Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier: 1EgMBy3QidZD0a/wfWGIWqkHWkdXOefB9IZ3nvitHQA=
Subject key identifier: 1E:D1:6B:D6:98:84:A2:40:15:0A:9D:82:59:16:E7:1D:35:93:15:60
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer: /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial: 019D386647DE6E0EC0D07618A5E97878A177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number: 0B2B
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: fWpDg3ozTfZKw96ERwlsYRrIz0KsKOwA17lMvwkO49M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:47:de:6e:0e:c0:d0:76:18:a5:e9:78:78:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=1ed16bd69884a240150a9d825916e71d35931560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:bd:b4:2f:59:67:7d:7a:f8:ea:aa:7e:f0:
c9:aa:dc:fd:0c:a5:bf:37:1f:23:85:d2:d1:ce:d7:
2d:ca:5a:11:49:bf:fa:d0:23:f2:a5:55:e5:06:09:
85:52:24:02:c6:ab:33:cb:b0:80:0c:3b:00:e4:a2:
42:7f:8c:f9:2a:dc:80:be:f8:2a:80:72:78:1f:ea:
ba:79:4b:1a:6e:0a:4e:17:5f:b9:5e:c4:e2:ed:4f:
f6:0c:98:af:8b:ca:f1:b7:47:19:d6:34:23:b6:3a:
09:69:4d:3d:db:54:3d:26:6b:bf:f0:79:f0:85:5b:
fc:6a:0b:ce:f9:68:d8:f4:f8:02:4f:f9:4d:b0:14:
c1:d1:92:ad:4b:6e:83:ba:89:f8:0b:7c:15:05:e9:
82:e5:e3:97:1e:c9:d5:0a:de:c2:07:b5:67:d8:8d:
45:d3:a6:d5:1f:c3:71:1d:41:16:7c:8c:b4:f5:78:
53:3f:fe:7d:8d:03:c1:94:57:f6:d6:4f:ec:b7:7e:
60:af:c4:30:28:e2:cc:de:7b:e0:82:11:13:b7:0d:
05:c7:3e:c7:57:1b:52:b9:21:ec:f4:01:ef:a1:c3:
41:38:21:27:4a:e8:f3:5d:f1:d3:f6:95:99:71:87:
24:7f:3c:0c:25:e1:c3:1e:5d:49:85:5c:df:c9:cf:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:6B:D6:98:84:A2:40:15:0A:9D:82:59:16:E7:1D:35:93:15:60
X509v3 Authority Key Identifier:
keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1a:85:27:39:cf:66:a7:a2:e6:a0:0e:8e:c4:92:cd:06:e9:
ed:8a:9a:09:02:8e:49:6f:55:b3:4b:08:04:d5:dd:9b:f3:89:
09:97:02:e2:54:29:f3:f7:a8:d8:75:60:d3:74:a6:d0:de:af:
d6:52:a9:66:27:43:11:0f:3a:9e:83:f6:0f:54:98:7a:0b:3a:
2c:33:4c:f8:a3:93:0f:82:37:d9:84:b8:63:78:4f:c3:c4:4e:
14:7b:de:23:6f:ea:98:ff:18:ba:49:ec:b0:b1:c0:97:8c:59:
88:2f:de:ef:08:15:b7:8a:72:b6:6b:e6:61:16:ab:9d:6f:23:
9f:44:0b:e1:ff:89:5d:88:67:56:3f:13:3a:76:73:4c:98:58:
b6:23:a7:ef:01:59:fa:83:3e:9f:49:59:a8:8e:c2:58:4a:ca:
92:6c:8f:01:8d:7a:4c:3f:d1:bb:c0:f6:65:18:97:37:04:a8:
cf:23:53:58:82:1f:d4:6c:6c:8b:38:88:48:f9:bd:a4:d5:0b:
72:57:33:8a:e1:10:cb:fd:ac:c2:1f:b3:bc:9e:e6:b7:21:16:
b0:90:ea:51:85:ac:8d:d5:97:08:3a:18:99:63:08:b5:5e:5b:
f8:db:e3:11:e8:d5:12:a2:2b:1d:22:6d:db:2f:a8:24:28:97:
cc:e6:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:36 2026 by rpki-client