Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: zoj7FwMw3IIOualzsmNLKI+cd0nk2kS1Imds7ruB4LU=
Subject key identifier: BB:B2:AE:C1:27:A3:18:16:CE:D5:E6:A4:72:60:C1:C7:4E:78:1F:22
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019CAB6B82E6F763FA4DA0BD74A00AADC064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0441
Signing time: Sun 01 Mar 2026 22:01:15 +0000
Manifest this update: Sun 01 Mar 2026 22:01:15 +0000
Manifest next update: Mon 02 Mar 2026 22:01:15 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: Nze0b9jYeXdFzfIde62nrk+N0XAPJS1lbt+oCf9Gej0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:82:e6:f7:63:fa:4d:a0:bd:74:a0:0a:ad:c0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Mar 1 22:01:15 2026 GMT
Not After : Mar 2 22:01:15 2026 GMT
Subject: CN=bbb2aec127a31816ced5e6a47260c1c74e781f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:b2:7f:db:c1:63:f4:c1:17:74:44:8a:00:
24:16:16:3c:59:c8:20:9f:62:32:72:22:25:80:9b:
f2:b0:94:bd:88:45:49:d9:94:df:fb:d0:9b:f7:a3:
47:41:1d:20:e1:99:61:b7:b7:5a:7f:05:ce:c8:03:
cf:38:f4:08:5a:a3:a3:58:a9:f7:53:a7:fb:e8:ec:
ba:48:70:5e:01:10:83:66:f2:7c:43:dc:19:75:c5:
37:4e:c4:72:74:e4:62:0e:d0:62:fc:c6:a1:1b:25:
7a:52:0b:62:3a:41:f9:44:86:b8:ab:79:c6:dc:18:
59:79:0b:9f:2f:06:e9:bf:cf:9a:39:25:3a:3a:03:
39:46:85:ae:d9:1e:63:86:d2:7c:34:c1:e3:8e:56:
3a:d8:d9:1a:8b:56:36:22:82:6b:14:74:e7:65:0d:
88:53:44:d1:b6:a8:c6:4f:69:6e:06:ce:11:c1:49:
7b:63:4a:6f:6b:a0:70:96:6b:f7:ad:31:d4:e1:19:
42:d8:93:92:93:a4:5a:3c:06:db:ff:02:47:6d:24:
66:1a:4e:a5:e5:72:5e:58:be:16:62:99:5f:f0:df:
fb:53:92:31:6e:ec:40:76:29:1b:ef:30:78:1c:97:
cc:e9:f3:31:30:b9:78:01:d4:75:b7:eb:df:5a:d1:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B2:AE:C1:27:A3:18:16:CE:D5:E6:A4:72:60:C1:C7:4E:78:1F:22
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:13:eb:89:e6:f7:b7:13:98:26:e8:e2:5e:d8:54:11:97:b2:
5e:67:4d:69:95:29:17:e5:66:4b:5b:b2:ef:1a:f8:e6:f5:3a:
cc:37:06:99:e4:8f:2f:a3:7e:1f:cc:72:b0:80:aa:0c:09:3d:
01:8f:e3:b2:cd:30:73:cc:ce:64:57:1e:95:7a:84:e0:87:d1:
fd:18:c7:47:09:1d:b7:c6:39:f0:52:f8:9f:3a:e9:6d:c4:ef:
89:c7:94:c1:79:8d:0d:8c:4c:df:68:6e:33:6b:43:e7:fa:be:
35:16:ea:ef:38:86:95:58:5e:70:43:59:29:f4:4b:88:7e:03:
5b:86:5e:53:d9:6a:0a:60:ad:f1:9c:48:b2:ac:34:7c:91:79:
1c:02:5c:eb:52:28:eb:49:ce:24:ea:3e:f4:88:42:9d:d4:4d:
02:8b:49:57:86:f4:98:8d:ce:75:24:6d:9b:37:c7:e6:d9:a1:
a5:6a:4f:11:38:f2:20:02:24:0a:8f:f5:24:61:39:cb:2c:7a:
6b:31:3a:4e:be:2e:b3:49:31:68:f4:07:66:5e:5d:6a:a1:1f:
1a:7e:f3:2c:94:59:3b:2b:b8:e5:58:96:6d:c4:69:b6:46:80:
fd:71:23:d1:a0:f4:cd:7c:e5:df:27:d6:62:d6:08:b4:9b:02:
93:29:06:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra4Lm92P6TaC9dKAKrcBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWEzODFmOGE2MGNjNTFiNTI5OTBlZDM4Njk0OGY2ODRj
MzE1OWQwHhcNMjYwMzAxMjIwMTE1WhcNMjYwMzAyMjIwMTE1WjAzMTEwLwYDVQQD
EyhiYmIyYWVjMTI3YTMxODE2Y2VkNWU2YTQ3MjYwYzFjNzRlNzgxZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI2yf9vBY/TBF3REigAkFhY8Wcgg
n2IyciIlgJvysJS9iEVJ2ZTf+9Cb96NHQR0g4Zlht7dafwXOyAPPOPQIWqOjWKn3
U6f76Oy6SHBeARCDZvJ8Q9wZdcU3TsRydORiDtBi/MahGyV6UgtiOkH5RIa4q3nG
3BhZeQufLwbpv8+aOSU6OgM5RoWu2R5jhtJ8NMHjjlY62Nkai1Y2IoJrFHTnZQ2I
U0TRtqjGT2luBs4RwUl7Y0pva6Bwlmv3rTHU4RlC2JOSk6RaPAbb/wJHbSRmGk6l
5XJeWL4WYplf8N/7U5IxbuxAdikb7zB4HJfM6fMxMLl4AdR1t+vfWtG0UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuyrsEnoxgWztXmpHJgwcdOeB8iMB8GA1UdIwQY
MBaAFLyaOB+KYMxRtSmQ7ThpSPaEwxWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTkt
ZWEwNzE4MzU5ZTUyLzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTktZWEwNzE4MzU5ZTUy
LzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBPrieb3
txOYJujiXthUEZeyXmdNaZUpF+VmS1uy7xr45vU6zDcGmeSPL6N+H8xysICqDAk9
AY/jss0wc8zOZFcelXqE4IfR/RjHRwkdt8Y58FL4nzrpbcTviceUwXmNDYxM32hu
M2tD5/q+NRbq7ziGlVhecENZKfRLiH4DW4ZeU9lqCmCt8ZxIsqw0fJF5HAJc61Io
60nOJOo+9IhCndRNAotJV4b0mI3OdSRtmzfH5tmhpWpPETjyIAIkCo/1JGE5yyx6
azE6Tr4us0kxaPQHZl5daqEfGn7zLJRZOyu45ViWbcRptkaA/XEj0aD0zXzl3yfW
YtYItJsCkykGqQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:32 2026 by rpki-client