Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: 34fGqYOnBo7MKDVgP5tmmFToOqXjNBLYJqyKv5r2o/c=
Subject key identifier: F3:C7:52:25:71:84:84:64:15:83:0A:FC:7E:A7:2B:6A:9F:9E:E5:65
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 019CABD984C326F0A3AB4D08330A20A03E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 1565
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: ycaLZ8MEoypysW5DcWAVIerORh3P2apncFtMQrWfERI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:84:c3:26:f0:a3:ab:4d:08:33:0a:20:a0:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=f3c752257184846415830afc7ea72b6a9f9ee565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:66:61:dc:10:89:3f:c9:e4:3a:f6:70:2b:
6f:bc:22:64:ef:73:0c:8e:03:06:1a:5d:d6:f5:1b:
79:35:6f:e7:7f:40:1b:0f:60:92:ec:cb:1b:77:4d:
28:64:ff:1a:64:26:5f:ee:d8:33:88:dd:5a:2c:6d:
60:cb:47:0c:d1:f7:4e:aa:0e:61:b0:a0:c0:10:6c:
c6:60:76:03:98:ba:89:cc:91:cf:77:82:df:b0:1a:
b6:64:de:57:e5:ed:dc:69:91:aa:9d:4a:7f:9a:7c:
4c:9a:4c:6e:ca:db:f4:2e:9f:76:e7:3f:60:66:a3:
6a:80:a6:f8:d7:4c:b7:17:47:ae:47:b3:1c:9c:89:
e2:fc:c9:d1:94:ea:ae:7e:7e:ab:53:e7:6e:45:6a:
f4:5d:93:c3:9e:eb:90:b2:01:65:00:5c:af:4b:54:
53:fb:8f:67:ac:79:25:e6:ff:5b:dd:fe:32:88:55:
5a:06:04:a9:df:22:04:bd:5c:28:1d:28:cd:bb:fc:
08:36:39:35:a3:9a:90:a4:a7:31:69:a2:79:a3:11:
0c:4a:37:99:86:59:3b:b1:a6:92:84:9a:7f:85:93:
d7:2b:f8:69:67:cc:e1:04:9d:b0:c4:82:98:b9:6e:
94:5a:6b:6c:20:0f:cd:08:90:fd:83:4a:d0:a4:a6:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:52:25:71:84:84:64:15:83:0A:FC:7E:A7:2B:6A:9F:9E:E5:65
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:19:24:76:e6:70:41:d3:cd:5e:8a:f8:e9:d5:77:24:4d:21:
8c:fa:f5:98:d0:a0:85:b2:57:4d:ee:f3:79:9d:91:8d:41:cf:
be:02:0c:94:2e:42:b5:9e:16:b1:92:34:03:c9:44:0b:40:71:
38:27:70:9b:07:fc:08:c2:86:61:69:ec:21:b0:b5:fb:f4:24:
cb:c4:10:a8:05:26:9a:15:85:6d:57:61:cb:55:7d:f8:fa:25:
58:34:f4:03:f9:49:ab:4d:43:dc:45:c1:f3:df:48:20:2c:5b:
8a:09:ab:e0:2a:58:2a:48:cb:9c:66:08:45:a6:9a:c3:e2:59:
65:9e:b5:4f:3c:77:41:2c:b2:3d:a8:2a:46:bf:b8:24:25:ef:
e0:eb:8b:fb:24:1b:2b:39:11:26:2d:19:47:3a:20:42:57:78:
b2:1a:07:15:ca:4d:5a:04:ec:d4:e8:aa:72:37:da:7b:59:14:
40:dd:0b:53:65:56:f8:1e:8e:1a:0f:26:77:6c:4a:00:cc:fa:
51:aa:ca:07:ee:e1:91:28:cc:9c:88:e7:fb:99:9b:61:a6:da:
3c:e8:e3:5e:73:bd:44:10:f0:e9:e5:03:51:ce:fd:93:13:66:
55:f6:a8:40:78:95:ae:37:73:92:9a:30:d5:c3:9b:cd:3c:0a:
38:8d:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:45 2026 by rpki-client