Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: Po3QExsEcKj4ki2/nLTvCPTHTKLVbcMz6jHHfEWbAgI=
Subject key identifier: 47:F9:CF:D6:C4:7A:F2:F0:95:7A:27:A5:38:A6:1F:2D:35:D9:F1:76
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 019D3909B13F4F74E0E52508B681326C461B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 13ED
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: AuEY_lhsQ1reVE3aekx3vo2MXuw.roa (hash: 8nzWp+KuBZnVHqZNnr3zfpd8+GWRxSiubDowltaN1ZQ=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: Cnz3CFJZSqOnNItIWHyF9H10Us1zrVUPnpwjR+n21Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b1:3f:4f:74:e0:e5:25:08:b6:81:32:6c:46:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=47f9cfd6c47af2f0957a27a538a61f2d35d9f176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:5b:da:1e:91:d7:7c:c5:c2:67:6c:d4:f0:
0d:a1:3d:bd:0a:de:7c:2d:08:bd:f3:39:39:0e:f7:
ad:86:33:d3:f4:80:b5:9d:6f:c0:14:4a:6d:bb:bf:
89:c3:96:7f:f7:fb:80:2e:1a:17:09:b6:9b:13:f4:
0d:d8:f2:cb:2b:ae:6c:d0:a6:46:68:eb:3b:5a:84:
fb:03:32:7c:57:e1:e6:96:37:8b:e1:dc:ea:90:9d:
71:9d:22:8e:86:65:cb:da:42:a9:5c:8f:f2:f9:67:
be:ad:07:94:3d:a5:14:11:0e:4b:13:28:c8:f0:3e:
c8:89:fc:c8:34:8d:f5:60:14:9b:e3:43:78:ae:42:
80:1e:1e:6e:21:36:1c:cf:fa:9d:42:67:39:60:61:
80:10:82:b9:a6:c7:e9:e3:00:f3:17:3c:d3:48:3e:
eb:53:ea:62:36:f9:00:9f:26:44:47:1d:b6:b0:8f:
d7:2b:25:b7:b7:a8:9b:0b:8d:b2:05:2e:c2:76:c9:
c3:60:89:e6:bb:3c:3f:38:7d:91:1a:82:61:7c:e7:
e6:a1:07:a6:b0:da:f7:b5:5d:25:a6:5c:c8:8c:c3:
a6:74:95:32:43:f5:3f:5e:1d:98:9a:80:d1:a8:34:
55:16:2a:53:54:68:53:57:61:26:da:53:de:e8:9d:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F9:CF:D6:C4:7A:F2:F0:95:7A:27:A5:38:A6:1F:2D:35:D9:F1:76
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:6c:c7:e1:e8:6b:88:52:f2:71:ef:02:af:0f:a0:c6:de:
80:81:a1:04:07:c5:85:b8:a0:da:cb:df:d7:25:a6:d1:e5:6a:
fb:ce:f3:15:6d:ea:d0:40:73:a6:7f:1f:49:9d:8c:b7:2c:44:
ab:33:c8:0a:23:33:71:e6:e0:2d:3c:4f:95:f6:24:48:31:b0:
1b:53:bd:b7:cb:40:39:c8:d4:8e:c5:b4:c8:0b:31:95:1d:32:
84:0a:f7:70:1f:48:25:ac:1a:71:39:bb:f0:4e:da:79:07:5a:
80:e0:9b:79:56:dd:1a:7c:54:e4:4d:6c:86:05:06:4d:23:91:
34:3d:93:0c:60:2b:ce:d1:fd:21:ed:48:4c:60:5f:40:6a:bf:
1d:2b:c3:39:04:20:51:9f:da:f7:93:c2:89:d7:70:76:9e:d6:
69:d8:08:8f:c7:89:51:f6:80:0e:d3:7e:5b:6e:82:7d:1b:61:
f2:28:b8:65:e7:bc:52:69:06:77:6f:d8:c2:47:0e:72:48:b8:
71:f7:d5:a4:ff:e4:a0:0c:dd:81:2c:86:92:0d:bc:3e:4a:3c:
f3:10:f8:3b:f9:b0:73:4a:10:90:32:d5:d4:aa:40:1b:3d:80:
0c:57:58:26:3d:2a:1c:68:73:53:1e:01:3e:b2:56:d1:56:f5:
ad:ef:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:05:02 2026 by rpki-client