Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: bqVB4Pg56lvUBCFZa3BoG3gP2rCMAgHW51tzDpqwkPE=
Subject key identifier: A2:AD:8E:4C:CD:66:A4:59:94:1B:BF:12:16:FB:60:F2:7C:C6:B3:A4
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 019D97AAB87037A4CBA233ED9632EAAB5B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0E0D
Signing time: Thu 16 Apr 2026 19:00:40 +0000
Manifest this update: Thu 16 Apr 2026 19:00:40 +0000
Manifest next update: Fri 17 Apr 2026 19:00:40 +0000
Files and hashes: 1: IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa (hash: ZkNSMusbdYjyY6Jst6K+Zs/Pf+gwZBfB+9r0tVdAYHs=)
2: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: oHZ4qv13ax78R5MDoV4WNwonq7kuVLjKN+3pteZjRWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:b8:70:37:a4:cb:a2:33:ed:96:32:ea:ab:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Apr 16 19:00:40 2026 GMT
Not After : Apr 17 19:00:40 2026 GMT
Subject: CN=a2ad8e4ccd66a459941bbf1216fb60f27cc6b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f1:60:58:1f:0e:2d:0c:4f:45:ec:2b:c0:8b:
ad:35:17:87:62:78:22:fc:a8:5c:ce:1a:be:a7:65:
bd:df:8a:96:d3:ed:5b:57:51:f9:df:cb:61:39:84:
83:3f:e8:af:ec:9d:99:d5:57:d9:54:8a:c2:d2:50:
26:50:05:0d:61:11:ef:d9:8d:bf:52:9a:68:60:5c:
b2:32:6e:6e:76:4a:ea:d7:c9:b6:31:ac:d1:b4:8c:
09:23:b5:a5:20:72:bc:64:4f:56:4c:82:e8:a7:3c:
3f:7a:b9:81:71:5c:f5:50:69:84:3f:2a:c6:68:65:
c0:ca:e2:a4:70:8b:b3:2f:f5:8c:2a:97:35:fd:56:
09:28:53:06:00:1a:73:84:51:82:ad:ce:e1:c1:23:
a8:62:c2:12:f9:02:0b:ca:55:0d:c8:2a:e5:a4:b1:
94:6e:cb:67:1b:25:ce:9d:8d:b9:90:14:ad:ad:9c:
5c:56:4a:41:a8:de:f2:df:a6:50:16:93:fb:ea:84:
e0:28:1c:8a:4a:3d:ac:d6:29:e6:8e:dd:ba:cc:68:
49:cf:98:4e:71:63:0a:48:ba:a6:97:bf:ff:44:a5:
e8:b3:9b:6b:c8:89:b1:a8:13:9f:bd:73:f6:e8:64:
28:eb:37:89:a5:52:13:f4:48:c8:b7:d9:76:23:45:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:8E:4C:CD:66:A4:59:94:1B:BF:12:16:FB:60:F2:7C:C6:B3:A4
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:79:90:d8:f2:3a:df:f6:56:80:e1:87:f7:02:77:ff:9e:18:
4f:8a:e1:50:24:6d:22:df:f6:7e:5a:5a:c1:5b:cc:3b:94:6b:
24:e4:45:af:03:87:da:ba:58:18:ec:86:b5:a9:ba:ae:dc:23:
17:ab:52:21:6d:06:09:c8:c8:76:0f:fa:1b:d5:f2:f7:45:02:
b1:25:1a:ed:cd:5a:3a:a7:19:22:42:67:f0:e1:96:2e:ca:5a:
f5:44:6b:35:ab:05:90:1c:06:2c:a6:b4:79:b1:77:8d:24:b0:
d8:20:52:66:ea:e9:86:7a:e7:e2:1a:3d:3a:c4:26:f2:3a:10:
38:ce:cb:9f:ff:54:63:d0:c8:9d:3e:9b:18:ae:53:2b:4e:02:
49:cd:2b:9a:b2:53:a6:f6:33:01:50:2d:66:e1:90:cb:0b:5b:
26:1f:df:56:d9:62:09:a1:a0:51:fe:89:bc:24:19:5b:8e:5e:
57:af:8e:75:e5:3b:ed:5f:60:04:b3:31:b1:42:85:3a:d2:09:
ee:bb:c7:d1:4c:3d:72:72:5e:25:08:37:25:2b:33:67:04:39:
28:6f:a1:05:dd:a6:19:96:e0:b3:13:28:4b:9a:a1:c8:1f:30:
f5:f9:c0:d1:23:3b:98:6f:90:81:1e:0e:29:5e:c1:33:44:ea:
af:90:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:38 2026 by rpki-client