Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File: vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier: 0r81wU5SJTMiTEvRCrAVnkf5aAcbUoAt/DM4l8NH0/8=
Subject key identifier: 21:97:B1:49:60:F4:40:FD:B7:E2:CC:27:2C:53:AC:D3:61:7C:58:04
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer: /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial: 019D98F554C8016F74D2EBECA960916AA5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number: 0846
Signing time: Fri 17 Apr 2026 01:01:47 +0000
Manifest this update: Fri 17 Apr 2026 01:01:47 +0000
Manifest next update: Sat 18 Apr 2026 01:01:47 +0000
Files and hashes: 1: aENpbZFMMBWYCci1um8I0GEZSKc.roa (hash: bJqlLgnRm20xht7mBqwuocxi1HbSlACC3bpe5sLs4l4=)
2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: Gp5So+Vp3jf8jSFVGdvrV+1uU/VfCFWB8fuorm5Fy9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:54:c8:01:6f:74:d2:eb:ec:a9:60:91:6a:a5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Validity
Not Before: Apr 17 01:01:47 2026 GMT
Not After : Apr 18 01:01:47 2026 GMT
Subject: CN=2197b14960f440fdb7e2cc272c53acd3617c5804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:ff:f0:c1:72:61:42:07:b2:46:26:27:05:
eb:85:a9:48:cd:72:59:68:26:45:28:ff:79:0f:4b:
c1:3c:3e:ed:d0:97:81:18:22:31:1d:35:fa:fe:7e:
80:32:02:18:50:35:83:d4:ec:2b:b6:66:0e:54:cb:
b2:7f:d7:2b:d8:8d:42:54:90:79:98:b8:f6:6a:9a:
a3:cc:eb:8a:8d:dd:be:3b:a0:79:12:53:98:e7:f5:
b3:6c:48:d9:46:ad:a0:00:c2:6b:d3:ba:c3:3d:38:
ff:36:7f:46:a0:cb:42:94:95:c8:26:90:0d:59:5e:
69:9b:e4:0a:9b:7b:5c:9e:c8:35:be:46:b6:69:8c:
8f:e0:f8:e0:69:0d:dd:c1:83:2f:0c:f5:cb:da:ac:
38:41:2a:d4:11:c8:d2:06:92:34:ba:91:d8:35:d7:
6e:a8:d1:33:35:66:34:46:a4:fe:23:51:d0:59:2c:
ff:61:2d:30:71:6f:3e:13:a2:ff:1e:9a:05:9a:05:
f4:12:10:dd:ad:50:89:1f:92:4e:b3:ac:e4:1f:cf:
db:0d:06:76:c9:c2:c6:a8:67:e8:81:5a:8a:a1:3d:
48:94:75:3a:75:1e:4d:b2:18:93:2c:2d:47:50:d3:
d3:f2:f6:14:46:b2:75:a8:34:63:c1:dc:a1:93:c0:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:B1:49:60:F4:40:FD:B7:E2:CC:27:2C:53:AC:D3:61:7C:58:04
X509v3 Authority Key Identifier:
keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a7:83:e5:49:9e:d9:ac:8a:36:00:a9:a8:fa:70:9d:af:ea:
29:87:30:56:ce:53:1f:15:78:7b:71:25:7b:44:73:3e:ab:14:
ea:ca:f3:fe:5a:cc:19:53:52:88:f0:51:59:7f:0a:17:57:8a:
0c:79:7d:d1:13:95:36:77:c6:5a:52:3f:73:e3:3f:62:41:45:
e7:c7:97:15:32:7e:b1:9d:75:94:d1:c8:f8:f1:c8:19:8e:66:
52:a0:d5:d4:1a:c5:11:ed:d6:1d:17:59:6d:83:29:d5:fd:d7:
1f:51:cb:4d:ee:5b:dc:d9:f1:2a:ed:90:99:91:c5:43:58:a0:
50:bb:aa:85:6e:9a:f0:81:95:21:8c:ed:fa:c9:20:f6:84:96:
d8:e8:21:35:5d:32:48:a2:be:14:b1:d7:be:97:a7:5c:0f:15:
e3:f1:8d:b8:20:86:26:0b:72:7c:e7:2b:6d:01:9e:fa:a5:55:
96:52:6f:77:ee:31:c2:7b:60:07:f7:ce:16:22:a4:19:9e:26:
43:86:de:8a:35:38:ff:0d:6c:4a:09:df:b3:d2:04:64:3e:d3:
91:a8:c4:7b:6e:48:04:d2:99:3f:6d:b3:f8:8a:a7:c7:01:ca:
06:b6:64:39:f4:ef:b9:4f:aa:1b:39:d2:a2:e2:37:36:69:47:
7c:3b:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:09 2026 by rpki-client