Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File: vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier: LPjEY56rGRAanCw9vZkpRg546T8QVSoV7ANDJXW78RY=
Subject key identifier: B8:CD:AA:8E:4A:EF:80:26:F6:2A:61:6C:8A:4F:6E:87:BB:7E:EF:8E
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer: /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial: 019CAD599DB11E68C0AC4FB8726C312631A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number: 12CD
Signing time: Mon 02 Mar 2026 07:00:57 +0000
Manifest this update: Mon 02 Mar 2026 07:00:57 +0000
Manifest next update: Tue 03 Mar 2026 07:00:57 +0000
Files and hashes: 1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: BSv9DsCLrF+L3IgDvrbSUw8CGrOpuOoud6a0cnAfB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:9d:b1:1e:68:c0:ac:4f:b8:72:6c:31:26:31:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Validity
Not Before: Mar 2 07:00:57 2026 GMT
Not After : Mar 3 07:00:57 2026 GMT
Subject: CN=b8cdaa8e4aef8026f62a616c8a4f6e87bb7eef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:d8:c0:ad:f1:e6:ca:4f:57:b8:3a:22:d2:
98:b8:34:90:34:08:a5:f1:81:8e:ee:6f:3b:51:7c:
f7:89:5b:8d:2f:04:7c:4f:1e:f0:51:65:66:b1:56:
64:79:e7:d2:ef:c9:1c:70:fc:9f:dd:cb:a0:81:d2:
49:f2:a5:a4:a7:2e:5d:34:c8:25:b0:0a:f5:5d:a6:
c9:74:ea:b2:d4:c7:89:6a:f5:0b:2d:b9:69:a7:ec:
0a:ed:a3:45:f6:30:08:7e:69:a4:b9:a8:63:96:4e:
fa:3b:ae:ce:1e:e1:c5:7a:76:27:8a:4a:cb:05:3c:
b9:9b:18:28:ba:05:d1:61:31:2c:a6:56:76:5a:6a:
e2:23:66:1b:ea:23:c6:52:e7:5f:bc:6e:ae:fb:86:
67:05:25:dd:07:a0:db:94:89:c6:a9:40:fa:9c:7c:
ba:b4:00:7a:7f:bb:e2:88:9c:cf:60:40:05:1f:c4:
82:5e:00:83:3d:97:9e:5a:a4:21:10:42:70:26:52:
42:4d:25:c4:d6:1f:55:31:d8:b6:cc:cb:17:99:8f:
d0:f9:52:bf:50:30:db:41:24:2d:a5:66:14:9e:29:
25:0c:f4:0a:8d:23:0c:da:94:7a:2d:d7:03:e6:d0:
63:27:25:22:46:da:7c:b0:ac:c5:c4:95:54:7d:67:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:AA:8E:4A:EF:80:26:F6:2A:61:6C:8A:4F:6E:87:BB:7E:EF:8E
X509v3 Authority Key Identifier:
keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:da:db:8e:14:ca:c0:92:8e:28:1d:24:20:94:7d:09:db:51:
80:e2:9e:5f:03:5a:c3:79:24:5a:84:5f:f8:ee:ae:20:43:1a:
90:10:20:04:99:ba:b9:3c:1d:6b:1c:74:63:9e:fe:68:a9:ab:
c7:e5:e9:cd:de:61:4e:77:0a:3f:3d:48:1d:2d:d9:94:1f:ce:
bb:d1:1e:9b:8c:fb:d3:ad:5f:7c:d7:ae:2f:3d:1e:14:7c:f2:
35:7d:53:e1:1f:cf:67:32:0a:be:a6:b1:ed:be:76:41:58:17:
ee:b1:73:a9:a1:40:d4:1a:29:84:eb:2c:2b:8d:f6:06:ab:85:
b5:ef:14:ce:f1:95:27:ff:0e:47:02:1a:b8:12:55:e3:bc:a4:
76:cb:06:bc:c3:ee:ac:23:cb:7a:0c:1b:af:65:99:17:e9:49:
e8:dd:04:6b:1b:66:30:d4:41:6f:91:e2:ce:b1:d9:3a:ad:35:
c5:44:ad:13:f2:41:b3:1c:43:42:f3:7b:d9:60:63:6e:db:bf:
ff:64:09:f9:7b:aa:49:26:e1:18:eb:8d:c6:88:e2:e0:62:c0:
38:13:3a:47:c1:46:9e:06:83:03:00:f7:3a:05:da:27:ba:22:
1d:ec:00:20:35:f2:16:bc:c1:32:e0:ff:bc:24:20:80:67:fb:
fc:ba:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:50 2026 by rpki-client