Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: NvxbsPE/mxL2R7jgMpN2lStbRRUS6RwH0yhfX5Vpx8Y=
Subject key identifier: B5:E8:AC:42:11:F4:82:07:2B:6E:C6:E9:DF:E2:86:E8:41:B2:E2:34
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 019D38D33629F87E8FC36536D2BA86E280CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 15AE
Signing time: Sun 29 Mar 2026 09:00:59 +0000
Manifest this update: Sun 29 Mar 2026 09:00:59 +0000
Manifest next update: Mon 30 Mar 2026 09:00:59 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: M9Yyd/Rt2ARcjAtyCz85LVkmU2soojyHQrSPkcAvikA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:36:29:f8:7e:8f:c3:65:36:d2:ba:86:e2:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Mar 29 09:00:59 2026 GMT
Not After : Mar 30 09:00:59 2026 GMT
Subject: CN=b5e8ac4211f482072b6ec6e9dfe286e841b2e234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:5c:77:1e:e5:99:65:12:46:c9:e2:eb:87:
aa:62:97:57:12:4c:a2:6f:fb:f3:9e:79:15:0b:b5:
aa:01:78:81:b9:c9:a7:9c:b1:50:4e:4d:c6:c1:f9:
eb:45:53:3d:8d:4c:7a:4e:89:aa:80:a7:3b:e1:64:
a0:8a:69:8e:d6:31:e6:42:39:d0:0a:7f:18:35:17:
12:c9:6d:15:a1:39:d8:31:2f:76:05:af:c5:82:a7:
7d:09:ec:2b:fc:72:e2:7a:0b:b7:a9:73:56:e1:46:
8a:9a:7c:62:55:84:8d:16:1e:6e:d1:40:09:4d:c8:
29:30:a8:ad:00:2b:c0:be:c2:61:49:f7:97:07:9e:
07:d4:10:5f:21:e5:30:bc:b9:a5:5b:6c:b0:56:d0:
52:a5:e8:85:3e:10:a6:a3:39:c1:bd:fe:81:19:65:
aa:2e:1e:21:36:4e:67:0d:1d:b4:eb:40:0c:66:ca:
5b:b0:8d:62:72:86:0d:96:7a:65:b5:a0:bf:dd:85:
ec:93:20:59:4e:40:00:02:45:4d:a9:72:36:16:79:
b7:51:f7:a5:d7:b3:71:8b:11:f3:a3:a7:d9:1d:74:
fb:88:61:b5:d8:e7:d8:e2:95:44:1d:d4:e7:8e:6b:
0b:d3:40:9d:f9:0b:5a:f4:36:e0:50:e7:6b:1f:25:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:AC:42:11:F4:82:07:2B:6E:C6:E9:DF:E2:86:E8:41:B2:E2:34
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cb:05:88:bc:67:18:22:77:81:b6:51:9a:08:b2:24:e1:f2:
bf:9b:2c:35:ca:82:a5:aa:8a:06:7f:36:bf:5d:5c:48:7a:f0:
f4:d6:0e:19:06:94:5e:0b:e1:a2:c1:ac:49:52:81:fd:9c:ff:
f8:5f:15:59:45:1a:37:bc:1b:bc:4b:7c:c1:e4:e8:48:48:f8:
52:32:e7:08:d9:ed:9f:c8:14:77:f5:74:48:63:7f:45:80:d1:
41:7b:c4:35:a9:08:6e:23:9c:d8:55:a9:56:2c:91:f1:9a:77:
c3:2b:5c:d9:71:ff:00:09:2b:08:e8:6c:66:75:a9:6e:99:9a:
c5:3d:82:21:df:3e:61:5b:d7:ca:04:2f:e6:6e:15:66:d2:03:
81:72:1a:5a:c8:41:e1:6a:70:46:25:c9:4f:15:ea:5c:19:9e:
2d:74:7e:a0:be:63:35:30:0e:e8:d9:14:06:92:74:3d:34:83:
0c:d6:41:d0:f3:1d:5a:cf:a1:64:1b:7a:5e:9d:3c:00:9c:3f:
64:ea:75:64:f5:6b:a8:45:6e:f4:11:d4:80:20:f1:99:f0:04:
8d:1a:d4:9f:3c:30:1c:22:dc:d8:43:6c:f6:ed:d3:8d:8d:5c:
4c:c8:eb:ee:c3:0b:d6:26:bb:5b:a0:09:70:ea:d8:d4:ba:bb:
81:36:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:11 2026 by rpki-client