Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: SKRZd8xih8NmPeQZ8PU58Ih8ZjVduxRV08UwoM586Fo=
Subject key identifier: 49:0F:40:6D:E0:3B:3C:D3:74:24:1B:20:03:D3:BC:23:4D:DC:96:BB
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 019D9D07D782E827C9AA377A61BCA524568C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0EB5
Signing time: Fri 17 Apr 2026 20:00:29 +0000
Manifest this update: Fri 17 Apr 2026 20:00:29 +0000
Manifest next update: Sat 18 Apr 2026 20:00:29 +0000
Files and hashes: 1: hGGn56Yo_VSmgrsGFDnJfZjli00.roa (hash: IdVlpuGxDlB7X5s4S8Mv8+g/EUJ+VGMrKs3BCA2moLY=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: +9BrUus2FzyhL3BwAg+2udy4VrUOom84eJTRE7PC5Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:d7:82:e8:27:c9:aa:37:7a:61:bc:a5:24:56:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Apr 17 20:00:29 2026 GMT
Not After : Apr 18 20:00:29 2026 GMT
Subject: CN=490f406de03b3cd374241b2003d3bc234ddc96bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:94:64:a4:60:16:6f:d2:6b:9a:41:71:d6:
fe:91:f7:32:bb:91:d8:25:73:d0:44:b5:c8:32:06:
b1:f0:71:e0:9d:63:b4:d1:97:6d:40:fb:a4:dd:6d:
f7:fb:3a:70:e6:8d:99:4e:fe:1d:0b:bc:37:36:16:
f5:14:1d:4b:ee:93:fb:e1:32:46:9e:0e:ce:9b:0d:
64:18:a0:67:64:01:e9:16:fb:c8:e4:71:1a:95:b1:
47:be:06:95:75:61:8d:88:70:dc:25:57:9f:f1:25:
9b:76:28:d2:b5:75:c7:7a:19:df:d6:2c:77:25:d5:
f9:bb:54:41:05:2f:a6:40:03:e2:8b:7c:48:0c:44:
3c:fb:dd:f2:40:ef:94:33:8b:45:c7:c4:bb:fc:f4:
93:dc:3d:a5:21:1a:96:77:31:41:81:c7:c0:6a:42:
df:32:a9:59:c0:c1:49:e6:76:37:77:a8:04:a0:8a:
0d:b8:6d:5a:ba:4c:49:d9:70:29:a2:02:7b:1c:08:
09:4a:ef:71:a6:bc:fc:ff:b3:cf:19:74:0b:8e:fb:
3c:f5:07:68:e2:7e:26:a1:fb:eb:dc:e2:4c:e5:b1:
01:2d:de:28:8d:5f:7e:2e:30:67:db:8a:81:87:51:
8e:c1:9f:40:21:58:39:3b:7f:1c:be:c3:03:ed:44:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:40:6D:E0:3B:3C:D3:74:24:1B:20:03:D3:BC:23:4D:DC:96:BB
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:54:d4:dd:1c:6d:45:ba:52:c2:56:77:8a:b2:9a:00:b0:d7:
95:72:30:7a:9f:ce:99:d9:51:11:b7:0a:47:1e:65:74:3f:e9:
f9:99:dc:f5:96:ca:73:6a:3a:aa:bd:ee:27:a6:75:11:b0:ae:
19:3b:7d:9c:cc:0f:11:5a:86:4e:d6:25:a9:1f:ee:7a:2e:c4:
7c:df:e5:96:99:f5:97:e7:7c:41:0e:8a:12:ea:1f:ec:f6:cd:
7d:ca:f8:36:1a:1f:17:a3:b8:73:1d:ed:57:7d:39:b4:36:29:
d2:6e:90:2d:fa:cc:cc:f2:f2:50:66:1f:b0:d2:c6:58:44:5d:
59:58:fe:89:2c:39:e8:4d:a9:c8:a3:26:48:e0:00:dc:2e:b7:
a1:63:7b:18:d2:5d:f8:5d:88:3a:12:fb:12:ee:77:0f:9e:42:
71:a0:07:e6:78:f5:dd:f4:77:63:15:71:2f:05:82:c2:f7:4e:
18:03:e3:c0:6a:5d:96:1f:f6:10:3a:0d:49:c5:47:db:40:3a:
80:03:75:71:24:a6:69:25:ce:17:e2:bb:ed:60:a2:60:af:d5:
64:73:6e:db:3f:45:fb:28:94:09:48:10:59:6c:07:5e:0d:80:
ee:46:e5:62:08:8c:d4:fd:ed:a7:f3:ad:e2:4a:9b:a5:37:d8:
b1:f9:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:13 2026 by rpki-client