Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: vod5kJEcPgdRQu8gcC1/B9eR202PFmlRduAml2p2HPE=
Subject key identifier: 02:F1:74:31:A9:20:CD:28:46:EE:AB:44:CE:DD:31:0E:4D:28:3C:C9
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 019CABD934294E02CEBA9272D0CC2521408E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: Y+FX+VUJ+BSCNjTYw8D3dO5kscSzmZMjtn8wvqutDM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:34:29:4e:02:ce:ba:92:72:d0:cc:25:21:40:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=02f17431a920cd2846eeab44cedd310e4d283cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:03:cf:58:32:f9:a5:9d:69:46:d5:af:6e:
90:46:99:8c:92:bb:30:e6:b3:f6:56:ac:50:1c:8a:
97:cb:c1:14:f3:42:38:90:87:bb:29:e7:d7:12:ca:
94:fb:3c:ed:2d:f6:3b:1a:28:88:7b:b6:6d:92:fa:
08:29:2e:9f:6a:1f:17:b1:0d:a6:2c:89:03:39:04:
95:b7:82:0d:34:51:b1:14:1f:27:b2:2e:ef:e2:23:
fa:e7:4d:de:66:1e:5d:46:57:58:fb:9b:cc:5f:97:
ac:62:f2:42:dc:23:a2:0a:2e:fc:88:23:49:b6:36:
19:3f:06:57:1a:91:93:3f:a5:95:f6:0b:a8:b7:ec:
82:1e:65:50:2d:77:6c:e3:1a:9b:8b:63:6d:4d:f9:
91:91:23:85:ba:1b:1e:1a:19:da:bc:22:63:6c:cf:
17:80:a1:e2:c6:02:ed:eb:f8:c7:50:34:88:61:cf:
2f:0b:7d:41:9a:f5:ca:b0:85:bb:ff:5e:55:23:f0:
11:f0:3b:63:32:50:30:9f:b3:4a:0a:7e:46:f5:0a:
72:dd:d4:e0:e8:7f:fe:92:4f:21:57:88:3b:77:dc:
8c:a8:9a:f8:2c:30:c4:fb:48:b6:a4:93:c4:3d:bf:
b0:be:ac:ea:05:7d:92:fc:c5:83:9a:d4:05:dd:42:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:74:31:A9:20:CD:28:46:EE:AB:44:CE:DD:31:0E:4D:28:3C:C9
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:52:2c:6b:3c:ea:44:de:2d:22:9e:55:17:26:2a:31:0b:57:
5c:3d:60:18:69:1c:3b:0a:76:ff:ee:66:7b:af:3f:7b:04:71:
ea:52:ec:16:4c:d7:f1:a8:26:0a:7e:e8:ae:93:31:84:68:41:
8d:59:34:da:c9:b6:ad:72:73:0b:44:03:f3:76:f4:00:20:eb:
f6:dd:91:b0:07:15:04:f5:19:0e:54:e2:ec:39:a1:ac:b1:48:
eb:cf:03:ae:e1:b5:f1:25:2a:8a:65:ac:92:5f:c3:27:bc:83:
bc:bc:8d:49:a2:7c:d1:5b:9c:86:fa:4a:fe:d9:1b:93:40:b9:
cd:83:63:56:9a:84:1c:7d:7e:af:d7:94:cc:32:5c:d6:cf:6a:
31:87:3d:9b:82:c8:19:fb:10:86:9d:e1:35:57:69:ba:f8:d9:
df:10:22:21:84:df:8e:45:18:c2:57:00:bb:d0:b1:94:de:f1:
2f:3d:13:ec:08:7c:28:d9:7e:a7:86:60:00:07:b6:4c:37:79:
62:ff:2f:cb:eb:ba:d2:22:05:fe:2e:c5:76:37:9b:76:49:8d:
05:b4:86:83:4e:bc:3b:f5:be:f0:1e:86:2d:b5:42:3f:f7:2e:
27:2c:f4:79:79:d0:b5:a3:37:69:2c:4b:de:20:60:92:b0:9c:
76:0c:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:00 2026 by rpki-client