Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json)
Hash identifier: KTba1DCjAelCoY+YmX7U1dASJWR61gkD3kB0x/fhxvE=
Subject key identifier: ED:15:E4:B3:44:91:39:47:2F:82:7C:05:75:76:60:A6:33:FA:B0:0F
Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Certificate serial: 019CB09197A35712BAACF1E28178AAD48FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
Manifest number: 1604
Signing time: Mon 02 Mar 2026 22:00:57 +0000
Manifest this update: Mon 02 Mar 2026 22:00:57 +0000
Manifest next update: Tue 03 Mar 2026 22:00:57 +0000
Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: aQL4SQjUYhv2y+FV7XVXDMirPCXvf1FfnCwD7Zh8i70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:91:97:a3:57:12:ba:ac:f1:e2:81:78:aa:d4:8f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Validity
Not Before: Mar 2 22:00:57 2026 GMT
Not After : Mar 3 22:00:57 2026 GMT
Subject: CN=ed15e4b3449139472f827c05757660a633fab00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:f8:50:07:2b:d1:db:f9:a1:6b:75:f8:15:
46:52:22:00:1c:f8:5f:a0:bb:04:4b:c9:68:dc:48:
cc:4b:78:08:80:06:78:bd:bf:0f:68:52:77:20:93:
e6:6d:5e:23:8a:92:a8:de:fe:63:44:48:ff:64:ac:
75:58:a1:f8:57:a9:0e:d6:95:7f:a1:e9:ae:18:82:
b3:07:ad:fd:12:0c:fd:3c:a0:42:73:35:bf:fd:77:
a4:24:c7:cb:42:f4:46:8f:0e:2b:98:ca:f5:81:5d:
86:86:91:0d:06:71:85:af:ca:fc:05:ca:e7:d4:01:
87:bd:00:c4:4a:2f:e6:a6:5b:ff:1a:ce:60:a8:bf:
3d:d9:db:4f:55:e0:b6:98:06:50:89:77:6d:91:62:
48:c0:8f:1c:13:3e:65:2e:c0:54:1c:9d:d5:e0:b9:
a6:05:e1:4c:e5:31:3b:24:1e:56:69:2c:e3:8f:9f:
d4:00:a3:b9:15:86:ff:a0:ce:1d:5d:ee:bd:db:40:
f0:13:8e:8b:ee:f4:54:6a:2a:80:05:6b:f3:4d:ac:
57:b0:b7:8c:4c:92:ea:cf:e5:17:4c:da:22:67:13:
8f:de:9b:3c:0b:86:c9:cb:ec:4a:45:3c:20:51:84:
65:5f:f2:b7:8c:69:d0:98:56:58:9a:9e:0a:05:80:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:15:E4:B3:44:91:39:47:2F:82:7C:05:75:76:60:A6:33:FA:B0:0F
X509v3 Authority Key Identifier:
keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:69:bc:c3:f0:96:17:72:8e:a2:c2:2d:93:91:d5:74:8a:de:
6b:75:9f:7d:e0:65:2b:50:22:4a:c3:87:6e:fa:13:24:f2:26:
8a:ab:ad:bb:6d:9a:84:3b:73:7e:9d:92:33:84:97:9e:86:85:
43:c2:70:82:9e:c1:fa:b0:5f:b7:2f:bc:ba:12:6a:7e:59:a4:
d7:ff:1a:d7:03:22:67:c8:8a:04:7c:1b:03:b4:41:50:df:ff:
c1:47:bf:c4:03:bf:e1:af:88:37:d6:8c:4a:74:14:4b:14:3a:
a1:98:e4:81:09:67:b3:1c:07:5f:dd:bc:b2:8d:02:23:7a:ad:
f4:48:59:83:da:c1:36:f3:77:5f:5b:3a:0f:fc:02:83:f7:82:
d7:5d:ff:16:69:9b:d4:3e:3f:e4:c9:c9:9b:d5:36:f0:85:0c:
c4:d4:97:5b:c2:d0:de:da:1c:7e:2c:7f:ec:d3:96:e3:a6:85:
a3:a7:8b:0e:38:99:95:c6:bc:04:53:3a:18:4c:cb:69:2a:49:
1d:66:66:b0:3b:f8:c4:8a:aa:5f:95:6a:81:32:30:f6:96:81:
7e:6c:fc:a6:98:e5:4a:c2:69:52:27:6f:be:a8:ce:71:74:c8:
eb:5f:89:6b:d2:b0:49:62:ad:f7:7a:71:f7:3d:a9:eb:02:7f:
4b:ff:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:05 2026 by rpki-client