Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: 48q20yExhNJITumRmZtgB9f5S4tVMbIZ7vX0emOu0+s=
Subject key identifier: EE:8E:E0:78:23:91:C0:31:62:12:A2:C8:DB:E2:9D:57:A8:2A:51:9F
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019DA2D392F578B1B2B2A6920ADDD6266FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0582
Signing time: Sat 18 Apr 2026 23:01:07 +0000
Manifest this update: Sat 18 Apr 2026 23:01:07 +0000
Manifest next update: Sun 19 Apr 2026 23:01:07 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: Nb237FIksCi2rlfgysXPQdoS0fSik6rPkxEt+J0e0bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:92:f5:78:b1:b2:b2:a6:92:0a:dd:d6:26:6f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Apr 18 23:01:07 2026 GMT
Not After : Apr 19 23:01:07 2026 GMT
Subject: CN=ee8ee0782391c0316212a2c8dbe29d57a82a519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:8f:9c:7b:da:6f:5b:59:7d:5a:c6:e9:0b:
2d:b5:b2:88:db:fd:20:4c:82:a5:31:9a:29:ce:77:
57:03:cb:f1:12:50:fd:e9:64:dd:f1:3b:48:69:1f:
b1:51:f5:a5:9a:32:11:71:c4:3d:e0:cc:5a:20:ac:
ab:bf:31:d3:8f:78:8e:ff:b8:76:a1:84:b7:21:a6:
e1:7a:c8:92:3f:dd:29:95:fb:1f:de:bf:83:49:c7:
86:ac:f3:11:20:a4:a9:3d:0c:5f:47:ce:e8:52:78:
30:9d:15:6d:20:ed:32:09:55:14:1d:87:0f:69:8e:
16:ec:00:bf:1d:34:60:25:e5:6a:96:86:3c:18:df:
b4:09:61:fa:f7:c7:4e:33:50:25:01:e9:99:7f:7a:
01:a8:63:fb:d3:ad:e5:6e:b4:51:be:39:8d:5a:37:
cd:48:4b:2a:e3:74:db:ea:c3:49:79:5f:89:3a:2e:
35:56:a5:09:ea:c9:b1:a2:94:ea:65:72:60:c4:50:
c8:4a:4a:9b:4e:0c:ed:5c:18:db:cd:27:ba:ac:99:
b3:64:d5:0d:1d:0e:79:18:47:fe:c8:6e:a1:e0:d3:
74:cb:f2:4a:7b:70:c7:17:32:03:e2:77:2a:34:1c:
e7:85:a9:65:21:d6:c2:94:74:0e:93:82:85:08:05:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8E:E0:78:23:91:C0:31:62:12:A2:C8:DB:E2:9D:57:A8:2A:51:9F
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:20:01:f9:f6:6f:81:f2:fb:78:41:f1:74:36:74:23:db:ed:
18:12:e7:cf:19:ed:1f:47:4f:1f:b5:4c:3a:71:08:66:7c:d1:
fa:a2:2a:53:67:7d:51:e5:e1:53:90:12:6e:73:f8:6c:5f:96:
2a:97:43:e7:8c:e9:61:16:df:bd:3e:a7:79:52:63:7a:42:41:
01:5c:d4:0b:79:5d:7e:07:6e:c3:fe:8e:33:5a:bf:3b:cd:6c:
fb:11:f5:da:36:58:6e:59:b2:a4:cd:93:d7:fc:d6:29:55:ee:
5f:14:1c:db:84:eb:2b:21:8a:9a:b0:c9:47:22:ef:c8:25:c1:
aa:2a:a2:73:6e:b2:6c:b4:29:be:93:ff:88:94:05:ed:97:cc:
54:f1:a3:e2:c5:eb:f5:1f:89:f7:e9:36:04:6f:e6:f7:33:c9:
6f:6a:55:88:4d:a9:6b:8a:1b:d4:7f:93:c4:96:b6:28:53:d9:
dc:93:5d:e2:7a:cc:a3:35:50:44:c3:e7:71:11:b8:46:33:83:
44:33:91:71:16:b2:54:87:97:61:d4:32:25:db:8e:67:87:e8:
9e:3b:7b:28:e0:9b:a5:4c:6d:db:b1:de:8b:3f:8a:9e:cb:0e:
9d:71:9c:c2:a2:82:86:9b:39:2b:86:91:0a:67:1f:91:ca:58:
de:ba:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:05 2026 by rpki-client