Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
File: vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft (raw, json)
Hash identifier: g7GwdrXJLMc882jS6C5YQFpLrNlkFy7cyecU4UYeFoQ=
Subject key identifier: 5F:E8:E8:7C:92:AD:74:C0:41:14:65:81:CD:0A:0A:EA:2D:F5:EE:8E
Authority key identifier: BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
Certificate issuer: /CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Certificate serial: 019D3865CFFC631A1892E4C90C57EB595CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl (hash: 9nRAmirob1lORPZCXKrTO15FDc5RZ8uoQw9a8aOnVSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cf:fc:63:1a:18:92:e4:c9:0c:57:eb:59:5c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=5fe8e87c92ad74c041146581cd0a0aea2df5ee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:f0:7e:07:f6:96:0b:bb:30:45:de:a1:4b:
8d:f6:7a:1a:dc:e4:5b:15:c4:95:12:30:84:e0:cf:
b0:70:a1:d7:a8:6b:78:4e:b4:15:7f:82:9d:72:30:
34:e2:d3:db:3e:8d:29:63:18:dc:fb:67:ba:33:65:
b0:25:00:9d:ae:47:b7:92:ba:9f:57:c6:33:9b:ff:
59:f9:45:e7:9d:eb:1a:7c:34:7a:43:a5:ac:e8:5b:
ee:ce:1d:48:db:49:dc:6c:e5:4d:db:b8:85:bd:ec:
a0:9b:b1:6a:6e:56:40:d4:3c:e4:ab:bb:45:8f:9f:
7d:fe:f8:98:1b:56:9e:fe:9f:1b:b8:4b:f6:97:e9:
a6:40:81:30:1d:84:af:06:8a:b0:22:6b:ed:30:b5:
f3:9a:6e:c6:4d:bb:3d:bb:34:e8:95:98:37:84:81:
5e:04:5f:7b:06:16:62:b4:62:d5:6e:54:22:ed:4d:
6e:5c:4c:28:6d:99:d7:e3:a8:38:7d:6b:b8:1e:32:
3d:d2:93:81:de:7e:5f:c1:09:ee:01:f9:38:5b:59:
7c:83:a9:8d:b1:db:be:5f:b2:1f:d8:1a:66:a3:23:
9d:74:b0:ca:a7:a6:04:38:5a:be:c3:c5:04:ac:a4:
db:5d:35:aa:15:73:b0:7a:04:51:ce:08:d7:40:31:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:E8:7C:92:AD:74:C0:41:14:65:81:CD:0A:0A:EA:2D:F5:EE:8E
X509v3 Authority Key Identifier:
keyid:BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ef:4c:77:33:30:e3:4f:d4:84:67:2f:9e:33:a7:9a:23:0d:
c7:c6:d8:f9:21:c9:2e:a0:af:cd:a5:ae:90:63:8a:83:43:30:
35:82:2c:56:54:6a:95:be:3b:01:68:7c:44:f2:0c:64:0a:2a:
83:b4:8a:3e:75:f2:92:80:98:68:da:c7:bf:42:26:44:87:de:
85:b4:75:f3:78:a3:ee:39:cc:e8:6b:1d:d8:9c:eb:f8:3e:6a:
30:50:97:7f:91:0a:a6:05:4b:bb:7f:28:ec:c7:e8:0e:00:15:
46:05:36:cb:dd:18:48:4f:c6:e3:a5:4a:44:4a:3d:ba:20:9b:
34:12:cd:e3:cd:b3:26:99:72:8a:88:b2:d5:08:53:a7:ff:14:
33:cd:86:38:76:09:30:0a:4a:92:8c:86:e3:7f:08:8d:4e:d9:
ea:84:45:97:2d:ae:60:5e:75:f1:cb:b2:76:ef:91:38:3a:a7:
5d:6d:6b:4f:57:b3:93:f1:c5:92:fa:89:eb:c0:08:6c:e8:50:
26:b8:59:3e:56:15:59:0b:62:40:a7:a0:7d:4d:fd:3e:91:c9:
4b:23:95:66:c8:8a:bd:ec:64:d1:b1:39:cd:c1:23:e6:54:3e:
79:24:96:e9:b3:a1:84:12:a3:20:3b:cd:80:dc:13:92:c6:43:
7c:89:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:11 2026 by rpki-client