Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: QdHqI84RnUzunV9SkQxLPKP5e8gtEX8h+NTWvJW/HQo=
Subject key identifier: B5:D3:CF:06:2A:CB:CB:D1:D7:6E:4E:EB:CE:7F:9D:06:0D:E0:B9:17
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 019DA30A61EE2A061991C40571C1FFE192AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0FBE
Signing time: Sun 19 Apr 2026 00:00:59 +0000
Manifest this update: Sun 19 Apr 2026 00:00:59 +0000
Manifest next update: Mon 20 Apr 2026 00:00:59 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: B+23lYGHDWwSIJ7Tkdtgzm/6RKbvi7B7tC8ZvS/zg+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:61:ee:2a:06:19:91:c4:05:71:c1:ff:e1:92:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Apr 19 00:00:59 2026 GMT
Not After : Apr 20 00:00:59 2026 GMT
Subject: CN=b5d3cf062acbcbd1d76e4eebce7f9d060de0b917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:a2:14:79:61:b3:72:00:ee:51:64:93:1f:
69:26:c4:e9:5b:78:7d:4d:07:69:db:1e:cd:22:d8:
79:b3:25:84:85:88:fe:ac:65:33:7f:b2:8c:9c:c7:
a8:6e:0f:af:12:e2:d0:90:98:43:54:36:85:ef:14:
53:d1:b3:43:64:5d:22:2c:02:78:a8:02:6d:82:a3:
b1:1b:8b:db:04:f4:3d:8e:c3:ce:a5:79:49:61:4a:
6b:85:d1:4c:48:37:3c:34:00:01:d5:86:28:eb:19:
4e:d9:10:43:f8:b6:c5:e1:ea:eb:fc:69:c7:42:13:
50:b7:da:e7:46:11:5a:21:37:58:05:0f:ea:1d:59:
2b:0a:f8:c8:41:80:a9:5e:60:6b:05:0e:60:6b:15:
ce:c2:71:29:bd:45:ac:34:81:b3:e6:71:ec:fc:1c:
42:fd:6e:bd:23:79:47:be:3d:44:39:73:41:98:c0:
36:4a:f1:c7:64:3f:a7:b3:59:31:46:29:2e:3d:59:
1a:74:be:81:10:14:de:bb:5d:53:0d:7b:b2:db:48:
a6:c5:e9:b0:fe:81:b9:0b:d2:10:2a:05:21:98:5a:
d2:ea:75:44:09:e7:79:fc:d1:98:6f:f0:22:1c:38:
f0:9d:62:5f:5d:d0:c9:aa:bf:0b:ae:7a:4b:2d:0d:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:CF:06:2A:CB:CB:D1:D7:6E:4E:EB:CE:7F:9D:06:0D:E0:B9:17
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:6e:68:2f:b5:62:8f:f9:56:4f:07:22:29:c2:75:9b:5f:
c3:67:d5:43:be:31:3a:7c:84:f2:56:58:e8:04:46:ec:45:89:
87:e3:5e:46:da:1e:5e:f5:e6:9c:f0:ee:1d:18:37:48:09:2b:
6b:48:9c:e0:16:54:42:ce:09:f7:0f:26:a6:63:95:c7:eb:6c:
61:6e:b8:41:15:5e:37:08:14:1c:60:76:34:97:93:9d:2f:9c:
54:83:5e:2c:8d:1b:37:50:d8:dd:d9:f2:fb:f6:33:02:dc:07:
71:e3:69:25:03:1d:f2:de:67:45:8e:17:f2:18:2b:71:97:84:
7f:48:0b:57:79:6f:eb:79:21:9f:b9:70:8e:28:94:0e:91:ee:
43:75:79:f2:c0:cb:db:12:46:f7:b1:c9:0a:1c:10:52:e1:90:
0a:4c:be:6b:b1:98:0c:b9:26:98:bf:70:8e:8b:a3:bc:5b:2d:
fb:d8:14:76:3b:8a:e3:dc:e4:13:2d:7f:d3:1a:95:11:9e:de:
63:fc:cd:af:81:3b:0a:53:34:62:23:78:fe:cf:d8:7f:f6:8a:
07:2f:88:49:ba:dc:a8:67:20:bd:a4:a3:43:ef:dc:af:31:2f:
e8:e5:17:b8:ca:bc:92:d6:3a:e0:2d:da:cf:62:60:5b:df:dc:
ae:37:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:59 2026 by rpki-client