Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
File: Vr293X0J23mHNBsRBSMdQMfIorA.mft (raw, json)
Hash identifier: rrg2tpeqXPR7L1Zpm7Dsu4BsCRRfSrE6OXk4ER2fA28=
Subject key identifier: 99:0D:12:59:1C:FA:7D:3A:0E:87:57:68:87:4D:21:9B:A6:62:B9:63
Authority key identifier: 56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
Certificate issuer: /CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Certificate serial: 019D99999AFCD2172727D360A78F95317099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
Manifest number: 0A23
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: Vr293X0J23mHNBsRBSMdQMfIorA.crl (hash: IVvtvHaSp9NhxRlBMyxPAbfMqsE/0pfJoQrFy1/s51A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9a:fc:d2:17:27:27:d3:60:a7:8f:95:31:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bdbddd7d09db7987341b1105231d40c7c8a2b0
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=990d12591cfa7d3a0e875768874d219ba662b963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:13:dc:72:d0:71:28:a1:e3:11:70:fb:7f:
d1:b8:19:63:dd:76:d7:dc:64:71:56:84:f3:97:30:
ef:5b:a9:7e:c7:56:31:25:f0:a2:84:4a:31:4e:2a:
6d:cd:77:0c:6a:10:fe:8e:8d:e1:09:43:54:55:7c:
45:78:ae:c0:0c:d4:e7:15:55:23:ae:bd:1d:67:69:
f6:b0:28:20:b2:34:59:a9:5a:de:c3:bc:b4:82:8b:
7a:60:1b:e0:be:77:92:e9:ec:c1:12:ec:d3:5d:d4:
87:68:34:13:a1:27:34:92:d0:99:1e:44:7e:cb:11:
10:cd:1a:27:29:89:61:9a:87:8f:eb:e0:c3:a9:81:
74:f0:2e:07:7a:34:04:73:d0:c3:4e:16:67:00:9f:
76:93:16:00:85:4b:0f:1e:e1:ec:94:bc:7e:00:55:
82:c7:b8:43:3e:9d:30:a1:0f:95:30:54:0e:3b:cb:
f0:f8:a4:2d:5d:45:60:24:e0:b9:61:a2:bb:0e:bb:
22:da:72:02:0a:b1:98:e2:4f:91:d8:62:fa:e6:bb:
b3:90:e9:89:29:8e:24:24:05:e7:69:dd:d9:f2:00:
85:ae:b2:a2:63:b3:9f:2d:0a:eb:ee:a3:1b:99:8c:
5f:d9:1c:c1:2f:d5:db:5d:41:67:70:f4:d9:f2:95:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:12:59:1C:FA:7D:3A:0E:87:57:68:87:4D:21:9B:A6:62:B9:63
X509v3 Authority Key Identifier:
keyid:56:BD:BD:DD:7D:09:DB:79:87:34:1B:11:05:23:1D:40:C7:C8:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr293X0J23mHNBsRBSMdQMfIorA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b1035d-5006-40dd-90b5-e909a49e1b71/1/Vr293X0J23mHNBsRBSMdQMfIorA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e8:15:f7:f3:33:33:dd:ca:49:e3:31:a5:c1:7f:9b:e0:c8:
41:0f:5d:37:7c:42:ba:e8:92:b8:e7:3d:f5:6a:cc:1b:4d:b6:
a6:67:fb:b5:f9:6c:9e:e3:af:2f:57:e4:ba:dc:82:c2:27:0a:
00:48:a8:57:7e:1f:27:05:31:16:c0:a2:4f:f4:16:3e:4e:eb:
14:05:86:6e:e3:12:f9:1a:57:87:50:54:29:03:52:58:75:78:
4c:90:32:46:92:e5:7b:c0:37:f6:96:78:e9:07:00:4b:40:75:
79:15:31:de:50:1a:62:3f:3b:f2:14:37:ed:61:f9:3a:e2:d4:
7e:cb:c1:92:96:fc:ed:98:52:10:8a:ea:db:31:d6:ba:94:8b:
ad:4c:3e:c7:1d:75:ec:d3:f9:59:93:60:6a:89:78:e0:d5:60:
07:5e:3d:f3:d6:81:a7:d0:e2:33:53:ad:1b:f5:b5:e3:43:e6:
13:f3:5f:ef:c9:78:1d:e2:f4:4a:25:b7:e9:f0:49:63:b7:2e:
a9:08:a0:3c:bd:49:51:9a:2a:4b:67:34:9d:00:3c:38:8a:50:
8d:86:22:e1:97:7f:f8:49:a8:f3:97:ab:af:4b:73:5e:0e:de:
28:8d:7f:5a:eb:b6:fc:29:90:78:6e:a5:4a:da:2e:9c:49:e8:
c1:07:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:22 2026 by rpki-client