Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
File: v0fz41wqjMrpbOFyEPkTq-fpI_g.mft (raw, json)
Hash identifier: /Y5v/NXdjXcNngrHnoMntVnC22htTKi98BBMuVkLkcY=
Subject key identifier: A6:78:AA:EE:CF:9A:2E:73:59:49:2D:8F:2E:8E:98:1F:1F:87:CF:4A
Authority key identifier: BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
Certificate issuer: /CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Certificate serial: 019CAE354A57AEB24A7C419D29DA81690954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
Manifest number: 1652
Signing time: Mon 02 Mar 2026 11:00:53 +0000
Manifest this update: Mon 02 Mar 2026 11:00:53 +0000
Manifest next update: Tue 03 Mar 2026 11:00:53 +0000
Files and hashes: 1: v0fz41wqjMrpbOFyEPkTq-fpI_g.crl (hash: Ei/ndaciirtvGuNiJZKn1l6VIcIbOeK45iEsdv1eWBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:4a:57:ae:b2:4a:7c:41:9d:29:da:81:69:09:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf47f3e35c2a8ccae96ce17210f913abe7e923f8
Validity
Not Before: Mar 2 11:00:53 2026 GMT
Not After : Mar 3 11:00:53 2026 GMT
Subject: CN=a678aaeecf9a2e7359492d8f2e8e981f1f87cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:44:ec:d0:3f:e1:5c:76:a8:81:98:d1:7c:
8c:63:60:d8:5a:34:27:04:ac:02:92:8b:3a:98:85:
04:27:5d:cc:67:15:26:14:5e:e3:65:6a:8c:e1:03:
95:49:5d:5b:4f:ae:98:57:cd:5e:46:62:27:57:ab:
f9:09:da:9b:03:81:8e:0f:56:35:55:49:96:f9:8b:
af:98:cc:89:08:08:11:1d:c7:21:8e:26:7c:60:6a:
44:09:81:fa:43:c0:7f:b3:1c:7f:b6:08:8c:b6:2f:
0c:f4:5e:47:a3:50:97:88:e8:28:63:71:41:3a:59:
39:84:12:c6:14:06:54:eb:58:9d:82:ed:26:26:72:
c6:43:38:2b:dd:e2:2a:e5:7b:f5:82:17:86:2a:77:
5d:37:37:36:d0:8c:89:4b:74:21:08:af:09:e3:9b:
9f:8e:6a:c5:d9:5f:89:20:98:08:08:78:78:69:3b:
73:ea:46:20:d1:5c:42:50:8e:03:13:a9:fa:94:6c:
a9:f8:e8:19:c2:1a:d5:1e:b3:41:b3:f0:f6:ea:7d:
60:ae:18:7a:a7:38:ca:a4:b3:24:b7:be:3a:4f:e9:
da:fc:d9:a0:58:41:48:2c:be:fc:88:12:66:6d:7f:
ac:5b:86:a8:4b:f6:c9:02:b9:3e:c1:bb:29:7e:40:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:AA:EE:CF:9A:2E:73:59:49:2D:8F:2E:8E:98:1F:1F:87:CF:4A
X509v3 Authority Key Identifier:
keyid:BF:47:F3:E3:5C:2A:8C:CA:E9:6C:E1:72:10:F9:13:AB:E7:E9:23:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0fz41wqjMrpbOFyEPkTq-fpI_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c77188-cf55-48f0-92b5-aa753b640078/1/v0fz41wqjMrpbOFyEPkTq-fpI_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:06:99:ec:ab:79:12:db:04:7f:e0:f3:88:a8:94:39:7e:f3:
ca:32:c2:46:9b:eb:2b:60:e8:6f:1e:eb:2a:84:ab:98:e5:2f:
9d:66:79:61:92:a2:bb:4d:9d:50:54:f9:6b:bf:bd:b3:46:4d:
3b:a2:f5:f1:f8:f3:50:ee:74:50:8d:10:ba:8f:4b:89:e6:ef:
e8:5d:77:fc:86:5e:63:24:c0:5f:c6:bd:8e:a5:42:20:25:fe:
0c:b4:3f:b4:b4:a6:a7:4b:e4:49:d9:75:a6:4d:05:16:ba:e2:
8d:73:ce:83:b7:18:03:82:4e:71:72:1a:e0:a6:4c:68:44:55:
58:bf:f5:e5:3c:78:a2:7b:a2:e4:81:16:eb:99:a0:33:a4:10:
03:18:58:c8:b8:e9:6b:07:c2:de:33:f3:8d:65:40:22:41:a2:
eb:bb:ae:cd:5d:26:81:c5:04:98:fa:44:7e:bb:3b:5b:b0:88:
5d:4b:34:8a:3a:44:e7:52:ae:fc:e6:72:b8:9d:16:b3:2e:42:
fb:6b:7d:3d:42:bd:ab:cd:e4:47:97:52:a5:c3:9d:f9:79:8d:
30:4d:bf:35:28:17:f6:62:d7:bd:e6:f5:8a:97:fa:70:33:4c:
79:72:6c:7a:5b:ce:00:f1:e2:c8:59:96:c1:d6:8b:9a:b4:23:
3b:48:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:25 2026 by rpki-client