
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier: I+FC4yQRS2NfC86SV+2hAQAgAPtaUkTsL9m73zzFXq0=
Subject key identifier: 18:5E:85:62:B5:49:95:9B:81:5E:CA:A1:8A:24:8F:5C:A4:28:52:59
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial: 019CAB6B670612959F19A650C93A2B42B404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: AKcfgktblkovotg8K6zMdgjIoFC8vOwGxVxN+a95h88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:67:06:12:95:9f:19:a6:50:c9:3a:2b:42:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=185e8562b549959b815ecaa18a248f5ca4285259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:93:c9:0a:ba:0c:10:3d:61:5e:85:58:ae:
43:61:40:1e:b8:a8:13:d8:12:48:9d:60:26:5a:a1:
c8:d8:4c:7c:bd:2c:72:16:51:20:1d:e6:c5:cf:97:
c8:b2:3e:45:1d:68:2a:ae:28:49:a0:47:73:30:a1:
ff:78:ab:b9:0b:a7:4e:d2:74:55:b2:26:2f:13:3a:
08:7e:33:7e:33:40:d5:52:85:b7:7d:ab:18:d3:b4:
d1:72:81:5a:58:88:da:98:82:18:3d:11:70:30:22:
cf:c2:39:de:ff:85:2a:bc:e2:aa:60:93:d0:ed:86:
18:45:4e:90:1b:89:a4:56:1c:f7:84:33:86:d2:38:
8c:31:25:a3:36:6d:e5:6d:ea:f2:36:1d:ae:3c:8f:
fa:73:41:ab:9b:65:5b:5d:a0:ea:6b:f7:c6:38:63:
d7:6f:bf:4a:d9:c9:e6:c8:31:c2:53:d6:f4:ec:9b:
9d:37:dd:89:ad:79:22:94:9e:30:85:aa:74:63:8d:
a8:de:7c:1c:ee:cd:a2:8e:29:7e:42:01:92:f1:26:
84:87:f2:b7:78:cc:f3:a4:ee:fe:64:77:44:15:a1:
f8:ac:bb:da:66:e0:3e:00:85:50:84:35:3c:06:85:
1d:86:c0:a6:a5:ee:f4:1b:4b:a3:17:96:08:31:ea:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5E:85:62:B5:49:95:9B:81:5E:CA:A1:8A:24:8F:5C:A4:28:52:59
X509v3 Authority Key Identifier:
keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4a:e3:14:4b:08:16:cd:cd:3a:f4:dc:30:de:f6:4e:ac:8e:
73:b8:7d:ab:46:d1:55:b4:cd:c3:d0:f5:c7:a8:25:c2:a7:de:
b0:b4:da:9f:a4:ad:1b:01:96:28:e3:a5:40:77:f5:35:e0:d2:
66:5c:96:f4:c4:c7:07:c2:ad:5a:d5:62:f2:11:02:53:3f:8b:
52:9e:44:3e:e6:48:03:0e:34:9a:e1:2d:5a:92:b6:0c:fd:61:
b7:cf:13:66:7b:28:0a:a8:0a:a6:df:97:5c:5d:18:9c:62:01:
84:7d:1b:b8:2d:05:ba:8d:42:77:ad:43:24:45:52:98:ff:06:
2b:b2:d8:fe:a2:86:2e:cd:34:85:bf:d5:bf:37:b4:9e:2d:a6:
cf:39:71:cb:ef:88:52:6f:2d:10:c4:79:08:be:02:78:23:f5:
9d:00:4b:01:0d:fa:2c:cc:3b:87:41:96:e7:e1:01:7b:11:1c:
ce:bb:c8:0e:75:51:8f:f2:f2:f6:df:79:69:7c:ff:17:28:26:
00:74:f8:c6:bb:60:90:26:bb:d1:2b:69:6d:0a:6a:7b:cd:4c:
ed:34:8c:e8:2e:d6:c4:d8:ee:f4:4d:b2:7d:df:f9:ef:7a:d8:
de:39:f1:fb:f8:32:8c:3a:5d:16:70:1b:a3:30:d7:1b:31:73:
da:2d:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:04 2026 by rpki-client