Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier: alKpsT+e2QuP38i+os/kkBU6apaN6ElkGR7hTbuWGo4=
Subject key identifier: E1:55:18:A4:EE:D9:61:00:64:5C:BF:46:4A:2B:E1:67:17:33:5D:F1
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial: 019CAB6ACB86FFF3E5D394EADAF4996D70D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number: 10AB
Signing time: Sun 01 Mar 2026 22:00:28 +0000
Manifest this update: Sun 01 Mar 2026 22:00:28 +0000
Manifest next update: Mon 02 Mar 2026 22:00:28 +0000
Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: FdoU0vH71LCVlt+cIjljjQE/qnGEsIrJkInyXi8gqAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cb:86:ff:f3:e5:d3:94:ea:da:f4:99:6d:70:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
Validity
Not Before: Mar 1 22:00:28 2026 GMT
Not After : Mar 2 22:00:28 2026 GMT
Subject: CN=e15518a4eed96100645cbf464a2be16717335df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:16:fd:48:0e:eb:8b:8c:91:db:d7:d8:ee:
4d:b3:e8:34:17:57:db:7f:d7:60:44:65:a8:db:ec:
f5:73:f2:92:70:95:6a:28:5b:22:26:5c:71:78:d4:
db:2b:df:45:ac:d9:d1:bc:1a:82:08:3e:0c:c3:00:
1c:11:99:81:6d:67:c8:c9:e6:bd:06:1a:6f:b5:1e:
bf:6d:3e:dc:77:1e:09:85:a4:ab:27:59:9b:9d:0d:
7d:46:06:45:25:87:40:29:40:c6:a3:58:82:71:d3:
22:e2:dd:ef:63:6b:06:0d:73:69:d7:f5:be:3d:ff:
12:05:04:0e:d9:47:d8:ed:fd:70:52:49:f6:31:2e:
eb:b6:ee:20:26:57:d3:25:3b:10:a8:d0:f6:cd:26:
13:57:9d:91:2f:60:2e:1e:7d:54:02:b1:12:51:df:
87:79:cc:b6:a0:d9:38:36:d5:e6:bc:f5:b8:c7:f5:
4a:27:45:68:e9:68:9d:d5:6f:26:28:c6:46:2b:80:
24:19:3a:d7:c2:39:f5:63:07:c4:ca:eb:8b:4f:ee:
c7:97:13:02:29:3f:e3:78:fd:5b:33:7c:0b:da:dc:
de:ff:aa:21:99:90:bd:89:12:fc:42:cd:b1:35:16:
2b:18:cd:d7:7a:20:92:37:0f:0f:22:4c:55:be:62:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:18:A4:EE:D9:61:00:64:5C:BF:46:4A:2B:E1:67:17:33:5D:F1
X509v3 Authority Key Identifier:
keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:82:9a:13:c0:0d:ef:00:b4:b0:0e:5b:57:ab:59:02:0d:2f:
bd:ad:66:e8:b9:55:ab:d4:7c:69:5f:79:63:c9:ed:fd:31:6a:
20:94:37:2b:84:d4:79:20:10:e4:42:7c:91:b7:0b:11:f0:a3:
53:12:9a:6a:49:22:a1:7f:ac:bf:ca:8e:76:99:61:63:73:ad:
a2:f8:74:04:42:40:f4:9e:5f:15:b5:bc:40:b8:d0:a7:24:3b:
00:44:59:45:9c:cb:38:3c:ae:de:c9:0e:19:3a:20:a8:9e:30:
00:06:8d:b7:10:49:ae:f3:aa:30:3a:6b:a4:30:9b:b2:ef:e3:
31:cc:66:9c:1e:00:4c:78:bc:0b:d4:d2:52:c8:3a:8c:76:0e:
b7:4e:a5:e7:0d:18:eb:78:da:c9:1b:6a:27:0e:f7:0e:24:8c:
43:24:2a:da:11:05:b9:79:65:4e:ca:b0:9a:66:ca:33:17:9e:
d0:ad:e7:c1:ce:6b:4a:c7:8e:37:ad:ae:eb:50:a7:ac:93:d1:
ce:5e:87:e2:1e:bf:32:af:2e:cb:09:7b:dc:50:34:8a:34:81:
bf:c7:e6:5d:4b:b2:ce:2d:12:de:54:a4:6d:98:54:6a:70:f1:
21:e9:32:9b:fb:4b:55:00:c8:04:00:70:0f:d9:29:de:e8:01:
98:2b:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:12 2026 by rpki-client