Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File: v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier: 2rlc3cszhPpC1xNe8Yapsw0BdvSClqQ1JTO+7WFtx+w=
Subject key identifier: 4D:9C:35:8E:FE:3E:31:A2:E8:64:06:0A:BC:50:B2:04:5A:23:94:99
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer: /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial: 019D3940CFB52B7680AED9D906936DA0E5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number: 169A
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: cbYyosKBxLgezVBu3v8cegufwY9I+ZQmqxgJLFTOK4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cf:b5:2b:76:80:ae:d9:d9:06:93:6d:a0:e5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=4d9c358efe3e31a2e864060abc50b2045a239499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:9b:ce:eb:f3:92:2a:2c:51:6e:b5:0c:cf:
c6:e7:16:2d:3f:c3:27:06:c9:62:1c:fa:af:7e:ba:
45:76:8e:9e:db:96:d2:ee:0a:cb:02:00:66:61:1f:
7e:bb:cb:e4:43:6e:2e:59:8c:2b:76:d2:cb:95:46:
bc:32:fd:c2:52:36:68:f2:bd:a3:e4:fd:f1:67:45:
2e:09:bc:13:e3:d0:2a:08:f1:2e:5f:8b:19:f1:85:
61:be:4b:a3:0e:b4:10:d2:cd:a3:23:ed:6b:28:cf:
bf:31:73:07:8f:1c:8e:37:16:c9:32:19:04:42:4f:
30:75:0e:8e:7a:32:f6:7d:7d:a8:b8:6e:6a:e8:e0:
82:fc:a9:f0:1e:ff:b6:a8:c3:04:e2:a3:88:de:74:
f3:ba:b8:2e:5a:87:02:25:d2:a3:46:af:8d:a0:ea:
37:88:30:22:11:a9:68:b9:91:cb:96:5d:49:96:f4:
db:c4:5a:23:0a:58:2a:50:76:1d:2b:91:d0:ba:d8:
98:e6:b0:15:b1:9b:2d:11:c9:84:17:52:2f:41:a2:
33:91:e3:32:1c:02:c7:b4:58:44:60:50:3b:0b:32:
bf:c7:d5:45:12:fa:26:af:4f:e0:a5:c2:c6:89:c0:
8e:a1:c4:12:a4:50:2a:0c:c0:7c:55:33:b7:e0:7b:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9C:35:8E:FE:3E:31:A2:E8:64:06:0A:BC:50:B2:04:5A:23:94:99
X509v3 Authority Key Identifier:
keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:0c:4b:9d:14:61:46:06:3b:9b:ad:f1:f6:5e:8d:79:04:
66:3d:5d:e2:56:28:0a:0b:e6:a6:8c:43:32:06:bf:0c:c7:0a:
4d:5d:7c:99:c3:e0:02:76:23:76:af:b7:da:b3:f1:dc:36:07:
91:00:35:d3:b1:b0:50:f8:59:0e:55:7a:42:54:02:54:21:19:
80:5d:6a:2e:19:a6:e5:37:b3:7e:e4:21:e7:87:76:31:8b:0e:
e0:d4:69:e5:39:56:e5:a5:62:05:ed:a2:d1:62:c2:cf:14:d9:
ff:13:6e:44:db:3c:86:82:5f:0f:89:d1:c2:2a:15:99:a8:65:
c2:53:e7:59:29:ac:aa:26:f4:1a:4f:ae:d8:83:e4:70:de:2d:
55:e2:da:bf:70:43:68:42:d2:d0:06:db:b2:bd:e9:27:39:31:
3d:ac:66:aa:f5:d9:40:83:0e:78:b2:d6:99:da:33:66:77:16:
77:d6:64:df:03:f6:d4:c0:33:88:bd:53:f0:81:a5:83:f6:7b:
ea:53:d5:17:06:31:78:0c:81:b7:dd:77:91:1a:c6:dc:8d:33:
54:8a:ee:ea:ec:26:1a:24:90:be:7a:f4:b7:e5:42:8c:30:11:
18:e5:6a:44:ce:37:47:19:75:08:e8:3f:40:23:f4:b6:22:61:
e4:b1:e0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:23 2026 by rpki-client