Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: eNgQaEWojeWUXrAlgA3HYLmmUqBoLeHReqDxsATk17c=
Subject key identifier: D6:B7:A8:1A:5A:77:21:2B:03:1A:AA:C6:DE:BE:22:05:A4:B6:F7:93
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 019CAB6B4510BD5F4EFA2AB13515D3A75BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 147A
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: XD1yJo1fChpiyBgOcX9ilozxn7ZFt9K/ON3CVlUNLE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:45:10:bd:5f:4e:fa:2a:b1:35:15:d3:a7:5b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=d6b7a81a5a77212b031aaac6debe2205a4b6f793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:52:26:cd:22:d6:20:f2:a1:49:10:05:24:
dd:e7:b3:06:ab:a9:af:e4:25:19:2d:27:e4:5f:bc:
c0:5b:bc:d2:25:b1:86:16:fa:2a:a0:99:0b:a7:9a:
d3:61:36:4c:7c:95:04:5e:90:0d:37:c4:a5:e2:ca:
96:c5:98:d6:c6:28:54:f6:95:3d:7e:f8:89:80:fc:
26:b6:4d:6c:8c:2f:1c:fe:00:aa:6d:8c:f3:3a:37:
29:4a:83:47:85:c0:61:84:fc:24:5c:46:01:65:19:
03:b4:88:a0:42:a9:2c:94:b1:c8:60:5f:0b:cf:17:
c5:25:86:29:f8:a1:26:97:a9:8a:1d:d6:26:af:2c:
e2:a0:68:b3:0a:ff:ff:f8:d1:9c:24:e9:02:c3:2b:
90:46:e4:67:1f:a2:bc:be:b2:b0:23:da:fd:d9:6f:
13:6e:43:77:a1:e9:88:21:b7:e7:99:58:ca:31:85:
62:f2:f8:c7:fc:5a:d6:67:62:99:a3:93:5f:af:ff:
18:af:5e:49:5f:c1:ec:44:71:a9:89:41:99:2d:2a:
2f:41:4f:76:1f:17:81:19:82:ff:95:8d:2c:d4:7f:
77:ed:ca:30:ad:96:84:af:33:0f:6f:f6:77:3d:26:
c1:2e:20:7d:cc:2d:6a:78:b4:8f:8c:91:80:53:60:
6e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B7:A8:1A:5A:77:21:2B:03:1A:AA:C6:DE:BE:22:05:A4:B6:F7:93
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:10:2e:97:78:e0:e5:20:7e:c4:ad:9f:2d:25:09:f3:83:16:
67:27:f3:00:f4:a7:5a:5d:d1:5e:a1:b0:93:ba:22:31:92:28:
1f:7e:86:22:c7:d0:a1:4c:c9:f7:03:d9:8f:29:6e:16:ae:e0:
ee:10:23:ad:9a:17:6d:e6:b2:11:07:0e:1b:0c:75:2b:6a:f3:
07:61:93:d1:5a:99:ff:bc:b8:f5:a0:52:90:57:9a:8c:e6:bf:
13:99:c9:45:4d:45:e9:74:d4:85:9d:61:4c:ba:d7:61:85:50:
b3:94:12:5c:14:59:02:1f:73:4a:41:37:e8:f7:fd:99:7b:48:
d1:65:41:22:ec:d6:05:c6:fa:f3:e1:32:a6:42:1c:1c:a1:5a:
20:5d:40:16:04:4a:95:d0:e2:e5:bf:53:7a:31:03:85:52:c7:
da:10:fb:9e:f4:16:79:73:d1:03:04:7f:26:98:5c:58:ed:7f:
b5:6f:db:a3:cf:06:3a:d4:b1:d0:f3:3b:ca:08:02:8d:04:d3:
4b:6f:93:90:d1:91:e3:1a:29:e7:2f:fb:b2:dd:d7:58:bd:11:
ab:5d:e2:b9:65:eb:07:04:0a:81:29:e2:ed:aa:ed:2f:e6:85:
ed:be:e5:b0:46:a2:03:be:8e:65:41:f2:69:9f:51:98:d3:84:
8e:84:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:36 2026 by rpki-client