Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
File: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft (raw, json)
Hash identifier: aVPddJVjNspMunueNqV1D7j2P5WSIPJuqwZ5l29Bmd8=
Subject key identifier: D9:68:20:6C:A6:FC:29:0C:4E:A8:46:D1:C1:90:B2:17:C2:53:7C:17
Authority key identifier: 6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
Certificate issuer: /CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Certificate serial: 019CA97CA02C6C8136E4A459EB4EC32EF243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
Manifest number: 0CAF
Signing time: Sun 01 Mar 2026 13:00:42 +0000
Manifest this update: Sun 01 Mar 2026 13:00:42 +0000
Manifest next update: Mon 02 Mar 2026 13:00:42 +0000
Files and hashes: 1: bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl (hash: 57CvyQfui8r9Hw3UwTsUlFbYUgfBRhnBuf61g6KQsP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:a0:2c:6c:81:36:e4:a4:59:eb:4e:c3:2e:f2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5700916f90983bd8e89cd05fe629ec183bfa54
Validity
Not Before: Mar 1 13:00:42 2026 GMT
Not After : Mar 2 13:00:42 2026 GMT
Subject: CN=d968206ca6fc290c4ea846d1c190b217c2537c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:74:41:72:1d:8e:d1:d9:39:03:d5:f0:bf:
9e:fe:77:75:57:5e:63:82:b5:0c:72:ac:1c:37:05:
63:3e:f2:b1:61:b5:4d:c3:0a:ea:f0:01:bf:b7:83:
7a:a6:5d:6d:0d:64:a5:b2:e5:6e:58:4b:b5:72:37:
45:26:56:c5:e2:79:06:8f:28:e1:b5:91:58:76:2a:
57:62:4b:c2:12:cf:0e:26:f6:73:15:55:63:08:e8:
d9:64:16:3f:48:5b:cb:59:49:8a:44:45:06:c3:83:
a5:4f:7b:ed:2b:27:5f:91:34:ca:8e:a6:d3:d2:72:
45:3d:eb:25:08:be:b3:44:a1:1f:18:4b:ea:60:5d:
98:09:42:46:c9:23:dd:81:d4:0f:5c:89:a2:a1:75:
6e:33:01:d6:2a:60:cc:af:85:bd:80:7e:ad:e3:f9:
51:45:89:8f:3b:8c:0d:0e:bc:99:5f:f7:b5:d3:9c:
10:c4:0d:bd:17:a1:77:1c:d7:ad:0b:1b:db:f3:1b:
64:92:f0:77:d4:d7:0a:39:44:6e:b8:15:b4:92:3f:
bb:34:11:64:f9:39:51:68:55:b9:24:d2:49:6a:4b:
4b:9a:82:fd:e7:84:be:9b:eb:d2:49:a0:e7:a1:30:
27:c3:bc:cf:39:1b:f2:3b:31:3d:cb:0f:db:60:c7:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:68:20:6C:A6:FC:29:0C:4E:A8:46:D1:C1:90:B2:17:C2:53:7C:17
X509v3 Authority Key Identifier:
keyid:6D:57:00:91:6F:90:98:3B:D8:E8:9C:D0:5F:E6:29:EC:18:3B:FA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9bfdb6-08b7-4b1d-8a88-926b34814130/1/bVcAkW-QmDvY6JzQX-Yp7Bg7-lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:70:e5:dc:c6:18:e6:82:06:d0:f7:89:87:a5:dc:cd:55:fb:
d5:97:26:55:92:77:e1:a2:af:ef:0b:f1:18:9a:81:3c:cf:95:
ff:67:8d:c3:08:ea:2c:0a:24:c1:af:38:70:83:ec:44:78:09:
46:fa:bd:f2:ba:f6:c4:8a:ef:f0:59:0a:a8:75:b5:5d:05:cb:
ed:f2:50:59:0f:37:bf:25:e1:7c:d1:6b:ea:3a:47:ff:0f:2b:
ae:33:20:e7:03:99:84:18:fe:d8:53:95:ce:c2:73:16:2d:4c:
50:82:c2:00:c0:e7:0b:eb:46:80:09:7b:d9:83:1d:8f:6b:0a:
ae:6b:cc:e7:a9:fa:b2:55:58:e8:4b:db:43:4b:db:51:d0:73:
4c:87:5a:fd:c1:c9:8c:51:3c:2c:0b:a7:5d:44:c5:4e:dd:dd:
95:dc:39:9a:1d:84:a2:69:38:f9:bf:da:38:dd:56:4e:f2:73:
db:68:b6:a7:d0:e1:1a:02:0a:79:cc:03:4f:c8:73:9e:4a:7b:
77:55:0d:b9:e4:0a:ae:43:ff:0c:af:f1:37:34:8e:68:ce:0c:
49:91:66:0d:6f:51:1b:94:f3:d4:e2:82:fe:c4:d5:73:59:1c:
0b:c4:4e:f9:bc:03:84:fa:c3:35:3a:01:15:9a:2b:0c:bf:80:
fb:8d:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:08 2026 by rpki-client