Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: L3Mr7Y0ulVkEfxMIZC5L3rNXnDfa53q2ZIFi1UBCHYM=
Subject key identifier: 3D:DF:24:85:2C:BC:EA:C7:B7:70:33:AD:65:E2:CA:8D:BC:F6:00:92
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 019D37C0B12A675DB2CD056CFB9265094B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: M3hBxuNKNy2/jAOlq0DpgD0+uFZZNktPrKY53jRPRyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b1:2a:67:5d:b2:cd:05:6c:fb:92:65:09:4b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=3ddf24852cbceac7b77033ad65e2ca8dbcf60092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:c3:59:ae:db:c0:44:9d:34:7a:54:bb:30:
a1:35:3d:2e:26:36:35:d7:5b:39:80:50:5c:e7:18:
f2:10:03:cc:83:fa:4e:f1:8d:2f:83:89:65:ad:78:
7d:ad:33:50:b8:9e:19:0d:ae:d2:75:ad:56:e7:fd:
45:b7:8c:a7:3c:23:ef:2e:21:d7:23:5c:4d:32:f7:
fd:07:54:b1:fd:2f:24:8a:49:80:99:8c:a3:bf:d3:
1a:a2:b2:0b:9f:e3:1c:6c:c4:b9:6b:85:67:e3:ce:
f0:98:15:36:55:19:e4:e4:67:7d:2a:78:92:d7:ab:
0e:7e:71:20:7d:cb:d1:67:f9:2a:59:e4:22:ee:fb:
53:86:50:e6:2f:0c:a3:ec:c8:88:33:21:3c:ba:c1:
73:0a:c7:81:4c:5a:fd:95:81:ae:f1:1a:66:7b:cb:
cf:2f:a5:f6:3a:7f:03:98:df:99:4d:b1:ec:c1:51:
92:e1:15:ac:75:44:7d:fd:d7:95:f8:59:83:f4:b7:
37:0c:41:9a:0a:f8:1f:6b:8b:18:83:5a:68:75:d0:
d5:05:75:1e:98:b5:7a:2d:26:5e:97:bc:59:1c:d9:
e3:05:91:3e:bd:96:0a:00:a5:03:07:27:63:29:95:
d7:88:46:5a:a8:40:88:d4:ab:dc:6e:78:25:2c:6d:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:24:85:2C:BC:EA:C7:B7:70:33:AD:65:E2:CA:8D:BC:F6:00:92
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:3f:38:06:e8:b6:30:87:e5:bf:99:a6:ab:2f:89:fc:f5:
90:a3:b9:c6:80:28:c5:df:37:9d:c3:28:5b:90:14:5d:53:99:
73:b5:16:b9:38:37:36:48:e1:d3:3e:e5:b1:46:9d:ce:f5:d4:
57:48:50:34:02:0f:9d:c7:16:3e:47:be:db:70:cf:0e:2e:6b:
97:9f:10:b7:42:b5:e6:db:61:89:85:40:4c:50:82:2f:d7:d8:
9f:4b:5a:5d:65:ad:d5:f0:2b:9f:bd:0d:5f:a5:ee:2d:3a:43:
86:ac:d1:55:e5:83:3f:41:1d:10:b5:67:ea:60:b1:74:28:fe:
00:25:28:db:d4:b4:67:b6:5b:19:d6:4c:50:d2:b0:5d:7f:19:
ed:5d:cd:5a:01:8b:9a:42:4d:53:9a:47:f2:f8:9d:96:ba:ba:
7a:4f:2c:89:14:a8:e4:33:0f:2e:75:93:16:c2:c8:3d:35:d3:
75:49:4e:88:fc:69:4b:d0:20:84:22:68:60:95:62:ec:b7:ee:
ee:e2:d6:70:8a:87:e0:b6:3d:48:74:21:84:54:af:65:9e:4f:
ef:bd:2d:95:b9:ae:b8:7c:42:0c:72:d1:5d:33:de:5b:26:43:
c5:4e:55:ac:1a:5e:7c:aa:cf:ba:40:ff:79:c3:c1:fe:6a:2e:
5c:39:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:38 2026 by rpki-client