Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: YQCcmF722XnUx65YlEiKuGD8a5NDGmfJ5b4tw2FRQS0=
Subject key identifier: 68:2C:A1:B4:2B:E4:11:AC:F5:96:3F:C5:87:63:95:9D:97:F5:93:E1
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 019D996289C31FC739E0399E9237D54E0325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0FA6
Signing time: Fri 17 Apr 2026 03:01:04 +0000
Manifest this update: Fri 17 Apr 2026 03:01:04 +0000
Manifest next update: Sat 18 Apr 2026 03:01:04 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: Pu8mqFvnIrVxNT4QNrOZuOLprLDRnowZwJP308nIlPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:89:c3:1f:c7:39:e0:39:9e:92:37:d5:4e:03:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Apr 17 03:01:04 2026 GMT
Not After : Apr 18 03:01:04 2026 GMT
Subject: CN=682ca1b42be411acf5963fc58763959d97f593e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:13:27:ee:9e:14:59:c0:81:0e:da:59:a2:
31:f5:61:8a:6d:58:d5:86:0f:99:bf:13:b7:ec:77:
cb:20:15:9b:39:e8:20:22:00:e5:28:c9:60:cd:a4:
a1:d3:6d:a5:5a:84:77:2b:60:e7:df:67:e3:cf:c4:
c2:52:09:5d:2b:70:c2:f0:35:80:29:0d:10:1a:6e:
87:52:57:f2:02:0f:8f:cf:28:81:17:01:57:e5:6b:
60:9f:c4:77:87:4a:9f:b0:39:d6:95:1d:a4:eb:f8:
30:ac:36:bf:7e:06:ff:a7:80:13:8d:60:07:7c:b4:
e9:cd:e4:2b:50:2f:d0:25:21:c3:94:4e:7e:ff:1b:
1a:d1:74:75:51:67:f8:41:4c:cc:ac:35:38:9d:e4:
15:d5:72:cd:e9:ac:bc:90:2c:2a:03:4a:75:4d:dc:
8b:2e:f4:a4:49:e4:e4:6e:43:95:58:46:be:29:6a:
1a:05:ee:2c:07:51:d3:9a:6c:7c:fd:ad:8a:e9:a0:
f4:dc:bf:61:a1:ac:29:36:7e:0a:ed:2b:8c:9f:3c:
3f:4e:b4:1b:e8:55:6a:1a:1e:7f:ad:bf:f3:93:3e:
ac:72:97:6e:66:19:95:57:aa:33:4e:b0:5d:27:95:
b7:63:d6:9f:fc:87:c7:51:10:fe:e0:fb:d1:c8:5a:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2C:A1:B4:2B:E4:11:AC:F5:96:3F:C5:87:63:95:9D:97:F5:93:E1
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:56:ad:3b:db:ac:28:1b:c3:9b:63:07:d6:41:8a:f2:98:
d3:5d:f9:21:11:cd:3e:ff:4b:1d:63:a9:ef:39:f4:f2:82:25:
8c:9a:95:0a:5c:af:21:17:33:ce:18:c3:12:70:e5:6c:2c:ae:
7f:a1:e7:b2:b2:02:e4:f7:2a:05:bc:ce:a2:a7:40:3b:de:a7:
34:60:66:9b:ac:bf:6d:24:ea:28:2c:2b:0f:f6:c5:cf:07:fa:
37:52:2a:89:cc:44:27:c8:4a:8e:cd:c9:c3:13:51:64:9e:0c:
13:92:97:54:59:a9:01:ff:d4:79:47:7c:95:86:e4:e4:36:dc:
3b:a4:0d:00:94:dc:d0:99:3d:b9:4d:da:1f:83:35:21:a7:08:
6c:5c:4e:cd:b7:71:c5:f6:4b:a2:0c:bb:16:5b:1f:2c:a9:7a:
ac:64:a5:b9:0d:e1:a9:cb:0d:c9:8b:d2:80:79:11:8b:a0:d5:
d2:5f:9b:00:dd:2c:1a:e3:1a:7c:34:61:90:f9:39:da:d0:c5:
c2:06:76:89:ab:88:6d:14:be:43:a9:35:f1:82:a2:c4:fc:a9:
39:41:96:63:b6:dd:d4:1d:55:93:26:7e:d7:f3:49:83:f0:b3:
0b:35:1e:94:af:2c:5e:5c:39:6b:0c:8d:5b:db:82:38:c0:4f:
e0:e5:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:13 2026 by rpki-client