Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier: Lm+Dpdm48iErwxKcPHJL5IOs2clhTc6wZEAdmuwjTAs=
Subject key identifier: A2:07:B7:63:CE:B5:08:52:17:E1:FA:C6:59:0C:2D:97:D1:46:8F:A0
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial: 019DA48AD88330C6F607350239248C6BCBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 07:00:55 +0000
Manifest this update: Sun 19 Apr 2026 07:00:55 +0000
Manifest next update: Mon 20 Apr 2026 07:00:55 +0000
Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: qO2a8g0LGWvwmdcr5S4FGV3d40/ttt1exYofF9z3QQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:d8:83:30:c6:f6:07:35:02:39:24:8c:6b:cb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Validity
Not Before: Apr 19 07:00:55 2026 GMT
Not After : Apr 20 07:00:55 2026 GMT
Subject: CN=a207b763ceb5085217e1fac6590c2d97d1468fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:f8:7b:d8:b0:41:63:4f:c6:66:51:ab:ff:
98:7b:2b:5b:84:cc:e0:a0:ba:ae:89:4f:a5:c7:81:
09:d3:20:fc:10:60:1d:d9:d8:10:df:89:ea:a5:5a:
ad:bc:48:51:e3:94:41:5e:73:00:b6:d4:0b:31:e0:
46:b1:cb:d2:df:dd:d0:18:35:d0:50:ba:a7:5f:38:
05:06:a3:93:f2:a1:df:75:a9:eb:6e:2a:d0:a6:49:
7c:9a:b7:5c:b4:1c:99:e0:8d:af:0f:32:97:51:17:
39:ad:bc:ec:37:3a:33:73:b1:20:7a:8c:d9:76:90:
c9:f1:a4:68:41:45:ec:8c:59:cd:1d:e2:52:c9:74:
0e:fb:59:f5:bb:69:ac:60:88:21:22:59:73:d6:c3:
a1:93:c2:ef:c3:c3:5a:fc:f9:7f:72:56:87:d9:e2:
5e:57:26:48:13:80:59:28:24:99:00:0b:ac:f0:05:
0d:d1:4c:d6:2a:b0:65:6e:ab:b9:f5:0d:bd:46:d0:
e4:0a:82:5f:fb:f8:ca:54:31:a5:b0:60:eb:77:11:
73:7e:f5:0f:a1:7f:e9:23:8e:ad:ef:ef:02:a2:9e:
a9:c3:7b:10:c7:97:a2:6d:9f:c2:78:34:de:8f:ff:
91:26:2e:00:39:11:43:55:9c:f9:05:cc:40:75:fd:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:B7:63:CE:B5:08:52:17:E1:FA:C6:59:0C:2D:97:D1:46:8F:A0
X509v3 Authority Key Identifier:
keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:85:34:be:6d:04:aa:7e:2b:65:5c:2b:36:ff:fb:cc:56:75:
1f:c3:a6:bb:4c:1e:05:59:da:16:1a:6a:fe:0e:6d:43:8d:98:
b7:d5:1e:54:ec:da:91:61:23:b6:4c:16:7a:53:85:4b:b2:05:
af:ff:65:7a:4c:0a:6d:74:b5:ab:03:06:03:a8:aa:d0:ac:2a:
ee:79:27:2e:68:b9:b6:4a:3a:2b:92:18:d5:92:90:85:15:f4:
a8:37:13:e7:cb:a3:a9:60:68:07:aa:6f:de:5a:d7:7a:d1:0b:
3b:f6:b8:15:6c:b3:8f:13:b2:82:71:d0:e5:8e:ea:9c:63:e6:
77:8c:d4:8e:91:ed:fe:d7:d0:d8:75:bb:f5:42:1a:08:6a:41:
62:e9:ac:ea:6e:ec:b2:c3:a8:87:7c:97:af:a9:a7:56:3e:22:
c4:e6:cf:a1:f8:ec:66:1c:de:8d:10:0c:63:9f:4d:8a:bd:09:
d0:66:7e:ee:26:da:1d:ea:e7:7a:29:d9:25:92:0c:f4:e6:3d:
c6:b3:42:12:46:bf:01:1a:26:4c:1d:af:3f:de:dd:5c:72:8d:
84:85:c6:45:e6:be:15:ae:18:1f:88:a7:bc:76:07:23:28:18:
ff:da:3c:25:38:f4:9c:08:02:01:a1:c1:dd:f1:e1:b7:8e:4c:
ad:06:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:15 2026 by rpki-client