Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: KnfktDnpzJN1lIkAgfKCXa8WJ6aPqGmJq2ov7YG3LlE=
Subject key identifier: 19:99:EE:A2:A4:91:A1:EE:8B:84:CD:11:97:C3:79:B7:E4:04:99:E2
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 019D9B50837B82B7876F4BF1FB7C3EA38D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 145A
Signing time: Fri 17 Apr 2026 12:00:38 +0000
Manifest this update: Fri 17 Apr 2026 12:00:38 +0000
Manifest next update: Sat 18 Apr 2026 12:00:38 +0000
Files and hashes: 1: OPRz51uzznqYUEPxfg90oEwb7MQ.roa (hash: eZ6pMS8abjtpitMERgpepOF6OAkDWhegDlYVypYAvp8=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: fdCVVMj4hlRO6FEGAnBIjo9kUrW4NZ/ryTtj/nCOE70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:83:7b:82:b7:87:6f:4b:f1:fb:7c:3e:a3:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Apr 17 12:00:38 2026 GMT
Not After : Apr 18 12:00:38 2026 GMT
Subject: CN=1999eea2a491a1ee8b84cd1197c379b7e40499e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:f6:b0:13:49:52:ec:4f:88:c6:85:c6:a7:
02:14:bd:5b:00:44:76:e4:1f:44:11:7c:77:0d:52:
36:00:a6:d9:e8:52:41:d9:04:a1:88:54:96:68:32:
90:37:1d:4e:5e:50:a4:91:7b:2e:f9:42:89:32:a0:
7b:dd:97:20:ed:c4:ee:cc:e8:d8:a8:bf:f4:a7:28:
3a:54:7b:78:33:29:ca:c6:da:1b:b0:4f:59:eb:4f:
0b:5d:0f:63:13:60:0c:83:e4:2f:2c:2f:ea:e1:2b:
b5:5d:65:33:37:3c:28:9a:41:c5:0b:65:54:62:a3:
2a:09:1b:e9:56:a4:b1:9a:8c:36:6b:fb:a1:db:39:
04:b7:2b:c4:9b:1f:8a:8f:7b:4c:12:1e:72:24:fd:
70:82:4c:ee:ae:7e:5e:fd:72:b6:e4:b6:4b:b0:3a:
b0:75:0d:e0:5f:07:69:05:51:7c:02:8e:8c:00:c4:
e1:c6:94:b4:a8:f1:e0:70:77:93:62:a9:0e:b0:7a:
c0:59:e4:ae:65:ba:68:ab:2d:79:9b:38:4f:b3:c8:
d9:a5:19:de:01:7f:c3:89:88:83:95:f8:3c:22:b5:
64:2e:78:9e:68:51:85:6a:65:90:ab:3d:09:00:b7:
43:23:19:8d:14:bb:34:f5:cc:9e:c1:34:f4:ab:4b:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:99:EE:A2:A4:91:A1:EE:8B:84:CD:11:97:C3:79:B7:E4:04:99:E2
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8f:c5:d6:30:37:d4:56:2a:c4:2c:7d:6c:a7:0e:71:1a:f6:
c6:b7:42:a0:bb:53:f0:76:a4:57:42:26:43:30:76:75:29:75:
b2:43:5c:21:97:e1:0a:e3:48:60:33:e3:53:19:50:7b:16:56:
fa:79:3f:80:9c:c4:03:d8:dc:c3:dd:e7:8f:9a:0c:fd:98:ec:
09:f1:27:be:bc:d5:ae:f0:c4:8b:b9:6c:72:b3:49:62:7d:31:
08:18:ff:97:9c:78:f4:26:45:ad:de:a5:54:9b:b0:fb:1a:ce:
1e:08:7c:b7:30:fa:03:bb:47:0c:85:51:6e:52:4b:2b:b6:c0:
ba:9b:b0:ad:12:ad:a0:64:b9:03:03:a5:e6:ba:6d:10:0d:f3:
74:4c:d4:bf:b8:49:8e:15:a0:e3:72:cf:56:6d:68:d9:05:40:
d6:9d:62:9f:8f:55:38:33:36:82:30:f7:31:e7:fe:49:40:33:
03:24:84:3a:90:b9:1e:e5:e2:f2:b5:d8:54:60:e0:93:05:9b:
e8:ef:53:55:c4:de:a5:55:2c:93:ba:0f:ed:eb:d8:35:e7:80:
e4:f3:00:ab:18:ed:d5:fe:70:af:be:eb:2a:35:ed:8d:48:8e:
1c:58:c0:19:a9:78:32:90:27:dd:f1:14:29:40:08:5e:e9:36:
a5:bd:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:34 2026 by rpki-client