Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
File: vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft (raw, json)
Hash identifier: 5EtUlJutOJ0ba76zGMYXI1gy/FVDy1i0nVH40P4EJDI=
Subject key identifier: 10:A1:E6:6E:53:89:28:CD:C9:62:CE:64:92:1A:E1:94:0A:0B:F9:3C
Authority key identifier: BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47
Certificate issuer: /CN=bc403804a88bd19deda04fb93541bfd0d0c65447
Certificate serial: 019D389BC29F32FFDAC2DCF59029695D9F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl (hash: r5PBhnklmoz0YXatxCMhaNuNDYNE/pCJnwChP1XIwZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c2:9f:32:ff:da:c2:dc:f5:90:29:69:5d:9f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc403804a88bd19deda04fb93541bfd0d0c65447
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=10a1e66e538928cdc962ce64921ae1940a0bf93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:1d:2a:fe:19:38:ef:c4:b9:ed:48:68:f6:
64:53:48:ef:14:7c:4e:1d:da:6f:a1:a4:68:c1:83:
69:19:c3:9e:36:15:6b:7e:eb:0e:92:b9:1a:5a:5c:
a7:10:3b:e3:a1:0f:ca:d8:bb:a6:59:f7:10:0d:bc:
f0:8f:da:bb:a8:fe:41:59:34:55:0b:78:d9:59:fa:
f7:5f:e7:a3:ff:0c:36:b8:5e:3b:9b:fc:fb:a1:ff:
82:d4:47:b4:21:0d:b3:9c:f3:36:7e:6e:c9:35:48:
ff:74:22:1a:d5:c3:63:a5:1d:b9:07:70:0b:83:83:
a9:c7:47:1d:c5:a6:27:c7:d8:a3:f4:7f:2b:b6:c2:
0c:3b:05:d0:a5:4c:3f:97:c3:57:34:e0:83:fa:6d:
19:02:bc:00:ed:6f:ac:62:b4:cc:5e:32:6c:c8:04:
aa:98:e1:b3:f5:ce:e3:0a:82:7a:5b:08:ca:a9:1a:
6c:58:6d:55:b5:95:d2:09:6d:9b:46:83:fc:80:a4:
cc:ad:44:3e:b6:de:19:f0:3a:4f:fc:a4:12:b9:24:
75:e4:c3:31:76:d7:40:b8:4b:ef:e2:60:50:48:0d:
c1:c4:40:57:26:35:5a:86:b3:a3:06:5d:95:d5:4a:
8b:27:f7:4b:58:61:cf:64:15:69:06:da:4b:33:34:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:E6:6E:53:89:28:CD:C9:62:CE:64:92:1A:E1:94:0A:0B:F9:3C
X509v3 Authority Key Identifier:
keyid:BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:87:f8:e7:57:72:68:a5:a3:ce:41:43:a1:b6:e9:ec:05:7c:
e1:1f:9e:d3:fa:91:11:c4:80:d0:b5:b9:28:7b:ab:aa:f2:3c:
14:71:40:d2:bc:9e:a2:fe:83:b8:61:66:35:0f:39:d4:a5:1f:
d4:d4:37:de:47:af:5a:53:3a:e1:9a:ba:68:2c:df:77:7f:63:
c8:5c:3c:ca:da:2e:a9:2d:46:c2:96:6e:f2:cd:77:32:10:a5:
4e:3e:a2:f3:32:73:e8:9f:a4:36:cd:52:ec:6e:1b:e6:31:49:
d4:e8:b2:9e:6c:e4:05:b8:80:33:2c:5d:51:4d:75:10:4f:2e:
2f:48:e8:42:88:23:a7:62:60:62:cc:bd:06:7b:a4:ab:1e:82:
63:81:eb:c2:63:4d:29:c4:11:f4:56:f0:b5:b3:c0:21:fd:e2:
6d:56:20:01:2b:34:f2:7d:95:20:bd:03:84:b1:95:95:56:76:
e9:2f:c5:3d:46:c5:d6:78:7d:4f:cc:f5:be:4f:1e:a4:20:a1:
a0:9b:30:54:72:f4:bf:24:60:5c:95:e2:d7:f9:bf:8f:13:57:
a4:d8:d0:10:b1:6a:f3:c2:51:c3:25:13:89:d6:d5:e3:a5:64:
c5:fd:0e:72:8e:23:1a:90:53:89:2e:e5:f9:e0:f7:fc:91:f1:
90:c5:c7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:28 2026 by rpki-client