Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
File: vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft (raw, json)
Hash identifier: S+xw90SBze42DGwAH7GNFS0++dxy5qdF5fO156JGGDg=
Subject key identifier: 14:8D:1D:C2:68:3F:99:B7:45:66:DC:FE:F9:3A:AB:6A:D4:22:CA:61
Authority key identifier: BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
Certificate issuer: /CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
Certificate serial: 019D37529B4DC732B532CA52C79BA18880F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
Manifest number: 0218
Signing time: Sun 29 Mar 2026 02:00:53 +0000
Manifest this update: Sun 29 Mar 2026 02:00:53 +0000
Manifest next update: Mon 30 Mar 2026 02:00:53 +0000
Files and hashes: 1: vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl (hash: tEQgCV8VUprc0maUc+/KGUyvaNwP3T0uINQM+kjg17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9b:4d:c7:32:b5:32:ca:52:c7:9b:a1:88:80:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
Validity
Not Before: Mar 29 02:00:53 2026 GMT
Not After : Mar 30 02:00:53 2026 GMT
Subject: CN=148d1dc2683f99b74566dcfef93aab6ad422ca61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:7a:f7:0f:a5:fa:67:e7:04:3d:28:8c:a1:
8b:3b:6e:b4:e7:58:37:73:8f:c4:13:f0:a5:33:58:
f3:28:1f:53:48:5d:0b:11:fd:aa:fd:a4:27:97:03:
90:77:a0:08:88:34:7e:b0:b1:f2:b3:d5:25:a0:83:
f1:4c:30:ce:a3:56:83:e2:17:68:74:2a:a3:9b:3e:
a4:bf:dd:ef:01:95:26:1b:8d:4a:14:1b:42:d1:00:
25:52:f8:d7:cd:2a:98:47:0a:e2:97:03:02:d8:97:
28:6e:a8:67:ce:08:b7:71:50:cc:06:7f:c5:1d:23:
36:e4:ef:05:25:fd:d6:f0:6d:43:2a:7a:a9:0e:ea:
94:c2:2a:9f:1e:19:a0:b2:8e:1d:f6:8b:df:b0:96:
60:51:68:76:67:c1:e3:e2:36:aa:c5:e9:48:b8:fa:
62:f5:4d:61:b2:f1:3f:58:17:0b:36:2d:c4:e9:18:
b7:b5:48:22:38:2a:8b:b0:59:11:e8:8b:cf:0d:45:
b2:b6:fc:81:15:0d:05:0c:c5:11:db:1b:8e:71:8a:
8a:d3:0f:5e:5e:99:6e:42:14:47:0b:32:4a:e9:c7:
37:d6:72:a1:2d:f2:e9:1d:e7:77:c6:5b:8b:c4:1b:
97:03:11:c3:c6:6b:ef:40:10:3f:a4:57:8d:3c:be:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:1D:C2:68:3F:99:B7:45:66:DC:FE:F9:3A:AB:6A:D4:22:CA:61
X509v3 Authority Key Identifier:
keyid:BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:de:8d:1e:f1:7e:b4:60:84:b7:70:2b:46:5e:b8:f5:54:
31:99:3a:bd:a0:eb:8a:85:c2:04:3f:d3:14:d7:66:25:40:ad:
52:e6:f0:f5:4c:b9:2f:d7:3c:3e:92:02:1a:13:8b:63:c1:d7:
61:95:51:a1:fc:da:0a:72:69:21:88:e9:91:c7:e6:f4:7e:9d:
32:1d:50:3f:b5:fd:31:7b:fc:3a:4c:15:5b:83:2e:c4:40:35:
1c:28:95:2d:28:ea:29:02:46:6c:50:1e:93:21:fb:b3:b0:8f:
61:4b:c6:e3:24:9b:d6:82:01:f2:e0:9e:47:eb:df:5c:a8:52:
f9:40:8e:a1:17:4e:41:63:71:65:3e:4b:52:0e:38:bd:81:91:
24:7a:7e:41:88:81:cc:f5:3a:b6:1c:9b:23:ae:42:c7:3e:54:
27:fa:0d:91:cb:13:6f:df:06:2d:53:6d:bc:90:b6:8d:28:39:
04:9d:ec:94:80:f9:a2:1d:f2:65:65:50:59:1c:6e:ca:bf:ce:
98:2e:ec:b2:a8:0e:02:4d:36:19:e3:b9:92:1f:da:82:a4:9b:
be:c8:ad:39:b9:db:fe:ef:50:4e:97:55:81:82:b2:7f:a7:73:
45:da:0d:8e:3a:ec:f1:66:07:9c:10:60:18:64:84:b3:ba:7d:
d6:a4:22:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UptNxzK1MspSx5uhiIDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWNiNWM5MjEyMzY1ZDJjYjFiZjcxZDU5ZWEzZTEyM2Vi
Y2U2ZDQwHhcNMjYwMzI5MDIwMDUzWhcNMjYwMzMwMDIwMDUzWjAzMTEwLwYDVQQD
EygxNDhkMWRjMjY4M2Y5OWI3NDU2NmRjZmVmOTNhYWI2YWQ0MjJjYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigp69w+l+mfnBD0ojKGLO26051g3
c4/EE/ClM1jzKB9TSF0LEf2q/aQnlwOQd6AIiDR+sLHys9UloIPxTDDOo1aD4hdo
dCqjmz6kv93vAZUmG41KFBtC0QAlUvjXzSqYRwrilwMC2Jcobqhnzgi3cVDMBn/F
HSM25O8FJf3W8G1DKnqpDuqUwiqfHhmgso4d9ovfsJZgUWh2Z8Hj4jaqxelIuPpi
9U1hsvE/WBcLNi3E6Ri3tUgiOCqLsFkR6IvPDUWytvyBFQ0FDMUR2xuOcYqK0w9e
XpluQhRHCzJK6cc31nKhLfLpHed3xluLxBuXAxHDxmvvQBA/pFeNPL5FdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSNHcJoP5m3RWbc/vk6q2rUIsphMB8GA1UdIwQY
MBaAFLzstckhI2XSyxv3HVnqPhI+vObUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk95MXlTRWpaZExMR19jZFdlby1FajY4NXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xNTA1NmUtY2IwYy00OTZlLTg2MmQt
Y2EyYjQzNDFhOTVhLzEvdk95MXlTRWpaZExMR19jZFdlby1FajY4NXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xNTA1NmUtY2IwYy00OTZlLTg2MmQtY2EyYjQzNDFhOTVh
LzEvdk95MXlTRWpaZExMR19jZFdlby1FajY4NXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOH/ejR7x
frRghLdwK0ZeuPVUMZk6vaDrioXCBD/TFNdmJUCtUubw9Uy5L9c8PpICGhOLY8HX
YZVRofzaCnJpIYjpkcfm9H6dMh1QP7X9MXv8OkwVW4MuxEA1HCiVLSjqKQJGbFAe
kyH7s7CPYUvG4ySb1oIB8uCeR+vfXKhS+UCOoRdOQWNxZT5LUg44vYGRJHp+QYiB
zPU6thybI65Cxz5UJ/oNkcsTb98GLVNtvJC2jSg5BJ3slID5oh3yZWVQWRxuyr/O
mC7ssqgOAk02GeO5kh/agqSbvsitObnb/u9QTpdVgYKyf6dzRdoNjjrs8WYHnBBg
GGSEs7p91qQizQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:18 2026 by rpki-client