Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: XreJjzqCQPso2jkOU/Jc3mSORjZ8RKL0r1Vs/Mo8PqU=
Subject key identifier: 3D:7A:80:BA:D5:C3:D4:FC:F2:9B:7A:E8:6B:E9:51:DF:71:5F:52:60
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 019D99627973772DCA2D2EBA4D84440E51C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 15E0
Signing time: Fri 17 Apr 2026 03:01:00 +0000
Manifest this update: Fri 17 Apr 2026 03:01:00 +0000
Manifest next update: Sat 18 Apr 2026 03:01:00 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: zcqB4ke3DrcZnrwh+TmWgzgkeYzZubQJHDd5pfCKjtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:79:73:77:2d:ca:2d:2e:ba:4d:84:44:0e:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Apr 17 03:01:00 2026 GMT
Not After : Apr 18 03:01:00 2026 GMT
Subject: CN=3d7a80bad5c3d4fcf29b7ae86be951df715f5260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:77:23:fb:79:53:2d:1b:50:20:bf:80:3d:f8:
1c:79:f1:fe:0e:f4:71:07:07:dd:a0:61:93:c1:97:
ec:67:19:53:5b:88:e0:35:c6:14:88:66:0b:75:3b:
84:9d:c4:8c:cc:97:38:22:72:6a:6c:f4:57:57:e6:
96:3c:63:b0:47:80:2b:ec:16:43:58:d2:17:24:48:
1f:26:66:87:37:3d:fc:89:51:56:a2:69:38:2b:5f:
f9:19:92:8d:e0:fa:a3:e6:19:62:c4:80:ef:15:77:
4a:01:83:06:65:77:4a:20:85:db:0b:3e:36:5e:5e:
28:f0:e8:f7:cc:c9:7a:cf:c1:c7:64:f3:69:10:ac:
58:e6:6b:3a:3f:7a:e6:03:6b:c7:0d:e3:ef:86:c6:
99:30:b2:77:f2:0d:5d:22:ed:06:8b:e7:2a:96:1c:
c2:07:da:9a:3a:2f:f1:97:87:4a:2a:61:73:cb:5b:
70:26:24:40:50:90:b4:a2:d0:6f:2d:84:c6:a8:cc:
e7:56:aa:d7:70:20:03:38:94:37:26:0b:c4:4f:49:
e2:93:fd:50:b5:2d:72:61:c0:39:fa:65:71:e5:df:
56:3d:7e:29:87:1f:14:2c:fd:56:5e:fd:b7:46:f5:
87:a6:8e:65:76:42:db:6f:9a:46:b3:fb:d1:84:5a:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7A:80:BA:D5:C3:D4:FC:F2:9B:7A:E8:6B:E9:51:DF:71:5F:52:60
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:27:6d:93:bf:33:53:0a:80:08:03:b1:0b:05:8f:ad:f9:d7:
55:22:65:44:68:d8:99:6b:55:27:f0:18:8f:a3:00:df:1c:df:
22:1d:1b:b1:6f:74:46:45:3b:7e:ce:ae:7e:b5:c4:36:7f:80:
a0:cb:bf:a1:75:5c:e0:8c:f8:2c:8d:d2:f6:c1:50:b2:1a:5b:
d1:e1:43:c9:6d:b9:a1:f7:99:06:6f:b8:a5:65:b5:ea:d3:81:
24:59:26:66:5e:6e:9b:9a:40:a8:86:39:5e:fc:4e:35:26:8b:
d2:03:cd:c6:a2:36:e2:df:23:50:3a:1a:e0:a0:b8:13:c1:a5:
8b:3f:5e:56:cf:ae:b4:33:e2:9b:b5:d5:d9:2e:d2:c5:fe:f1:
1f:a7:cf:9a:9f:2f:8e:a9:5d:29:46:83:9f:11:46:ea:ee:bc:
ad:67:49:09:66:8d:df:dd:ea:5b:03:b6:18:45:c0:f1:61:6c:
47:c0:e0:bc:cf:92:95:3a:72:a2:03:e5:d6:da:d8:b6:55:77:
fa:3d:7a:b8:00:0f:28:a2:12:7a:33:14:be:46:9a:f9:9e:2e:
6d:41:2f:10:a7:7a:d5:4b:e3:9f:5d:2c:f3:e8:82:b5:db:08:
27:0d:b6:45:2f:a1:c4:b3:36:18:82:5b:c7:44:e9:b9:63:15:
b4:a8:d2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:01 2026 by rpki-client