Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: WZIr5Qthyu0IdF26HzKhVbjA5O38+l8rXkgLmIJn6WQ=
Subject key identifier: 07:A1:BC:08:C0:71:21:3C:54:B6:C2:87:DB:57:C9:7B:31:F8:D4:4A
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 019D99D07E1F5D277DF713E1270D56EBE341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:10 +0000
Manifest this update: Fri 17 Apr 2026 05:01:10 +0000
Manifest next update: Sat 18 Apr 2026 05:01:10 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: dxzOjWHMElMsfrLzcTRpZUrSVAQnqcFDKg1AmYZrAEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:7e:1f:5d:27:7d:f7:13:e1:27:0d:56:eb:e3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Apr 17 05:01:10 2026 GMT
Not After : Apr 18 05:01:10 2026 GMT
Subject: CN=07a1bc08c071213c54b6c287db57c97b31f8d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:4f:15:4f:b4:4f:86:6f:b8:e4:2c:0d:04:
74:67:da:db:f1:18:1c:2f:41:30:0c:37:be:a0:5e:
73:e6:ba:65:19:7f:ed:87:c6:a2:a3:23:d4:0d:09:
7a:86:83:0e:4b:99:ce:4f:22:bf:9a:ad:cf:5c:c6:
89:c3:4a:a8:af:a6:c3:a1:47:ec:e6:5e:ac:cb:70:
05:4f:3e:49:09:56:e5:9b:7a:1f:fe:34:72:0e:67:
9b:66:64:87:f3:4e:64:4c:77:47:7c:4e:e8:ee:fe:
bb:f6:c9:b5:20:be:6f:a7:f8:4b:df:f2:21:aa:e0:
33:b9:40:31:ba:dc:e1:ad:5b:f4:aa:27:35:84:bf:
ab:5f:9c:b4:1e:b8:c0:d9:e2:b8:e1:79:f8:93:a8:
3f:be:ed:48:ff:26:89:a1:2b:80:69:f4:4f:60:b8:
d2:cf:ee:60:39:6e:b2:6f:48:c7:38:32:35:3c:58:
63:50:10:e8:6f:51:ab:72:40:91:05:15:94:78:d5:
a4:82:05:10:e3:44:5e:b1:ba:54:b3:d0:2a:9a:c2:
dd:f8:b0:69:cd:dc:7e:db:f5:96:3b:76:04:7b:36:
50:19:bb:40:71:d9:28:fc:5b:87:6c:39:64:b4:64:
3a:18:e2:11:43:1f:37:ed:a2:32:f0:cd:0c:7a:c8:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:BC:08:C0:71:21:3C:54:B6:C2:87:DB:57:C9:7B:31:F8:D4:4A
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e8:1d:6f:8f:54:1a:94:0e:b7:82:17:db:25:88:28:28:ed:
d0:60:a6:6c:70:ce:8e:3a:50:ba:3d:9a:5d:bb:b1:dc:01:bf:
b9:15:f7:fe:b2:59:18:e7:ed:e4:55:0f:a6:2b:b9:b2:8b:61:
da:65:27:96:d8:88:48:71:d2:a8:e1:1a:f1:32:f3:e9:2a:e0:
ff:c1:f8:9a:0a:57:db:56:ea:04:90:c5:79:65:09:50:33:21:
82:c7:10:cc:a6:5b:74:26:9a:fd:4b:91:3a:6e:36:2b:16:af:
f0:08:fa:69:f2:13:b2:9e:ec:75:70:d9:d9:f4:4f:58:5d:e7:
b0:f9:b4:d8:5c:22:8c:8e:c8:f6:97:43:bf:0a:ca:29:d3:3b:
9d:0f:bb:50:1c:e7:33:b6:f6:b5:1e:8a:1e:c7:e3:a7:55:85:
e5:a0:d3:8d:66:e3:1e:d2:84:96:42:80:2b:87:79:88:9c:e9:
77:27:1c:fa:b1:2f:1f:77:3b:08:03:d8:24:d3:9e:29:53:b8:
e1:03:6d:e1:62:62:3c:64:4a:09:71:be:14:8f:82:04:9a:0d:
6a:41:d8:c3:08:9c:be:08:0e:1a:dc:5a:4f:04:56:20:11:a3:
1d:5d:a2:92:b5:be:1b:00:5d:7d:29:fc:5f:80:66:31:7f:d1:
2c:03:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:15 2026 by rpki-client