Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: gq0bcYjWaD0Jzo/wvucGT8Wx8C6CDbZpdzme1uyXfcE=
Subject key identifier: 5D:29:2C:9C:44:B6:CF:B9:EC:B0:38:E1:4A:BB:AB:B5:2B:DE:60:B5
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019D98F4AC0C517F609AA6717EC82DDA0077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 04BC
Signing time: Fri 17 Apr 2026 01:01:04 +0000
Manifest this update: Fri 17 Apr 2026 01:01:04 +0000
Manifest next update: Sat 18 Apr 2026 01:01:04 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: /gGOw5KX8y7N1XGlTiiP9eXn4zQt8P4z2uc7Q655A0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ac:0c:51:7f:60:9a:a6:71:7e:c8:2d:da:00:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Apr 17 01:01:04 2026 GMT
Not After : Apr 18 01:01:04 2026 GMT
Subject: CN=5d292c9c44b6cfb9ecb038e14abbabb52bde60b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5c:b6:f3:5c:51:06:91:52:8f:c2:34:b1:b7:
e6:95:6a:11:09:47:1a:d0:e6:7c:ef:f1:1d:eb:d0:
b3:e7:41:6d:2b:9d:55:0f:4d:2d:ba:c4:7d:e1:70:
92:52:ed:c1:6b:d9:40:49:aa:9e:f4:53:9c:36:49:
dd:c6:0a:61:4a:bc:c3:e4:66:02:46:95:c6:f9:85:
f0:45:21:61:51:b2:b7:06:82:6e:2c:a0:06:8d:68:
f5:bf:bf:30:1f:d4:e0:1b:74:b2:f9:35:97:6f:5c:
06:e6:8f:6d:63:46:b0:74:b2:f4:5e:c1:df:78:5b:
e9:e0:b9:48:f3:fd:31:22:a6:fe:8d:f9:04:e7:05:
61:ac:88:fd:7d:18:16:59:e0:fc:9e:21:31:89:de:
86:6e:62:71:b1:47:25:07:10:b6:9b:68:b9:95:85:
ee:57:9c:72:ef:c3:67:9d:f2:ac:e5:33:78:b3:d4:
6b:9c:e0:cc:e2:38:68:a8:3c:a4:47:47:13:f3:8c:
a5:7f:35:44:b7:cc:9f:1c:29:4f:31:38:f5:cf:9e:
19:44:bc:a2:2b:2b:15:d7:c9:6f:d9:e0:ec:3a:5a:
e6:23:e0:2f:b2:5d:49:a9:ba:27:f8:50:af:5f:ea:
52:92:71:07:97:4b:b1:fb:77:1c:3e:3c:70:5f:7b:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:2C:9C:44:B6:CF:B9:EC:B0:38:E1:4A:BB:AB:B5:2B:DE:60:B5
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:17:0a:0c:2a:78:42:ee:0e:46:1f:d8:23:06:ad:31:c3:1c:
19:34:13:79:4f:e3:96:18:e6:0b:02:23:3f:23:65:82:e5:42:
96:86:6c:15:0c:fe:57:1d:ce:0c:10:6a:0a:e6:3f:ce:f5:36:
b6:83:eb:c5:58:8b:5a:7f:f0:63:46:39:54:36:57:91:2f:28:
89:d2:e8:92:85:a9:93:d0:8b:00:43:27:30:0d:e7:05:95:d6:
bc:43:f0:08:32:5f:3f:91:fc:ec:7c:3b:a3:2d:60:50:3a:62:
7a:a7:f7:b5:16:34:85:59:0b:dc:29:bd:72:13:50:cb:96:e2:
4c:2e:59:67:b4:e1:e1:5e:24:9f:e6:73:cc:c7:2c:ff:af:72:
a9:85:27:ee:3d:bf:84:9c:15:67:17:dc:17:0e:08:ce:47:f8:
78:6c:05:06:eb:af:e9:df:1a:4d:77:0f:18:7e:fb:77:ad:85:
95:3d:90:b1:00:8b:0a:10:8b:4d:ed:5a:db:a1:fc:cd:d5:33:
f9:05:a5:62:67:86:35:45:1e:f5:d6:19:7c:5d:fd:51:af:60:
47:7e:54:9b:0a:79:25:df:ac:a3:55:a0:9d:da:17:77:a3:3e:
3b:a1:c2:36:0b:b4:af:b5:9b:a4:ee:47:bf:7c:a0:ae:d5:fa:
06:bd:b8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:43 2026 by rpki-client