Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: 4a8RpzOcx5JxiVhBL/YD1NOTzZtCGx3KNmFISJ3d2dg=
Subject key identifier: 2C:3F:FD:23:6C:95:45:88:DB:B7:4B:70:D8:D8:85:19:52:DA:84:D5
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 019D9B50EB1A864E4DEB4D3055592B1321FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 1513
Signing time: Fri 17 Apr 2026 12:01:04 +0000
Manifest this update: Fri 17 Apr 2026 12:01:04 +0000
Manifest next update: Sat 18 Apr 2026 12:01:04 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: sXU+8UpF5GQPA1+10GOI1078/fb4LVi3fi0sCD7FJbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:eb:1a:86:4e:4d:eb:4d:30:55:59:2b:13:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Apr 17 12:01:04 2026 GMT
Not After : Apr 18 12:01:04 2026 GMT
Subject: CN=2c3ffd236c954588dbb74b70d8d8851952da84d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:66:1b:12:20:4e:5d:c0:dc:77:7b:6c:c9:
e4:d6:ea:30:3f:61:02:8c:4a:57:44:a8:85:af:48:
5a:67:32:84:81:f5:23:b1:a9:b2:87:15:84:0b:c7:
4b:a8:d2:90:4d:0d:55:8d:31:c7:be:f2:43:c1:63:
5e:a5:69:0f:63:96:38:af:de:26:36:89:81:c7:fb:
c3:ae:fb:f9:f7:e2:0e:39:ce:d3:1f:8b:79:2b:bc:
98:14:82:fd:54:30:79:d0:cf:89:25:74:a0:11:0d:
0a:9d:40:eb:5a:c4:8c:51:9b:38:ee:17:4b:a1:a9:
25:e8:ad:1a:8b:b4:d3:10:e6:c5:6b:af:b9:c3:45:
ec:ab:f0:dc:d9:6b:ad:44:ac:e5:13:f4:c5:f7:cc:
8f:a7:c9:6c:f5:c8:af:c9:1b:58:c2:82:bb:e3:e8:
1f:bd:ad:98:99:b3:78:06:71:d7:97:92:e3:79:4d:
8a:a0:f1:19:41:82:a1:66:9f:ca:96:5e:a1:3d:29:
a7:a2:23:25:49:39:18:ae:05:6a:5b:5e:bc:f1:9e:
8b:d1:ab:db:b8:ba:ad:78:1c:bc:fa:d4:ab:18:c7:
5f:bc:96:b8:a7:32:30:54:03:5d:61:42:56:3f:56:
e5:90:96:9b:43:77:6b:d3:7e:b0:e5:86:74:cd:74:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:FD:23:6C:95:45:88:DB:B7:4B:70:D8:D8:85:19:52:DA:84:D5
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d0:36:b7:5c:79:97:10:81:71:d2:be:a0:6b:8b:d0:f7:68:
54:77:46:5e:e5:28:30:04:51:4b:eb:ed:b1:04:97:a9:19:74:
ec:c0:2f:36:f8:eb:e1:04:6c:f0:5c:a1:b5:09:25:ca:9c:cc:
be:d8:18:bc:35:59:ae:d1:8b:e4:1f:cf:b8:00:96:db:ba:70:
67:89:f1:d8:2a:e0:89:d8:31:6a:e7:29:c3:97:34:28:b0:e8:
8d:81:c1:90:cb:93:87:a7:5b:2a:08:b4:5f:5c:7a:33:47:14:
8c:e1:53:a6:3f:29:a3:36:0d:5f:f8:53:09:15:f9:85:9c:64:
8e:cb:3a:a3:a1:af:8a:76:fa:89:b0:55:d7:5c:2b:9c:23:f6:
97:18:cb:55:74:96:9b:90:b8:5d:e8:ca:83:06:24:26:03:59:
e0:47:25:7f:70:89:3e:11:60:71:1e:a2:2e:e5:3b:cc:2d:61:
1d:9d:02:18:1c:0e:ac:69:a3:f2:d4:bc:cc:99:c6:f9:d2:b5:
4f:80:a8:ab:8a:e7:29:c7:ff:55:70:8a:8c:b0:97:4a:58:be:
07:38:73:db:86:20:b6:aa:3c:fc:43:69:5f:dd:85:27:dd:01:
e4:02:b3:6b:de:8c:7e:db:97:eb:48:83:dc:d5:29:1b:f5:42:
51:af:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:44 2026 by rpki-client