Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
File: VFhKIZ9vUGbYSO0quWTaiWbUCio.mft (raw, json)
Hash identifier: wM71LycVX8e4vjA0vef7lUM1vQkN1Mf1KpiJDACISDU=
Subject key identifier: 82:08:4D:1C:26:FE:C7:19:18:83:C7:B2:6C:B7:1E:AA:6B:1F:0E:3C
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 019D98509EC957D173846DC279AC0304FF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 22:01:53 +0000
Manifest this update: Thu 16 Apr 2026 22:01:53 +0000
Manifest next update: Fri 17 Apr 2026 22:01:53 +0000
Files and hashes: 1: VFhKIZ9vUGbYSO0quWTaiWbUCio.crl (hash: i+0O++vRhqqYWDk+Owod2XVC9EHMITuU68QX44iPJhU=)
2: VdNiyBTNLP0hxdVWgblf808PR6Q.roa (hash: b0TF5folKN7zXjRCmCKkB9rk4cn3L/tdaHd7F0edmTA=)
3: _Ly8wabjTR1vhLqLPK6iVz33UEY.roa (hash: wpw6THVmXZJSjX+YaGWEWwzdrzwOfnuWTEH+2nafh7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:9e:c9:57:d1:73:84:6d:c2:79:ac:03:04:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Apr 16 22:01:53 2026 GMT
Not After : Apr 17 22:01:53 2026 GMT
Subject: CN=82084d1c26fec7191883c7b26cb71eaa6b1f0e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:05:96:d6:db:18:10:41:87:a6:2c:76:2b:
ef:5d:da:28:a0:83:f5:87:65:3f:f4:e6:5d:fc:92:
35:94:20:6c:f8:d6:6e:71:d9:91:cd:1a:09:ee:8c:
48:f2:d7:d1:67:39:39:cf:e3:59:ec:32:f7:bb:02:
36:47:1c:6b:a7:61:17:80:32:75:8e:d8:ff:e1:36:
7d:64:97:e1:f5:33:9c:cb:0f:44:78:25:bc:6f:25:
bd:47:55:a6:ac:e0:a6:52:45:39:5d:f4:64:79:f1:
30:4c:1b:9c:4a:cf:b8:30:5f:9d:a1:f1:46:fb:32:
a0:62:72:5d:0f:91:45:1b:24:9d:24:12:52:28:c8:
42:7f:ee:e5:c6:37:31:8f:d2:1a:6e:27:b3:a1:9c:
f5:b1:88:00:79:0a:55:5e:56:92:88:11:4a:46:8f:
af:1a:3a:ab:29:d9:e4:c0:32:d0:6d:cb:42:08:8d:
ed:47:74:88:33:02:b8:ed:17:31:6b:0f:b2:18:73:
2d:1c:71:33:6f:e9:70:b9:59:fe:04:23:1f:70:48:
a2:22:7f:b8:75:82:ad:46:81:01:6a:7a:2a:71:c8:
14:8a:0c:31:c2:1d:13:4a:f2:da:89:5d:04:f3:37:
c3:98:0e:3d:19:29:15:8b:38:98:39:f5:e2:ba:00:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:08:4D:1C:26:FE:C7:19:18:83:C7:B2:6C:B7:1E:AA:6B:1F:0E:3C
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4e:14:66:1b:0f:28:5a:b7:93:c4:1e:ac:fb:86:1a:d3:89:
f9:94:8c:3e:33:2b:b0:20:fb:05:c3:82:e7:8b:b0:a6:53:05:
eb:b0:34:a6:9b:fe:c5:ba:b9:72:56:cf:8f:ea:88:d6:cb:32:
7c:05:b4:2c:92:4a:50:ce:0e:a8:3c:5f:14:d4:4a:b5:0d:a6:
24:e9:ee:fe:1a:a2:36:c7:b6:e7:7a:b4:b8:de:06:4f:44:7b:
75:4e:9f:f3:27:7c:56:51:45:eb:3a:44:a2:8f:ba:96:f9:8d:
bc:38:43:ba:84:74:72:86:b6:81:8a:d1:39:f0:3b:2b:f6:57:
41:03:7e:a7:75:4c:9d:a5:a4:7f:a3:7e:b8:5a:54:c9:48:f8:
b2:a5:40:b9:fb:2f:ae:e6:5b:7f:18:78:71:50:d2:d3:b6:fd:
cb:b0:2a:1c:9a:17:98:1e:70:78:cd:d0:82:e6:23:ac:09:3a:
45:90:a2:6d:30:25:5d:be:b9:21:f0:05:bd:41:c9:56:c0:ea:
d8:0a:53:2c:28:1a:97:37:cc:e6:2e:32:6e:47:16:41:33:06:
f5:25:50:62:f2:fc:46:c8:71:60:68:20:d9:e1:9f:eb:e1:8b:
6b:26:95:57:34:73:d8:aa:a2:4d:c4:b4:2d:aa:3c:c6:91:2d:
18:b1:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:18 2026 by rpki-client