Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File: VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier: 4CD9heu//D7vp+5EiXVSsfdhb2Blgm8y/y39buZLU78=
Subject key identifier: 8E:51:8E:56:06:A8:A9:BC:C5:04:42:7F:E4:5B:91:1D:82:16:48:86
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer: /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial: 019DA30A1D8310F1DADC61060192206D5D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 00:00:42 +0000
Manifest this update: Sun 19 Apr 2026 00:00:42 +0000
Manifest next update: Mon 20 Apr 2026 00:00:42 +0000
Files and hashes: 1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: N69Egz/7J2qgVXPs4eOp+bxYKs/ey3TsY0Ca+iJXerE=)
2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:1d:83:10:f1:da:dc:61:06:01:92:20:6d:5d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
Validity
Not Before: Apr 19 00:00:42 2026 GMT
Not After : Apr 20 00:00:42 2026 GMT
Subject: CN=8e518e5606a8a9bcc504427fe45b911d82164886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:b8:ee:bc:11:2f:97:ba:c9:49:c7:9c:d6:
ca:71:c9:b1:8d:b5:50:3e:a0:2f:97:42:0e:a0:4e:
e9:dc:1b:7f:11:48:0d:7f:2f:63:a3:61:f2:a1:fe:
a8:cd:92:3d:37:78:b9:09:65:74:30:e6:05:96:47:
00:37:49:f4:c0:69:a0:77:14:64:ca:ac:ad:1b:b1:
57:ac:6a:8d:1a:31:17:fd:70:d8:af:66:63:6f:04:
ac:84:82:c5:d6:d0:3c:93:fc:21:a8:e4:ba:66:c7:
69:e0:a9:22:0b:f2:91:e7:bf:55:b3:7d:75:0e:07:
ec:a8:69:af:4d:a6:65:12:8f:47:a3:f7:20:75:2d:
8e:ed:96:25:e4:32:ac:6f:d3:31:71:e6:d1:33:d4:
3d:17:a0:69:e6:a8:6c:b3:b0:ec:04:73:b6:ee:48:
4e:dd:a6:a8:62:20:60:d2:6c:9c:1d:9d:3e:b7:f6:
ae:1f:22:67:e6:9f:2f:ad:2c:f8:03:cd:7a:5b:2c:
90:22:94:ca:6a:fc:32:ce:2c:ee:36:ad:fd:74:30:
7a:ce:54:80:00:62:e2:cd:3b:cb:73:46:16:6c:9d:
51:24:a9:a1:97:21:aa:84:e0:15:d0:c2:cc:f5:48:
3b:30:07:ff:7a:c3:73:2a:e7:36:69:84:f6:b6:60:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:8E:56:06:A8:A9:BC:C5:04:42:7F:E4:5B:91:1D:82:16:48:86
X509v3 Authority Key Identifier:
keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:68:89:a9:6a:f7:99:ae:16:78:04:3b:48:7a:25:73:00:e3:
f1:42:d9:e7:3d:8d:e8:7d:87:21:f3:ce:35:31:83:34:a0:b8:
40:04:ae:83:67:2b:cb:5a:d0:76:f8:8a:e3:72:ae:13:e6:a6:
db:b6:f5:7b:7e:d0:f8:0d:bf:8b:af:d1:59:89:ee:26:83:d9:
96:c8:ad:1e:cd:59:fa:63:67:73:52:d4:23:f3:6c:bd:53:ae:
5f:5b:23:0a:1f:88:8c:e7:f3:98:91:59:91:80:ac:22:db:e2:
70:b9:8e:7c:f1:65:34:d2:89:72:65:aa:f7:15:c8:3f:03:b3:
d5:94:2e:9f:ee:bd:2b:4c:2e:ff:73:5e:d6:76:02:a8:a2:f6:
09:f0:59:7b:4f:c0:f2:40:85:6e:a7:ec:b6:26:18:9a:20:a6:
db:cc:5f:c0:07:28:70:5f:9f:1e:89:4f:21:2f:7f:54:5f:6d:
c6:20:5a:c4:7c:62:54:75:2f:d7:e2:f0:de:10:d8:75:26:ac:
aa:20:9e:3d:2d:bb:e2:cc:2c:0e:66:9e:cf:d0:0f:77:bc:3c:
9d:1e:31:97:b1:70:6b:de:ef:2c:77:d4:eb:67:23:f3:45:92:
02:d9:d9:c8:3a:7e:3c:e9:05:5d:bb:f4:9d:bf:fe:b3:7a:7a:
44:94:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:01 2026 by rpki-client