Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: 8Xy48s2xj9Yh21LFuTvNYjL+y/SBD3VY8K8wupkweBI=
Subject key identifier: 4D:97:3E:09:34:45:43:B8:93:0B:64:53:34:80:B5:17:26:F8:1D:B5
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 019D9A07069C48B5BCD1419C5D4DD69C208F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 0CBC
Signing time: Fri 17 Apr 2026 06:00:44 +0000
Manifest this update: Fri 17 Apr 2026 06:00:44 +0000
Manifest next update: Sat 18 Apr 2026 06:00:44 +0000
Files and hashes: 1: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: xKlMLN/rnOyFPMHLrKrn3KimMleZSXtuqkpiFBAz9XA=)
2: wEItEwxXTo8UEkPrbbqheWRaMG8.roa (hash: yoZaY3FJD2E2HyfnXNJYmTTSvlkSy7fNejE8EJiOlJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:06:9c:48:b5:bc:d1:41:9c:5d:4d:d6:9c:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Apr 17 06:00:44 2026 GMT
Not After : Apr 18 06:00:44 2026 GMT
Subject: CN=4d973e09344543b8930b64533480b51726f81db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:94:57:d0:f7:ca:1c:50:89:a2:b2:0c:92:
da:b6:54:6a:a4:ac:08:88:ea:0f:5e:65:72:bf:c2:
d4:23:2a:88:d5:20:c9:2b:b7:ad:7b:c6:35:f6:5c:
81:1f:35:a2:14:85:b3:57:2a:47:a4:75:0a:f6:7e:
44:a1:02:fc:24:7d:57:64:32:12:8a:c5:82:88:81:
e4:5f:7d:70:f7:1c:df:ed:3e:ef:13:bd:40:3c:13:
68:74:df:e5:2c:37:c7:c0:b9:03:7e:7b:12:cf:d5:
18:c2:bd:06:fa:ac:c0:72:c7:6d:09:23:3a:77:ac:
f0:f3:a4:65:c1:cf:de:eb:53:f9:bb:62:c0:73:b8:
ac:21:c7:01:d8:33:23:4f:51:94:64:ce:b5:26:fd:
8e:20:2b:25:d3:46:c7:03:a2:e9:1e:81:e1:b7:eb:
21:d4:e9:30:6c:17:19:89:0f:09:8c:ab:d6:f7:6f:
72:a7:1f:b1:16:db:a4:d8:de:17:33:76:c3:bd:eb:
03:de:6b:24:37:2a:c2:da:84:3d:30:f5:d6:8a:c6:
0d:93:0d:94:c8:be:90:32:94:bb:9b:80:bc:c5:55:
88:3d:c1:8a:c0:a0:06:bb:64:9f:80:c3:ed:ec:4a:
6f:46:35:28:e2:25:9a:f6:56:c4:8a:99:35:0c:95:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:3E:09:34:45:43:B8:93:0B:64:53:34:80:B5:17:26:F8:1D:B5
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:cd:35:8e:cd:6e:87:f8:77:9d:f6:a3:87:e3:e0:b7:c5:
0f:47:42:3b:c6:93:65:e7:ca:4f:f3:fd:b2:44:c5:90:5b:e5:
f0:b0:a6:06:36:af:0b:44:db:84:f4:46:f4:5b:5e:0d:f5:ae:
65:07:0d:9d:e2:1e:7b:bd:57:7b:1f:5d:4f:00:3f:96:e2:bf:
8d:bd:2e:22:66:6b:05:2d:de:1f:63:a2:fa:91:35:f9:74:1e:
22:3f:7d:ca:67:bb:78:d5:44:4c:42:4c:3f:af:f6:f1:0c:fc:
02:0d:3d:db:f6:a2:4d:36:f7:16:14:13:a2:60:99:bf:2a:9e:
e3:44:ec:04:df:ac:60:8c:a8:83:5d:93:16:6a:d1:24:a0:66:
7e:b1:bd:22:30:95:a3:b9:25:61:f1:fd:95:22:19:79:cc:6a:
63:5d:f6:ff:5d:c5:23:d0:91:a4:90:63:09:70:31:ff:9b:21:
ab:8c:e6:d2:c6:5e:d6:ef:59:f6:21:4c:f9:cd:02:5f:5d:98:
7d:e7:a0:4f:31:5d:4e:6d:1e:a6:7c:96:9c:c2:19:13:74:74:
d4:6a:4e:79:83:6a:0d:a5:6a:c9:54:39:00:70:bd:d2:0c:96:
a6:b6:a3:fb:a9:f0:e1:e5:45:2e:a3:b9:55:22:06:c8:cf:f7:
c1:32:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:44 2026 by rpki-client