Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
File: V3l3onVhz5BYpS5GDJSZSAVb3T0.mft (raw, json)
Hash identifier: Jn2i0400rLEhuX18PmexvlUkhUBYoFEyBB//nDVXbVc=
Subject key identifier: 23:1F:D6:C2:CE:9F:98:F6:8A:F8:87:8F:4B:E1:5E:83:6C:D2:47:AE
Authority key identifier: 57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
Certificate issuer: /CN=577977a27561cf9058a52e460c949948055bdd3d
Certificate serial: 019D98F458EBEA6C0AAD9AFAF69D92135F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
Manifest number: 0ACF
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: V3l3onVhz5BYpS5GDJSZSAVb3T0.crl (hash: Qvp8W9GMYc5u8BWk8DfWoxy7xGMp/vB5r3Fiu1O78hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:58:eb:ea:6c:0a:ad:9a:fa:f6:9d:92:13:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577977a27561cf9058a52e460c949948055bdd3d
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=231fd6c2ce9f98f68af8878f4be15e836cd247ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:f6:d3:75:45:4b:89:63:1d:74:d0:93:82:
76:cf:7f:79:f5:86:59:c0:54:5e:23:f4:e0:f3:3a:
2f:8b:34:44:dd:b0:e2:87:f7:1d:1d:b2:7c:a5:0a:
c2:29:de:d3:db:d7:69:a0:47:5c:dd:a0:b8:9c:30:
f4:31:d0:d1:74:ed:8a:68:11:f0:70:0c:15:9f:b8:
a1:79:1d:15:f8:f0:fb:8e:b6:f7:e7:a3:ba:07:88:
4f:e7:48:c7:30:13:0c:6f:cd:0f:4e:da:e4:0a:05:
58:9a:47:e1:7f:7c:59:ee:d0:9f:9b:30:2e:48:17:
7a:f9:87:c5:a3:36:a1:f0:c7:17:fe:47:02:ef:06:
18:2a:be:1f:48:d0:dc:9d:9f:4c:ef:d8:cf:da:db:
7e:c4:2c:e2:f6:28:67:9d:be:03:11:f2:0e:61:62:
ed:86:1e:10:0b:97:4c:e4:94:60:7c:3e:ff:45:69:
79:4f:8f:27:e4:19:e8:80:b3:20:1e:b7:73:46:01:
90:c9:6d:4d:20:a2:4d:4e:50:9e:6c:af:82:b6:8d:
f2:5f:15:f6:be:59:f8:20:5b:98:bb:9a:cd:fa:97:
98:90:ce:bd:88:2f:71:fa:72:ae:46:2c:05:14:8e:
8b:12:14:8c:44:0c:b0:68:e2:01:b0:bc:75:89:8d:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:D6:C2:CE:9F:98:F6:8A:F8:87:8F:4B:E1:5E:83:6C:D2:47:AE
X509v3 Authority Key Identifier:
keyid:57:79:77:A2:75:61:CF:90:58:A5:2E:46:0C:94:99:48:05:5B:DD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3l3onVhz5BYpS5GDJSZSAVb3T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/de78c9-a5fa-4385-9edf-54f72d7f5c20/1/V3l3onVhz5BYpS5GDJSZSAVb3T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:74:98:9b:6b:c1:50:8a:75:7e:e3:63:7c:16:0a:49:ca:6f:
d9:b6:b9:d3:e1:ab:c7:d7:df:90:8d:2c:1b:dd:15:79:ea:8c:
c2:dd:e1:75:c9:ff:d0:27:2a:1f:9a:71:65:8f:1b:ef:74:06:
e1:25:21:36:79:50:e3:76:cb:ff:b7:88:6e:89:af:d7:61:4b:
90:b8:10:dc:23:6f:41:9e:9d:1a:19:ed:9c:01:73:e6:d9:cb:
76:ab:90:ea:af:c2:27:ce:52:85:06:1a:10:17:9d:26:d0:2e:
20:1e:87:b1:3d:28:6d:f2:67:d4:6c:a6:ef:c2:b6:6d:15:a9:
09:29:d9:c6:47:d4:8f:a0:1b:fe:0e:0a:98:30:0e:39:7e:96:
1f:12:6b:20:9e:0b:6f:df:8a:e5:b9:21:20:26:7f:c2:77:4f:
d6:a5:80:d8:7f:e5:1e:af:da:00:e4:37:23:2a:ba:61:62:38:
bc:ac:b2:a9:2c:44:6e:2c:df:41:fd:ba:f3:31:94:62:de:8f:
d0:8f:14:0c:46:ed:a7:33:c3:83:85:1d:16:53:5e:af:af:c2:
e5:e2:72:7e:90:34:d7:0c:b4:84:06:7f:c5:b1:c8:3d:56:7d:
bc:d0:d1:93:d3:e3:cd:41:2e:82:d9:e6:ae:10:df:0f:c7:2e:
fb:01:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:57 2026 by rpki-client