Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: dPc9YXgFdxFP7ChBa7kzvB80udpOtdwIx9YAlPxvMXg=
Subject key identifier: D6:50:EC:7B:D0:18:B0:3B:0B:74:5B:66:2E:67:F0:64:7D:87:B1:00
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019D9A3E45AB1633FE95800F5532DB1DB228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:05 +0000
Manifest this update: Fri 17 Apr 2026 07:01:05 +0000
Manifest next update: Sat 18 Apr 2026 07:01:05 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: bthrzeFVfey7OU0WL+xSTuEUXsGUSZXDwnzl4EwJcp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:45:ab:16:33:fe:95:80:0f:55:32:db:1d:b2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Apr 17 07:01:05 2026 GMT
Not After : Apr 18 07:01:05 2026 GMT
Subject: CN=d650ec7bd018b03b0b745b662e67f0647d87b100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:4f:10:62:a8:36:2b:0d:8d:c2:1b:f2:0c:
5b:18:ed:4e:5e:64:ba:86:ca:1c:cb:ce:a0:9b:0b:
e2:32:ce:f8:ed:de:49:f3:f8:56:b9:76:37:5c:fc:
77:4a:76:3c:52:ee:0e:87:f9:c8:74:aa:86:8d:c5:
49:29:4d:2d:3e:20:21:9c:30:eb:38:4c:68:82:f9:
01:5e:e1:07:5c:ec:4c:e4:aa:13:de:17:99:a8:36:
01:de:24:80:b7:cb:af:eb:34:3a:76:60:e3:b6:15:
92:f0:4f:10:ff:0f:02:6b:c1:5a:98:26:56:9b:a4:
be:38:e2:5f:7e:2d:8d:df:fb:53:3f:72:85:c6:f6:
9c:e9:39:0e:ea:78:ad:c8:fd:44:e8:2d:d6:27:fc:
3b:93:8e:dd:ff:0b:f1:5f:b6:fd:e9:c2:cf:13:a8:
e3:1f:fd:23:4f:e4:f6:6e:07:56:6d:84:fd:b8:18:
a6:ff:18:40:38:48:bb:ff:6d:ed:0b:98:66:a8:40:
6e:76:28:c8:1f:5e:52:bb:e3:bc:f2:16:66:65:47:
09:93:59:6f:56:b3:8a:e7:cf:58:e5:ba:42:b6:cb:
04:03:a8:25:f9:75:01:09:c0:8d:f3:be:b0:6b:d6:
ee:86:e9:17:ec:bf:f6:2f:19:85:c1:61:ea:b5:39:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:EC:7B:D0:18:B0:3B:0B:74:5B:66:2E:67:F0:64:7D:87:B1:00
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c1:54:d8:ed:0b:5d:f2:d3:82:3d:8a:e0:dd:1e:0b:f3:9a:
da:07:07:9a:29:82:04:f8:ed:fa:05:c4:51:ac:83:1f:4a:8c:
e6:d3:3d:37:61:07:47:24:7a:c8:3b:a5:f2:4e:d0:2a:3e:7a:
78:c3:2a:de:18:ac:ff:1e:5a:81:63:4f:6b:88:d2:88:42:9f:
08:3c:40:58:5c:57:ef:a3:6d:ee:9a:e3:7c:c5:8e:c2:a8:70:
b1:cc:ca:79:20:7c:55:b9:8f:81:df:55:64:bd:52:74:46:62:
3d:da:98:7f:b6:3d:ee:e3:6f:cd:66:27:ad:3b:be:6d:b5:7f:
fa:42:9a:af:18:29:a4:4d:6f:89:87:ac:0e:ba:3b:e0:e6:a0:
b2:ad:5b:2f:24:58:fe:7c:f8:17:ab:7d:90:8f:60:cc:74:85:
0a:41:4b:00:36:40:d2:4d:80:16:32:42:4c:2e:dc:da:90:7c:
e5:5b:69:a0:1e:96:55:94:d9:3e:0a:7a:59:00:4e:f9:20:e0:
fc:9f:6e:3a:c1:4b:03:37:71:39:14:ea:1c:0f:63:54:74:9a:
ac:5e:ec:24:0f:e7:a6:d1:2c:82:51:b0:6c:19:77:84:aa:9d:
1e:cb:63:63:e3:18:20:9b:16:0a:43:fb:c9:55:d7:97:33:86:
5a:69:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:53 2026 by rpki-client