Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: l6BAe5x8bPcUyL6zhZNRG6yixjcljD356hfOhfQMqbk=
Subject key identifier: 16:03:F6:26:E6:96:91:96:AD:1D:9E:67:89:1C:D2:4C:70:A9:4B:C6
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019D9850B7D603955330A731676DF8DD267E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:01:59 +0000
Manifest this update: Thu 16 Apr 2026 22:01:59 +0000
Manifest next update: Fri 17 Apr 2026 22:01:59 +0000
Files and hashes: 1: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (hash: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8=)
2: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (hash: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY=)
3: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: RYcXn125YS5N+4FcX+DrMzkEPXnGZw3SfYpdbKZHFr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b7:d6:03:95:53:30:a7:31:67:6d:f8:dd:26:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Apr 16 22:01:59 2026 GMT
Not After : Apr 17 22:01:59 2026 GMT
Subject: CN=1603f626e6969196ad1d9e67891cd24c70a94bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:d0:96:25:f3:1e:15:66:ce:8f:77:cb:8c:
9c:51:d2:dd:f7:f5:bf:f3:9f:3d:d8:04:f0:1f:3d:
26:49:dd:cc:00:15:76:22:ac:42:1e:ee:a1:80:13:
11:1f:0f:74:38:5d:43:d1:90:97:85:68:e9:44:ab:
0e:fb:79:d7:31:22:ff:95:df:d2:01:24:35:24:ad:
10:ab:b2:78:cc:94:2a:0c:8f:c1:83:46:da:18:6d:
e1:76:44:ae:21:18:d3:2c:64:e0:44:4d:2d:73:cd:
aa:af:c4:76:81:19:3e:da:50:13:e6:45:32:82:87:
08:cc:2c:b8:ca:d7:e3:fc:9e:bc:a7:99:7d:7c:2f:
c7:43:f9:80:52:6f:9a:c9:ba:30:88:ad:84:d1:84:
c4:9f:8a:ef:20:89:8a:06:2f:9d:57:a2:d0:3b:37:
a0:f9:99:97:95:13:9e:87:72:4b:73:0a:a6:83:ca:
1c:9d:76:9b:16:88:ca:23:75:05:74:aa:dd:0c:1e:
9b:b0:f3:ce:52:50:7a:7a:8c:0b:d1:a3:1c:a0:ad:
96:8a:52:40:57:92:86:8e:4d:3f:62:85:c2:18:0c:
80:70:d6:a3:77:5f:3f:a6:13:f1:4e:41:0f:2c:3d:
f7:c2:e4:2a:20:bc:a9:28:ce:58:ce:cf:cc:d6:2b:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:03:F6:26:E6:96:91:96:AD:1D:9E:67:89:1C:D2:4C:70:A9:4B:C6
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:13:d0:77:ef:4b:60:76:6b:3b:84:e5:ff:ea:92:4f:6f:98:
0e:80:72:9a:b3:3e:b0:a4:5c:5b:24:c5:ad:5d:3f:2a:91:29:
90:35:7e:e2:11:74:42:6b:31:7e:15:81:e3:2e:ac:c1:83:2a:
c4:5b:4b:4c:bf:2a:8f:44:5a:fb:5a:e4:12:05:bf:48:72:07:
4b:d2:e2:4b:4d:6c:e8:0a:fd:1a:84:9b:83:1b:6a:c6:80:9f:
45:d8:b2:15:5e:f9:88:2b:69:47:c0:85:59:89:a4:29:8f:fe:
00:9c:8d:e7:77:4a:fd:8e:60:fb:d0:40:6a:7b:04:ac:d6:c6:
d3:f8:ab:be:e7:34:a4:21:86:07:20:c5:b6:91:5c:8e:64:dc:
93:fb:56:c7:56:36:c2:4c:bf:79:39:6d:64:b2:af:b1:bb:ee:
04:d3:dc:69:18:10:c3:be:60:67:74:f0:f7:39:2e:42:52:7d:
ec:38:a7:05:04:cc:31:e9:0d:be:ff:71:16:1d:6f:21:6c:56:
ab:e9:6c:0d:40:d1:a3:51:74:b9:1a:00:e1:ad:5d:de:3e:49:
d9:fc:77:83:3d:d0:85:83:ef:b4:10:36:9d:33:56:f7:9c:dd:
f7:e0:71:25:4d:97:1d:0c:34:37:38:24:e4:15:f0:63:f7:f2:
6e:05:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:49 2026 by rpki-client