Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: bllRab5qPCbCim5MSSJUgHQYGZqoQT2uAdU6CPm7rQM=
Subject key identifier: F9:6A:9B:2E:0B:FC:7D:02:F6:0E:55:34:F4:C3:30:F3:E8:AC:CA:20
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019D99D0ED8AFDF3063D017C7A6C11CD0BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 09E0
Signing time: Fri 17 Apr 2026 05:01:39 +0000
Manifest this update: Fri 17 Apr 2026 05:01:39 +0000
Manifest next update: Sat 18 Apr 2026 05:01:39 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: Ee5OraDbOExxzY8yAzUE4Fx3ZKxOKQ7K9b65qSfHzAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ed:8a:fd:f3:06:3d:01:7c:7a:6c:11:cd:0b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Apr 17 05:01:39 2026 GMT
Not After : Apr 18 05:01:39 2026 GMT
Subject: CN=f96a9b2e0bfc7d02f60e5534f4c330f3e8acca20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:b7:eb:75:a0:e5:40:d5:e2:e8:28:08:20:
3b:6c:0a:6d:16:62:cb:b5:f0:f2:b1:ab:4e:71:c0:
e5:e1:8e:22:b3:a0:c3:0b:fd:0f:5c:41:e6:c9:66:
60:2a:af:db:1a:a0:87:02:12:65:05:bb:e8:63:28:
90:3a:cb:17:8c:74:47:79:e2:98:50:28:02:0f:02:
1c:11:16:6c:aa:65:19:52:86:c2:11:4d:52:d9:16:
17:be:71:96:81:72:02:7e:72:b4:fd:98:2f:8f:cf:
8a:26:29:3a:37:0d:c9:e0:2b:25:a9:a8:62:ea:d2:
84:5c:03:c5:98:c7:e7:d7:57:26:74:78:7e:ce:a5:
46:7c:ae:bf:28:2e:84:aa:de:66:fc:5c:6b:f0:96:
f1:98:27:bf:f7:89:27:37:28:7f:85:a6:b0:f8:c2:
9d:a3:ea:a3:18:70:ee:d5:d1:81:e2:f8:26:2d:4b:
39:85:ea:37:54:32:09:07:e0:d4:42:97:5f:13:51:
3f:40:20:43:56:c7:72:f5:65:67:54:68:43:20:3b:
f3:d4:e0:5e:dc:3f:f0:3f:12:4f:64:33:a9:d6:75:
e9:fe:4c:94:f3:9a:66:05:3c:00:85:d8:7a:bc:fa:
9a:94:6f:ab:20:af:e8:6d:20:e9:f1:1d:90:53:a2:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:9B:2E:0B:FC:7D:02:F6:0E:55:34:F4:C3:30:F3:E8:AC:CA:20
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f4:95:78:9f:c3:80:a1:dd:24:4e:d8:16:58:1b:21:75:68:
b4:2f:29:77:0b:c9:60:1b:d2:bb:cd:3e:a0:ae:eb:83:f7:3f:
60:b6:51:05:3b:de:b2:2f:f7:ba:84:18:d6:15:f8:91:e3:de:
d0:99:80:aa:5e:00:f5:4c:db:cc:d5:b0:3d:ca:7f:8b:ec:66:
fd:71:a4:14:9b:aa:7c:5e:e4:f4:0e:29:78:88:f0:5f:f9:f3:
b3:cc:cc:7d:4f:40:21:6a:a5:76:93:66:fe:a1:e9:67:85:31:
c9:24:55:22:1d:f1:dd:53:a8:00:b2:d1:99:d8:54:bc:5f:6c:
f9:d8:11:ed:ef:fd:72:49:66:c6:85:c2:d6:6c:b0:9d:f4:0c:
66:91:58:ee:3c:16:83:f0:fb:a2:c7:3f:f7:4e:e0:d6:00:2c:
75:ba:c8:60:18:43:30:93:b2:e5:24:9c:6a:2e:af:45:2b:d7:
c0:8f:1a:d5:ac:72:b9:ad:8d:42:ca:ba:99:ef:e4:2d:f9:f3:
33:7b:f8:aa:3f:cd:b5:ea:91:6e:ad:db:77:60:52:4a:ad:32:
38:42:d6:4b:0b:75:e6:ac:76:7f:5b:80:b7:db:14:ab:bb:33:
81:86:35:34:aa:de:3c:68:99:2f:12:74:4a:95:dc:f7:2e:c8:
32:7c:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:24 2026 by rpki-client