHKxUE9aDJwxwEujQSV8dgd3alOjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3a:39:65:93:35:37:15:75:1b:92:e9:b7:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=d03fdda29eae1e1846978f10c499417519418774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:c0:6e:20:b6:62:94:19:c9:d5:ca:34:6e:
d2:13:f4:b4:be:5d:dc:94:36:90:f6:e8:24:d6:74:
09:38:44:1a:05:e5:01:41:5a:14:ad:ec:7d:df:14:
d5:fb:14:ba:d6:a1:75:ae:cf:16:f3:3b:fe:27:e0:
db:ad:59:35:50:8f:b9:64:17:a8:66:e9:88:16:90:
d8:7b:3b:b7:db:5a:22:9c:df:24:bd:62:6a:34:69:
d0:5e:be:72:56:f7:19:6c:c3:04:a1:b8:37:ae:43:
57:2a:6f:b7:97:2b:11:f6:d1:b8:c4:78:f4:34:b2:
4d:fb:e5:b9:49:ac:1a:d6:31:91:e0:ac:53:e0:78:
e6:c4:6a:e1:dd:6a:11:cc:c2:ef:77:9b:ea:c3:c6:
6b:9b:49:77:81:6f:c6:b3:1a:34:4d:14:66:ba:dd:
c6:5f:d2:e4:8b:8b:d3:37:7c:b7:15:15:27:b6:95:
4b:ae:83:bd:b4:fe:3e:d6:1a:18:fa:38:f5:c5:c5:
34:67:d8:19:a8:18:d3:bf:b6:12:16:d0:f6:c8:83:
7d:3e:a3:59:17:78:01:9b:ac:91:04:78:61:9e:be:
23:24:53:e5:ae:cb:60:9d:0b:2c:bc:62:4f:45:09:
f9:a4:4c:b0:46:d9:77:2d:32:36:c6:b8:a2:18:00:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:DD:A2:9E:AE:1E:18:46:97:8F:10:C4:99:41:75:19:41:87:74
X509v3 Authority Key Identifier:
keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b0:a9:2f:da:22:2c:67:5c:92:ed:a2:03:60:49:2e:80:e3:
7a:0f:dc:5d:b7:50:e0:a8:75:3a:1e:31:03:0e:5c:c2:f0:e8:
70:94:92:66:65:03:1a:14:2f:4c:c2:fd:b7:4c:9a:6f:f7:c0:
0b:e6:00:0a:4d:c2:24:a6:53:8f:93:c9:23:ed:96:a6:57:f4:
69:db:22:17:f7:a7:e6:cd:be:3f:a1:d2:95:39:c7:80:79:06:
8b:0b:4b:90:cf:0f:1e:02:e0:7f:21:4a:c8:ba:c0:8f:1c:24:
c0:ed:d8:1f:39:a6:fc:68:71:f6:98:c6:2b:d9:dd:24:96:df:
69:68:e2:c0:a3:27:f3:d2:82:94:d4:eb:b4:f4:b9:4b:3f:3c:
79:4d:eb:42:b0:4d:9d:1b:ed:46:7c:0a:86:c3:5b:39:0d:90:
a8:00:68:33:ad:0f:01:d1:a8:82:b2:21:74:b1:92:4e:95:1f:
5c:7d:d4:2d:33:2c:93:9a:43:f4:9b:f5:a3:e0:4e:86:fd:8f:
7d:54:17:23:ed:d1:6b:b9:f0:b0:da:e6:63:a9:49:0a:c0:40:
ff:46:64:d7:b0:1d:ae:be:9d:5c:8d:7a:3a:88:4d:91:0e:8b:
fe:b2:61:0c:70:e0:6d:10:3a:f3:10:38:96:77:3d:5e:3b:66:
af:c6:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:16 2026 by rpki-client