Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
File: vDH-mHQNcnxyab0GmhN11ZFftI4.mft (raw, json)
Hash identifier: almvLcM1kagBNW21BWfM7XqCWEXJnGnn/YIGnW6vvdk=
Subject key identifier: A0:80:19:8C:78:1B:B5:F0:02:4E:E0:1A:FC:DB:81:BE:50:69:C0:88
Authority key identifier: BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
Certificate issuer: /CN=bc31fe98740d727c7269bd069a1375d5915fb48e
Certificate serial: 019D9E1AC803B2D77666047AC6A7F3D6D28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
Manifest number: 9D
Signing time: Sat 18 Apr 2026 01:00:48 +0000
Manifest this update: Sat 18 Apr 2026 01:00:48 +0000
Manifest next update: Sun 19 Apr 2026 01:00:48 +0000
Files and hashes: 1: eBYsHLpTe5rtTp536t9KrRqEDBw.roa (hash: AfoQ+njM0VDp7GNJ1maOO3kKpGSJZsYKVK6zpBPLxEc=)
2: vDH-mHQNcnxyab0GmhN11ZFftI4.crl (hash: BWxDKS5ejHGlVlN6ORxUPYzWUofedaacBwJCCrIh5JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1a:c8:03:b2:d7:76:66:04:7a:c6:a7:f3:d6:d2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31fe98740d727c7269bd069a1375d5915fb48e
Validity
Not Before: Apr 18 01:00:48 2026 GMT
Not After : Apr 19 01:00:48 2026 GMT
Subject: CN=a080198c781bb5f0024ee01afcdb81be5069c088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:23:7a:74:37:93:bc:19:a1:32:e0:72:80:
5b:8a:82:20:eb:c3:43:ee:6c:3e:de:4f:b6:9d:86:
bb:42:c9:98:be:84:ad:5f:9f:7f:0a:98:35:85:e2:
45:fe:4f:63:ba:46:f6:c8:d6:1f:c8:09:ae:16:32:
c3:25:47:22:ac:31:5a:4f:03:c3:8d:04:b7:df:42:
1d:63:33:d8:67:b6:c7:a9:f1:9c:7a:34:86:03:73:
81:78:6d:c6:66:26:3b:68:6b:1b:9c:b8:f5:42:d9:
e0:38:a9:36:30:65:73:41:25:71:1a:ec:bf:06:52:
b0:22:4b:54:a2:5d:2e:32:be:a0:28:81:c0:45:0f:
9c:8a:ea:5f:c8:9d:a4:f4:a5:21:b1:9a:62:2d:20:
60:de:76:6e:db:80:88:06:59:ed:53:a4:46:6d:21:
49:ac:e2:d7:4e:cb:ff:71:46:b9:4a:1c:d4:ce:6b:
ba:6e:e5:5b:6b:82:bc:39:1f:dc:6c:1c:f7:57:5e:
31:94:b8:f1:42:f8:02:a8:35:84:f5:0f:2d:eb:34:
1c:25:58:db:d3:f9:68:ce:bf:8f:d5:ea:9a:cc:fd:
35:ce:ef:9c:a6:28:f7:d9:9c:d1:9c:aa:fa:0d:86:
f4:f4:5f:c4:8e:a2:df:d3:2d:2c:2a:e1:b5:c6:12:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:80:19:8C:78:1B:B5:F0:02:4E:E0:1A:FC:DB:81:BE:50:69:C0:88
X509v3 Authority Key Identifier:
keyid:BC:31:FE:98:74:0D:72:7C:72:69:BD:06:9A:13:75:D5:91:5F:B4:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDH-mHQNcnxyab0GmhN11ZFftI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c46ee8-7f45-4635-a3be-409b3250dac2/1/vDH-mHQNcnxyab0GmhN11ZFftI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8b:cb:23:f4:8a:06:c6:89:e0:58:66:d5:d7:ae:ab:66:93:
82:09:d3:32:bc:7d:e7:b9:dc:04:f6:cf:00:c0:a3:65:9a:22:
c2:ce:18:b9:95:10:07:b7:5d:91:65:c8:48:54:b6:54:7a:b5:
34:60:ae:79:f4:e5:ab:ba:b7:56:31:c2:5a:33:03:98:33:29:
be:20:82:0a:df:a6:97:86:37:53:b4:e6:b3:60:e3:c3:ee:7d:
48:c4:f8:9b:8b:73:4f:c7:fc:49:8e:74:49:60:e8:94:54:c9:
8b:a3:12:91:b2:a1:14:60:cc:7a:bd:4c:2d:4f:a4:8a:2a:cf:
0e:e9:f3:96:fe:76:4a:97:65:ae:08:ca:56:62:07:db:00:61:
f5:7c:9a:03:bd:d5:8b:51:af:15:5c:7f:ba:1f:f1:40:99:79:
35:10:81:72:c4:c0:9d:69:b8:95:e7:c9:e0:e6:d5:f8:64:a8:
bc:d8:5a:bc:93:81:6c:40:9a:cc:cd:75:9c:4f:17:5f:28:be:
e2:cf:01:9c:30:b9:ef:3d:f7:22:c8:81:7e:ec:19:6e:d8:5c:
79:bd:41:b1:ef:9a:34:7a:c9:2e:7a:9c:c6:e2:4f:1e:be:24:
29:97:33:b7:d3:4f:b0:81:f8:b6:99:f3:01:d5:39:9c:c2:91:
ba:c4:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:53:31 2026 by rpki-client