Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: aLVrKY718U5MExZiNvKoap6ESFA86rl1NScMeTNKRLw=
Subject key identifier: BC:94:C0:E3:F0:A6:1C:05:72:96:A8:4B:0F:DB:77:1F:FE:CF:15:64
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 019D98F4C6757FF5B73DBA38A2917586B4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 1347
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: stR1jHuqXxQI/tOwP/KUjEIW5ees1YsKBZOX0Z1zsNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c6:75:7f:f5:b7:3d:ba:38:a2:91:75:86:b4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=bc94c0e3f0a61c057296a84b0fdb771ffecf1564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:32:e4:af:eb:34:40:17:fe:70:9a:62:41:
65:e4:28:aa:cc:24:a7:37:66:85:c6:ad:54:05:4e:
23:77:46:90:a9:26:e2:81:f9:9d:47:77:65:9a:01:
c1:7a:a6:d9:7a:53:cb:70:43:3b:39:4d:69:ec:ff:
a2:27:61:5e:b9:2f:76:98:31:21:0b:5c:9c:d5:8f:
75:9c:bd:05:6f:da:06:6c:be:e2:c5:0c:d5:e3:2d:
87:6b:71:94:e7:83:4e:0c:12:e4:f3:45:bc:8f:df:
b5:49:6e:b4:ad:6f:e7:de:04:14:27:24:ad:56:0e:
d9:83:81:b5:d0:18:56:e3:45:fa:fc:0f:bd:00:63:
d6:cd:f1:51:a9:de:8a:93:92:34:0f:f3:d5:91:c5:
f1:22:76:21:22:df:dc:50:ba:33:13:3a:6b:be:0f:
71:a1:2b:12:a6:61:f0:11:69:af:78:b1:56:0e:b6:
98:f5:56:71:e0:c4:63:6e:c5:d8:03:43:d4:f0:22:
b4:6f:6d:66:a2:14:dc:c1:c6:ba:37:de:06:07:f4:
73:c2:85:8a:8b:33:5a:fd:12:00:76:ed:59:34:39:
27:e0:24:2b:98:38:f0:4e:2d:4a:5b:d9:ce:02:e7:
e0:fb:de:d9:4d:be:26:3e:11:3a:64:d6:f2:d4:a3:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:94:C0:E3:F0:A6:1C:05:72:96:A8:4B:0F:DB:77:1F:FE:CF:15:64
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a7:91:ea:68:62:45:44:e7:54:2e:82:01:e4:4a:f6:ae:ca:
69:77:e6:cb:2e:84:da:01:f4:ce:1c:c3:06:59:82:4d:48:4c:
de:c1:ae:be:83:29:b3:6b:7b:e2:76:0c:34:d2:43:88:f9:f4:
4b:df:47:38:0c:f1:cc:2b:51:fa:e0:cb:b7:6f:df:08:98:c9:
81:33:c4:ef:b2:6b:a1:5d:5d:42:86:e8:83:39:d2:5e:19:58:
02:ed:30:5e:c7:45:4b:04:ce:64:9e:77:10:07:af:1a:7e:e8:
71:c9:a9:09:df:90:d1:e8:52:41:fb:2d:5c:4d:71:d1:b2:cf:
1f:40:84:92:5d:93:42:2e:d7:56:32:eb:a4:c7:c4:7c:06:18:
5a:4e:1d:84:69:88:07:cf:38:37:b8:f8:a3:54:23:47:30:d1:
8f:38:d1:ca:2b:83:d7:c8:39:07:0e:55:ab:af:e2:34:c8:42:
e0:e7:ca:c2:ac:2a:5b:95:ec:96:44:ee:b1:6e:93:50:d6:23:
05:4c:fb:80:59:a7:d2:be:10:0a:b1:b0:84:f5:b7:53:47:ad:
3c:a8:f1:3a:93:86:f7:f8:fc:2e:49:c2:58:ad:08:fb:67:33:
f1:de:d2:2e:16:f2:ca:2d:8c:6b:7a:7d:14:0d:64:75:e8:9e:
91:f3:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:48 2026 by rpki-client