Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: STWN+pDcMq62WppAyv7TLc3tzXjax9p/kjC2hbyProU=
Subject key identifier: 19:C8:8F:78:3D:D1:78:8F:60:19:05:8B:80:22:5D:1F:D4:5E:AA:9A
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 019D9BBEA5DD802459076216D1CFE4EE6144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:00:55 +0000
Manifest this update: Fri 17 Apr 2026 14:00:55 +0000
Manifest next update: Sat 18 Apr 2026 14:00:55 +0000
Files and hashes: 1: TJJ2gOjBREqpMzOZJTJ2VfBKc3M.roa (hash: peGM10woKh6oL0rMneWbTzD1iT6wAY2ntEnSy9KA6Lo=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: QryctxQi2bxVetv1rUYt4towj6lcpNT823R06rvCL1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a5:dd:80:24:59:07:62:16:d1:cf:e4:ee:61:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Apr 17 14:00:55 2026 GMT
Not After : Apr 18 14:00:55 2026 GMT
Subject: CN=19c88f783dd1788f6019058b80225d1fd45eaa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0a:dd:53:7b:0f:71:ad:5e:38:d9:86:b1:93:
29:cf:fc:9b:6f:4b:8e:26:24:d9:cb:6f:1e:db:de:
08:f7:5b:fa:2a:b8:94:ce:ab:21:9e:44:e3:e8:d7:
de:00:a3:c5:5a:18:74:d4:0b:83:67:e5:e1:1c:87:
48:a3:3c:89:32:06:59:2a:8f:7b:fa:55:7a:f6:4a:
20:0d:1c:cc:b4:54:94:1f:4d:de:1d:0c:12:cf:cf:
56:17:bb:a6:90:26:f9:67:51:ff:75:b6:08:fd:b6:
7b:f9:8c:f5:be:4b:f9:64:b7:6b:f3:51:50:89:a1:
8e:17:37:ce:24:8a:09:3d:25:87:4f:71:ef:1a:26:
b3:e8:5d:f3:55:4a:ea:bd:30:b9:c0:fb:98:26:9f:
75:66:1e:eb:9d:14:4c:fe:a7:ee:c6:a2:ae:17:fa:
d2:eb:64:26:b3:3f:1d:62:a3:11:88:f4:52:ce:1c:
b2:6c:05:f3:c7:d0:6c:54:20:15:9d:fb:af:c4:80:
04:91:5d:90:ff:93:ae:6a:39:ed:1e:8d:68:fc:2c:
05:14:4d:07:a0:59:65:8d:53:a0:b4:d9:aa:17:51:
1a:fc:31:51:81:2e:7d:9a:09:82:f8:67:91:d0:ac:
af:fc:70:4f:3a:4c:e5:ed:1f:3f:05:36:ba:f8:be:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C8:8F:78:3D:D1:78:8F:60:19:05:8B:80:22:5D:1F:D4:5E:AA:9A
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bc:f5:3d:77:ca:ec:ae:14:3f:b4:1d:3a:a8:5c:7e:80:86:
e2:da:15:fa:a9:16:a1:c5:6b:8f:d4:c2:77:2f:1a:6e:7e:26:
32:47:2b:70:9c:c0:ae:f2:03:13:c9:b9:48:b8:26:c2:8e:03:
74:35:d5:4c:98:0f:db:ca:da:67:53:b9:9f:12:41:8a:f1:7a:
73:06:ec:de:1e:98:82:5e:21:6d:19:50:64:65:7f:80:13:1a:
34:58:df:dd:05:3b:49:4b:bb:be:2e:76:57:48:0a:3f:89:d7:
a2:30:06:7f:cb:4f:73:9c:35:d1:bc:9d:9e:fb:05:95:06:1a:
b4:6f:52:34:82:e1:dd:a7:37:e0:7c:ee:fe:0b:e1:5f:9e:24:
44:fc:cb:48:45:c2:e0:fc:2c:7c:a8:a2:c6:9a:b2:75:4a:0a:
a1:fe:9f:74:a9:ea:58:6d:7f:44:89:74:ab:88:21:7e:60:e2:
e1:80:86:0b:6e:13:8d:18:f8:87:44:48:bf:77:51:34:12:60:
96:db:b5:ed:18:fb:c6:3c:9d:c5:7f:a6:74:79:ef:65:6b:7a:
a0:b0:c7:18:db:dd:05:3d:1a:88:4a:22:91:69:37:35:52:64:
11:35:5f:a1:75:c7:03:8a:e4:81:9e:7c:28:83:6d:19:b3:ee:
f6:fb:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:17 2026 by rpki-client