Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: LtxArYSpotvh65tHWGbim0sV8IZVsphBPE2DO03kMxQ=
Subject key identifier: 74:6B:43:65:43:B2:88:4F:21:BB:05:52:26:3C:95:75:C4:AD:F4:E1
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 019D98F4C5CD5078BA8E9577427C84AE172B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: H0B9G8L+2Rl5EyAuJBdHIxw6qR5zWoPL3/I0VKfbhEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c5:cd:50:78:ba:8e:95:77:42:7c:84:ae:17:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=746b436543b2884f21bb0552263c9575c4adf4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:4a:e3:d9:54:b1:e4:40:9e:81:bb:96:b3:
06:b7:aa:44:e4:7b:6b:3d:69:7a:cd:81:7c:4a:51:
02:7f:52:7c:40:52:b0:a3:27:c8:e4:ad:78:a9:f8:
8f:65:2f:17:f4:ea:a9:74:87:d6:31:f1:64:72:5b:
59:7a:d2:6b:e8:85:c6:c8:b2:41:02:3a:04:e0:e8:
bc:e7:7d:ce:03:d1:6f:59:06:b1:7d:13:68:49:67:
70:69:ae:46:e7:f8:b5:05:aa:db:28:32:e8:58:0f:
7d:d3:3d:5d:d8:2b:b4:68:80:db:07:e9:97:cd:44:
e3:a9:d7:c8:14:72:75:83:ec:fb:0b:84:78:4f:8e:
86:2e:af:4e:80:10:54:b4:d4:24:73:22:b2:a7:ef:
b3:d0:58:d0:4e:77:32:58:c7:fb:e2:72:9d:6e:43:
13:77:ec:d2:ed:bd:68:48:58:95:4f:f8:e3:06:b3:
aa:46:34:cf:39:36:0d:d5:31:7b:b2:b4:af:f6:e8:
38:e6:4d:6b:06:54:dc:6b:16:f8:fa:5f:b2:bd:7e:
5b:a4:30:4d:c5:13:a0:3b:ba:1f:2f:9e:91:2e:a7:
ea:d5:f5:66:41:9a:26:84:41:06:fe:51:ee:9a:b0:
4a:e9:f6:c9:aa:db:89:1d:dc:47:02:0d:64:2f:6c:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6B:43:65:43:B2:88:4F:21:BB:05:52:26:3C:95:75:C4:AD:F4:E1
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:1f:c9:40:a7:64:d5:4d:03:37:0e:a4:db:04:59:04:a1:
69:60:ce:4c:85:c0:9c:ed:ef:87:07:d0:f9:2c:66:c1:11:ab:
5c:45:3c:14:77:60:8f:b7:7b:96:c6:23:a8:7d:e4:4b:7c:b9:
57:41:4e:8b:1a:01:44:4b:28:10:b0:99:d1:f9:ab:42:96:0e:
36:a3:ff:18:9f:2a:41:09:a8:a6:01:cc:67:9d:3d:8b:7a:47:
a1:8f:e9:70:df:05:a3:13:28:66:a8:98:bc:ed:5f:f9:52:5f:
d9:82:b2:eb:51:2c:67:44:c6:6d:c2:23:33:f4:6d:59:80:10:
60:f9:83:d1:01:22:e7:ad:a4:97:97:69:6d:60:43:01:c1:35:
19:04:6e:4b:a4:e5:22:2a:7a:b2:da:fc:fb:d8:c0:23:9d:32:
c4:3a:e9:22:7b:83:b7:ed:81:7d:ba:e8:e4:f1:20:47:45:7d:
75:ef:98:75:40:7c:b2:03:b8:0f:39:c6:d3:10:63:61:cb:4c:
70:c1:93:16:7b:3b:ab:25:bb:b6:40:53:f2:cb:aa:30:3f:97:
24:2d:3a:bc:ae:72:7a:c8:37:bf:ee:57:50:83:00:3b:1d:36:
f6:13:f2:59:b4:87:38:9d:df:8c:77:6e:f9:17:54:20:92:fb:
d9:66:ae:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:37 2026 by rpki-client