Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: 1+mq7eNJV5hLVChuLgl15RK6fJ/NzHQoOeCK6SoZbhI=
Subject key identifier: 13:7A:AA:9A:99:30:20:95:3A:44:92:51:40:6B:5B:91:2A:EB:AE:D4
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 019CABD9964FE5D038B989FB462ED84799DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0D7B
Signing time: Mon 02 Mar 2026 00:01:29 +0000
Manifest this update: Mon 02 Mar 2026 00:01:29 +0000
Manifest next update: Tue 03 Mar 2026 00:01:29 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: ODNX/8PiRE8wRzizz/YHwsaZFn7Y0DSkO2EKLGKe2Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:96:4f:e5:d0:38:b9:89:fb:46:2e:d8:47:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Mar 2 00:01:29 2026 GMT
Not After : Mar 3 00:01:29 2026 GMT
Subject: CN=137aaa9a993020953a449251406b5b912aebaed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:46:f4:97:15:ed:c6:cb:4d:26:be:95:22:
f3:54:f0:03:6a:31:7f:30:60:f2:ae:e6:50:47:cb:
7d:0f:97:f8:a9:42:00:80:b1:f0:16:c5:65:6a:a6:
df:e1:4a:f2:b8:af:b8:2a:9d:7e:57:26:3c:0f:4f:
ec:50:b7:60:98:1d:6e:8f:a6:db:69:f9:06:22:4d:
05:6f:ba:d6:c3:dd:5f:14:48:c9:a5:de:c5:e0:d5:
07:1b:cc:af:83:66:95:78:e6:90:2f:bb:3e:7c:7f:
63:b3:d6:a3:f1:e7:af:b5:fe:58:f2:ee:d2:37:19:
a3:02:80:de:31:5b:a5:00:04:09:c2:91:46:f6:85:
f1:7c:d2:6e:69:66:f3:af:20:46:6f:b1:d1:5b:a7:
5a:a3:4c:a7:b8:91:da:c0:f4:62:47:cd:08:11:b9:
bf:ea:4e:3c:7c:af:af:41:9d:15:ce:21:d0:34:db:
28:83:f1:e7:f6:a0:d7:de:de:80:85:6a:26:43:df:
75:48:38:72:aa:a4:f5:ba:6f:ad:b2:15:db:37:ac:
41:a5:73:be:e2:0e:3d:7c:a7:0c:24:f8:81:30:4a:
6a:f8:d9:7e:3e:c1:c7:c3:00:ac:b7:7f:d3:bb:f7:
88:a3:26:e5:d4:49:ec:d7:43:37:2c:73:38:db:c5:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:AA:9A:99:30:20:95:3A:44:92:51:40:6B:5B:91:2A:EB:AE:D4
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6a:ca:e3:87:77:9e:49:37:b2:e8:e4:f1:47:a0:71:69:03:
48:7c:7f:fe:f1:31:a7:cd:92:05:75:62:85:e4:e5:14:bb:90:
34:18:bb:97:11:9b:3b:86:6b:a4:df:7b:07:eb:78:c3:a8:b7:
dd:e7:41:6d:8a:51:28:2e:cb:84:5c:a2:ae:0a:9b:6b:8c:8f:
b3:b2:52:bc:2b:e9:d7:40:03:d0:36:e2:52:aa:a3:1c:c1:48:
46:25:59:7c:7a:1f:34:b5:52:c3:53:ca:61:e7:cd:93:02:1d:
7a:f8:04:2f:4a:c6:a8:6e:73:8a:fc:20:fa:2c:c5:da:56:c4:
07:2f:a4:e5:d5:df:44:38:11:b4:6c:22:6f:c1:95:e2:cb:41:
13:cf:19:44:3b:be:6c:1a:63:ab:22:21:57:1d:1c:d0:1a:d1:
a6:9d:33:a9:be:d2:8a:eb:fb:ff:35:f2:51:32:56:73:f9:c1:
be:63:f6:7c:cf:f4:39:5a:1d:35:17:0f:fe:49:a7:88:6f:aa:
9f:01:06:55:e6:ba:09:cc:7e:cf:db:26:58:02:ad:32:22:91:
a2:26:6e:01:29:09:4c:12:a4:41:d4:96:3a:c3:88:18:14:c9:
69:4f:71:5e:e7:cf:6e:51:51:86:da:6e:96:8b:b6:42:1a:36:
7d:7b:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:35 2026 by rpki-client