Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier: p1SWSjt6LTUMilvoZl69mbi5zRUatFsKJkmbwfB9+lU=
Subject key identifier: AF:92:5C:19:0D:BF:1A:59:2C:12:9E:5B:C6:58:36:B4:5B:8A:07:FF
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 019D9A3DF7BC84F2F713D61243FC659F7D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number: 0703
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Sat 18 Apr 2026 07:00:45 +0000
Files and hashes: 1: Eu41_P7LziP7tbN3y79d5Zld-yA.roa (hash: AfrnyrK9VXdcG7fWfl7gD7MMFiGqvdrIsV969hWJlbc=)
2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: nepf74kx9dapsIW6DeN6jfssg1KwKcxK9HhRGqgqLxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f7:bc:84:f2:f7:13:d6:12:43:fc:65:9f:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 18 07:00:45 2026 GMT
Subject: CN=af925c190dbf1a592c129e5bc65836b45b8a07ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:50:26:af:76:bc:59:a9:7d:d9:32:b1:b4:
69:28:d6:c7:26:18:49:d8:cf:91:6f:e7:37:c9:40:
f9:20:98:df:e5:70:5b:0e:3e:ef:19:34:26:16:34:
9d:e0:c4:5c:f5:27:16:7e:04:d4:bb:34:38:5e:a5:
fd:29:bc:15:b4:6c:82:72:80:f8:86:67:ad:a9:b1:
f8:22:fe:1b:0c:9e:71:17:d1:3c:a7:12:79:b9:bc:
8d:76:03:de:9b:46:39:22:59:a5:77:10:c5:af:33:
88:59:7f:b2:27:3d:dd:40:0e:37:32:45:7b:32:44:
d2:d5:b2:c0:b3:e6:7a:f2:29:38:d8:f5:70:e7:81:
67:0a:08:b6:be:c1:73:03:72:eb:60:d5:9f:90:38:
bb:cb:a6:ff:17:b9:25:a3:4f:ef:66:7a:ca:97:17:
47:74:92:f0:de:77:58:bf:04:52:10:8d:7b:47:38:
d4:ea:6e:63:2a:91:5e:5c:9c:65:d0:6f:cc:50:65:
bc:16:4a:db:ca:3d:ab:06:60:87:31:57:ea:92:4b:
1d:73:42:d7:c6:bf:d0:68:77:87:71:ea:ed:c6:66:
35:c9:65:60:6a:37:27:4e:5e:d4:30:89:de:e0:41:
15:7b:73:cc:ff:44:cc:39:68:46:df:31:43:bd:47:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:5C:19:0D:BF:1A:59:2C:12:9E:5B:C6:58:36:B4:5B:8A:07:FF
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5d:20:b9:3a:fc:9c:97:64:d0:64:8d:ee:d5:8c:05:e3:be:
10:f3:a4:cb:c4:76:ad:29:c7:20:d7:81:99:77:f3:7d:3d:52:
63:6d:8a:90:a2:4b:5e:51:86:25:b5:a3:5b:83:e8:88:ac:55:
38:07:00:e8:1e:ad:51:6d:0a:fa:f2:6e:a7:45:6d:80:ef:22:
83:3e:14:be:a3:00:8e:03:76:c5:70:95:8f:70:d7:dd:54:87:
c5:77:42:1b:78:5b:5b:6a:51:04:a2:a5:fb:37:1a:84:d9:66:
a2:e6:16:ad:87:f2:03:13:f4:b4:e6:81:e6:c5:2e:27:7c:ba:
90:d6:71:d4:52:50:8d:fd:12:6e:ab:c8:cb:59:57:71:fa:82:
f9:39:b9:06:88:70:8b:e7:69:a4:b0:2a:d7:05:71:2f:75:63:
07:bd:63:11:eb:1b:05:3e:23:d9:8f:0b:33:02:96:51:f4:f9:
72:91:3f:14:a1:42:d9:70:84:48:fa:12:9d:8e:2a:d3:3d:fb:
40:80:02:e6:2f:74:f4:c7:dd:73:70:cf:ee:7d:36:96:1a:73:
e4:aa:9f:da:7c:bc:88:d5:6c:5c:3b:d7:05:48:ac:6e:26:da:
10:08:1a:59:97:9d:22:72:cc:53:08:56:b5:8f:35:8b:f8:9b:
c5:f3:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:57 2026 by rpki-client