Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File: vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier: FGvBwWLepssX9sqGI1qyE5VJ/BLPDbxUT1pur+vS7NM=
Subject key identifier: C2:EF:F7:C9:87:B7:9D:41:6C:0F:EC:E5:0C:60:1A:06:0D:95:CF:64
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer: /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial: 019D98F44AAAAF3BFB635458A6B944AC7CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number: 0840
Signing time: Fri 17 Apr 2026 01:00:39 +0000
Manifest this update: Fri 17 Apr 2026 01:00:39 +0000
Manifest next update: Sat 18 Apr 2026 01:00:39 +0000
Files and hashes: 1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: H9b1341nqlcEtpdXym7waV7bJIhKAi4gyPqeHWAjZq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4a:aa:af:3b:fb:63:54:58:a6:b9:44:ac:7c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Validity
Not Before: Apr 17 01:00:39 2026 GMT
Not After : Apr 18 01:00:39 2026 GMT
Subject: CN=c2eff7c987b79d416c0fece50c601a060d95cf64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:cc:89:f8:a3:02:95:a7:2f:ab:62:0c:17:
97:34:75:4b:ab:37:d6:f8:1d:88:ae:d5:16:d0:34:
fc:23:2c:07:86:27:9a:93:64:89:16:ab:c5:d2:45:
88:06:6a:d3:0b:38:21:8d:dd:90:a0:1d:59:82:20:
e7:e3:68:8e:a2:d4:8f:72:ca:a8:7d:eb:28:43:57:
f8:8d:e9:58:85:a5:81:87:2d:c6:26:6b:1a:13:e8:
10:e9:15:0c:28:a5:1d:7f:e3:b8:10:93:6b:fd:88:
0a:aa:dc:f8:94:82:55:34:4d:36:62:bf:e0:18:d2:
df:27:3a:b6:4b:3c:6c:de:33:6b:03:e4:db:07:92:
04:6c:a1:88:42:8d:7a:c5:25:cb:35:a4:b4:77:66:
b6:16:da:8d:40:48:e6:3d:5b:32:9e:98:36:49:5e:
3b:cf:b9:03:fc:61:ac:69:d7:66:59:91:3c:d3:03:
44:51:97:4c:81:62:b7:82:59:a0:07:05:3a:85:2d:
fc:ae:81:58:f4:da:1b:82:64:2b:25:81:24:ef:fb:
43:ee:2c:19:5b:a4:a9:22:a2:0a:8f:ac:fb:0e:a4:
89:4c:14:13:cc:76:d6:52:ce:bb:d4:ab:3a:a6:29:
63:84:d5:08:9a:d6:6a:4b:30:bf:72:ce:04:4a:7a:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:F7:C9:87:B7:9D:41:6C:0F:EC:E5:0C:60:1A:06:0D:95:CF:64
X509v3 Authority Key Identifier:
keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c2:9b:58:77:11:df:27:37:af:75:d0:bd:b3:dd:b1:eb:7e:
44:2d:be:94:72:44:d1:98:c5:dc:27:ef:6d:86:0e:d1:95:88:
fb:b3:14:54:4e:c4:84:30:46:cf:e7:35:80:ab:55:6c:6c:14:
c7:85:27:8d:d5:68:6e:b3:a8:37:e2:08:e0:79:32:ca:d2:9b:
14:93:d0:6f:50:d9:bf:00:bb:bb:9c:23:e2:f6:c1:8a:cb:e9:
d9:7f:d1:9f:cb:51:4f:86:ca:a9:da:5c:7d:68:77:5f:86:d4:
fb:14:b9:f9:93:ce:91:71:87:1b:b6:9d:a3:5e:c2:28:57:8b:
f2:48:98:3b:93:ec:83:67:6c:e9:59:bf:9c:f7:08:f4:97:69:
3d:c3:ac:7a:8a:12:78:d7:20:44:7d:1b:64:36:35:de:f0:70:
f2:3b:fc:6f:e4:b2:c4:7d:66:37:ed:51:63:fe:79:fe:e7:8a:
84:5f:0e:cd:09:bb:ee:c9:ac:62:31:35:d7:2b:8d:a8:8b:3c:
34:fd:b6:17:be:8e:be:0f:e4:a6:1a:5c:4e:46:7b:99:d2:77:
83:ab:84:16:31:f2:90:51:8b:bb:c8:9f:1e:c4:43:18:c8:a5:
a8:ca:29:f4:d5:10:43:ca:ee:d6:38:fb:56:72:20:bf:a6:42:
dc:f7:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:14 2026 by rpki-client