Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: bcHFEOvYWKw2SmKGkM6GnKVvZ9xukFanTDr05PICuQ4=
Subject key identifier: 95:52:74:AD:E2:7D:F7:BE:E4:5B:15:76:60:77:48:B0:17:A6:21:3C
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 019D999901FF8942CDE2FA240418715404FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 0AEE
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: HHjJ1Jx6EFiUg-5UQ5lbufk8Ptg.roa (hash: W0hfwWTjdZ4KxXq1ymHqcepaSyG/pOfrh8l71J5Jp1E=)
2: R5pzlcYLmm00OeDBY2AdET0Wb1k.roa (hash: xiJIdXt0KmJ/0CjuwN0kq1hka28S9GJuEKhJVLZ1i5s=)
3: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: F0nblFkQg9CZrgP99CAoJ/hK9h2h1w13TYi7nTGxLHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:01:ff:89:42:cd:e2:fa:24:04:18:71:54:04:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=955274ade27df7bee45b1576607748b017a6213c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:0a:22:8b:90:38:55:9b:15:d9:43:52:29:
0d:80:2c:65:ee:4b:da:93:31:1b:06:02:c9:52:f8:
57:ac:16:b6:dc:e7:8f:ba:2f:58:6b:b5:a2:07:e0:
c5:2a:ce:0b:14:7f:60:2d:56:52:54:8e:23:50:6d:
bf:76:e4:6c:8b:30:28:91:2b:65:94:34:4c:23:76:
c5:4d:0a:ea:3e:e7:c0:8c:a7:dc:2d:10:b7:c4:a9:
07:7b:47:9a:ea:ec:3c:e3:f9:07:19:ac:11:dd:3b:
76:23:ef:c9:ab:40:f2:ab:54:ce:ef:9e:38:65:ed:
3a:0f:1d:c5:8c:7e:17:ca:1e:1e:c8:06:20:26:d8:
6a:5d:13:9f:4e:a8:f9:f6:c5:9e:07:18:72:6a:d6:
c7:da:8f:e7:50:72:83:11:88:de:6b:f9:fe:a9:0f:
f7:13:0f:d7:8f:64:f9:0e:4b:c6:8f:49:eb:e1:5f:
80:a1:ce:7d:71:fc:59:96:91:b6:2f:2f:4c:7a:77:
41:16:52:0e:31:35:34:6e:ff:a5:61:61:33:23:51:
09:ba:f3:3f:50:68:65:84:33:97:aa:3b:39:37:61:
dd:70:da:d6:fe:5d:1d:0b:fa:26:03:91:b9:e3:50:
23:f2:78:cc:14:52:ed:68:bf:71:ea:a6:c3:3f:69:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:74:AD:E2:7D:F7:BE:E4:5B:15:76:60:77:48:B0:17:A6:21:3C
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d8:65:a1:84:3e:c4:04:a6:1a:35:13:ae:d8:63:17:67:3a:
88:8b:87:80:14:e6:f7:2c:b6:e2:18:ea:8f:f0:d2:3f:e1:f1:
b6:29:63:17:76:67:58:fb:e7:8f:13:0f:f1:c4:18:e8:15:80:
ce:3c:45:28:7f:83:c0:11:ae:98:84:14:73:20:79:4a:21:bd:
9f:a5:f6:d6:d4:8d:d7:70:3d:6f:03:e5:c3:8c:7a:bd:b0:8f:
70:1f:e3:85:75:39:45:bb:e0:e9:d7:b6:97:d8:06:86:40:b0:
c5:e7:6a:00:b1:6a:1c:af:8b:1a:71:5b:c4:39:8c:e5:58:c4:
55:74:27:ef:28:eb:b8:b0:cd:0d:08:3f:17:ea:60:af:a2:fa:
87:93:1e:ce:57:07:36:42:58:e6:de:0a:50:40:db:81:ce:71:
f7:6f:fb:41:a1:1d:80:97:39:23:06:69:be:05:cb:57:9c:38:
fd:d1:a0:ad:16:7d:9a:97:7b:89:89:cd:cf:f2:e7:8b:08:d4:
dd:bf:55:c2:90:b4:35:f1:f9:82:94:c9:c8:86:e0:db:bf:0b:
61:2e:b7:d3:36:24:b9:ad:ea:9a:d9:4f:54:f3:d9:39:6a:7e:
04:d6:fe:26:3f:ea:a8:02:f6:e7:9d:4f:3b:1f:24:2d:91:3d:
d3:fb:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:48 2026 by rpki-client