Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: IVL9gRsRfk2pJm5dC8/XpJJCir02Jl870uppt35FdE0=
Subject key identifier: 29:38:6E:C6:C8:18:CE:87:10:64:33:84:73:A3:CE:01:05:58:C5:5B
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019D98F52FEC2AAA6F9C67FB09C87B595B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 01:01:38 +0000
Manifest this update: Fri 17 Apr 2026 01:01:38 +0000
Manifest next update: Sat 18 Apr 2026 01:01:38 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: AMbbNQzVerN+KsmF/7rGPbo+W0C1Zv8sFUcuMDNhhkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2f:ec:2a:aa:6f:9c:67:fb:09:c8:7b:59:5b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Apr 17 01:01:38 2026 GMT
Not After : Apr 18 01:01:38 2026 GMT
Subject: CN=29386ec6c818ce871064338473a3ce010558c55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:a3:64:65:a2:69:66:bd:58:2b:d7:dd:de:
71:19:0a:64:7f:f2:43:ce:49:c8:c4:96:05:79:b6:
c0:af:b4:81:b9:7f:8d:49:dc:b7:d2:ab:f3:9c:90:
c0:53:30:17:08:02:2f:91:f0:c6:23:6e:ba:84:39:
d7:d0:5a:a3:2d:0d:dd:d2:a3:c2:1d:ac:af:79:ba:
10:85:53:e4:f1:ec:b8:b9:71:b5:48:5e:b0:3b:1c:
2a:a1:56:14:a5:fe:ff:6f:5c:d8:0f:6d:03:4e:ee:
91:35:1e:86:8b:05:66:c9:3b:c5:9a:da:02:6a:6a:
62:2f:73:26:55:48:c3:d7:af:aa:ea:f3:36:e2:f6:
be:a2:09:4f:3a:8c:f4:70:db:ec:8f:ff:e2:b9:81:
4a:08:8c:6a:57:76:5e:5b:dd:b2:ff:c3:9e:91:8b:
77:a1:8a:a9:2a:bd:00:b0:be:62:46:11:87:e3:c0:
3c:5b:a1:06:52:b3:85:67:af:34:0e:60:34:1a:7c:
f8:e3:1e:33:40:63:60:2d:c9:5c:83:26:23:76:96:
b8:a6:22:30:fb:4d:04:0e:ea:5f:77:dd:2d:d5:09:
96:e9:0a:85:73:b5:ee:65:cf:50:8d:26:19:86:e8:
3a:d6:0c:27:c5:58:27:16:d9:78:c2:2d:22:f6:41:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:38:6E:C6:C8:18:CE:87:10:64:33:84:73:A3:CE:01:05:58:C5:5B
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:19:aa:1c:da:9d:a5:65:55:3a:6a:49:1e:73:35:63:a2:0d:
b2:2a:8d:4a:7e:f7:9b:35:b2:ea:a6:e7:da:7c:3f:bd:ba:f2:
50:4a:c0:53:00:c0:a1:a3:3a:d1:16:b3:e8:1c:d4:18:df:85:
e7:c0:45:c4:c1:26:f2:8a:84:59:f6:a6:1b:c7:15:79:74:44:
3e:23:22:eb:a9:ed:5c:ff:d5:a8:36:aa:41:3f:e7:9d:85:ae:
83:9b:b5:88:53:3a:38:01:1b:ce:56:86:9e:fd:15:c0:32:5c:
49:be:9f:f5:a6:01:22:f0:ed:63:6d:87:ac:37:20:df:ab:35:
46:75:cd:6f:cc:cb:b1:eb:ce:c9:7d:ad:56:76:52:54:d3:ac:
c2:44:6e:41:78:af:11:d1:cc:0a:00:5b:77:09:8c:01:2c:0b:
3c:71:8d:a3:0a:d0:ba:92:12:8d:42:04:7c:ab:6c:b7:58:6f:
cb:7f:e0:88:11:ca:0e:c3:39:b7:c8:bb:b4:c4:be:c1:5f:cc:
1d:19:86:b3:7d:75:dc:0f:39:d4:97:fb:2b:47:30:07:eb:7f:
08:47:08:65:98:2f:7d:43:f0:5b:cd:a5:d5:b8:33:2d:72:67:
22:4b:f2:97:0e:63:23:cd:93:d3:c1:2b:d6:f7:2a:8c:6b:4b:
98:55:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:27 2026 by rpki-client