Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: V/Qn640oyR13jDYzsrCPmaCmXB6C8pXJbCsUxQRB3zQ=
Subject key identifier: 40:28:72:AA:AB:98:23:2F:5B:D6:B6:15:F0:73:06:EC:72:3E:68:90
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 019D9962982E46332B6068684915EA35C63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0DF6
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: rNmAuLSfv8nV+1Opx7BH+n4zYzNhI7V/aRNAZnEmoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:98:2e:46:33:2b:60:68:68:49:15:ea:35:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=402872aaab98232f5bd6b615f07306ec723e6890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:77:9c:6b:35:c5:39:f6:e4:b1:d7:dd:8c:
e4:3e:1f:3e:03:bd:76:98:89:51:cc:2f:50:a7:a3:
c7:99:f6:bc:f5:4a:19:40:15:c8:03:e6:dd:2a:da:
6f:32:8c:b0:53:66:b8:a1:85:d5:f4:cd:9b:03:a1:
c3:db:0f:f5:b4:00:a4:a1:da:79:60:7d:7d:9c:c4:
b8:a0:98:a9:77:2f:11:e7:44:84:f1:f4:c7:a8:07:
45:d5:5e:33:01:d6:15:81:ca:2a:d5:c1:ca:8e:23:
f5:ff:81:06:98:19:12:8d:7c:44:31:b5:74:d9:3d:
e2:18:4b:ce:c0:36:e5:de:b6:be:49:01:0d:c8:30:
e1:4c:74:c8:85:c6:f0:da:24:03:46:c7:ef:e2:f3:
17:82:75:79:3d:e3:7b:44:dc:f5:2d:13:9b:31:1d:
df:31:fe:43:91:31:3a:46:aa:16:13:52:eb:07:1b:
d6:fc:64:6d:c4:77:e2:41:df:3c:29:79:27:e5:83:
dc:84:9f:39:c0:00:45:2f:15:39:b4:d8:fe:fc:5d:
6b:a6:78:8f:1e:a4:c9:37:43:e6:b2:1e:68:86:79:
9c:8b:db:4f:77:97:79:46:db:96:d9:b5:60:b5:d8:
4c:51:de:24:37:6e:f3:d0:3d:6e:48:2e:29:1c:f6:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:72:AA:AB:98:23:2F:5B:D6:B6:15:F0:73:06:EC:72:3E:68:90
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d7:e9:0a:b5:5f:69:70:d3:cd:0b:6f:48:64:f8:b1:d1:56:
3c:67:f8:be:97:fb:d3:0c:cb:4e:22:64:55:a4:da:80:c1:60:
8a:ac:4c:c8:e0:b8:47:0c:bb:28:06:a4:c7:f3:8a:ce:3e:96:
4f:49:d8:8e:3c:1d:57:45:6d:b2:4c:5d:b2:1d:e9:6a:7b:18:
fa:ca:68:c8:a1:39:d3:27:66:2d:7e:21:c4:b2:b8:94:ef:26:
69:e5:67:46:0a:f5:1a:7d:38:e3:4f:37:ef:58:a9:56:08:e0:
29:90:46:ee:71:f8:c2:18:33:17:ff:2c:fb:15:7b:c9:b2:63:
3a:79:24:de:3d:bc:8e:92:cd:59:08:ea:02:64:af:72:0b:c1:
b0:af:6f:62:0d:82:a8:b1:cd:8d:9e:f5:8f:ac:aa:cb:8c:9d:
9d:f4:1e:2f:04:34:7d:8b:39:f4:83:92:f3:af:83:92:ec:78:
52:8c:53:48:cd:3e:18:76:37:5b:73:e1:40:b4:13:a8:93:6b:
9b:9f:82:04:e5:f5:77:70:24:12:4c:55:54:d7:37:dc:72:b2:
31:00:91:99:0b:78:64:06:7c:4f:69:1e:08:7a:50:ff:26:8b:
bd:63:56:80:ec:d7:8e:90:65:49:44:df:47:1a:d2:05:12:d7:
63:60:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:53 2026 by rpki-client