Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File: vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier: HPTZ0JCxDBBR/ZEyfZR9YfWpfU9TJBsm2Qb0cNvcoBk=
Subject key identifier: 57:AD:3C:A7:24:41:FE:6B:6C:D3:D5:50:96:1F:DE:2D:63:02:08:D9
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer: /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial: 019DA5D47CDDF58144B034B58E6A096E1B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number: 011A
Signing time: Sun 19 Apr 2026 13:00:59 +0000
Manifest this update: Sun 19 Apr 2026 13:00:59 +0000
Manifest next update: Mon 20 Apr 2026 13:00:59 +0000
Files and hashes: 1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: hlBeIcxvlYvRlVOiKwkdt5wOyTB7JmkUrqx+W+U6AdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:7c:dd:f5:81:44:b0:34:b5:8e:6a:09:6e:1b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Validity
Not Before: Apr 19 13:00:59 2026 GMT
Not After : Apr 20 13:00:59 2026 GMT
Subject: CN=57ad3ca72441fe6b6cd3d550961fde2d630208d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:e3:f6:b6:ea:22:07:9a:a7:f1:fe:b0:f5:
a3:da:5a:5e:9f:30:d8:2f:c7:6d:57:d8:c9:42:e0:
c9:5d:39:a3:b1:fd:3a:96:0d:05:87:f1:6d:22:08:
d7:c1:47:fe:eb:5d:a8:21:18:63:27:15:ff:32:58:
7f:45:cc:da:ac:ad:cb:29:9e:b6:0d:49:87:28:8d:
dd:56:d5:5e:89:fd:11:93:27:55:6e:02:be:3f:7d:
4c:66:da:b1:e8:ca:dd:eb:57:15:73:09:47:a0:ff:
b2:0d:32:6a:40:1b:e9:1e:a3:44:a8:f3:7d:15:b8:
a2:6d:44:2d:e6:03:8f:ba:e7:e1:52:e3:4e:96:61:
22:7e:66:0a:60:07:ee:82:93:5e:9c:8a:1d:5a:a2:
22:6b:9c:b0:b9:e9:95:23:71:c9:a5:4b:e9:28:dd:
94:9a:4a:7e:1c:b6:0b:35:37:18:5d:2b:19:3f:85:
d1:6d:1c:ca:5f:87:37:6e:95:84:aa:a4:f3:c0:8e:
42:46:b4:86:24:cb:c8:9a:57:b7:c0:25:fc:47:76:
1b:88:c3:bb:24:8a:04:e4:b4:66:bf:d0:c8:f7:65:
93:8b:01:3a:2b:13:4a:fc:ab:6d:d4:2d:b5:19:44:
40:aa:19:47:76:df:13:d5:ee:22:54:ab:f4:39:0b:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AD:3C:A7:24:41:FE:6B:6C:D3:D5:50:96:1F:DE:2D:63:02:08:D9
X509v3 Authority Key Identifier:
keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:39:10:e6:91:90:ce:d2:64:17:b4:e7:19:1b:1c:5c:35:ac:
2d:5f:a4:ac:17:e5:c3:9e:c9:f7:46:ed:67:e6:5b:4b:ba:dc:
61:d0:e9:66:0d:45:87:0d:04:24:75:a9:5f:ad:3d:79:65:15:
71:85:11:fd:b9:35:a9:7c:f5:dc:8a:eb:d4:60:bd:48:67:60:
7a:02:a4:c9:48:8e:85:26:ee:18:be:ba:77:14:7b:4a:a7:d2:
a0:69:40:51:2e:d0:29:12:d9:ca:8c:0e:e4:ac:9e:be:2d:8e:
82:04:24:2b:a3:46:cd:95:00:af:f3:50:ad:5c:c6:8d:35:e4:
68:66:e2:a4:48:b9:8e:cc:1e:9f:d6:d9:eb:93:e2:2d:18:aa:
c3:92:44:88:33:b8:c5:14:13:31:bb:6e:b8:52:4f:cd:0d:2b:
2d:b1:6b:c5:8c:51:17:7f:a0:64:96:52:63:a5:48:da:dd:2e:
51:a8:b5:d7:cf:0a:d1:a1:6e:b5:39:1c:3b:79:99:af:86:82:
1c:70:2e:48:11:db:f6:80:d1:9b:d4:90:3c:05:ca:bd:67:3f:
8d:6b:eb:81:5e:d6:a2:47:ac:13:ee:d0:14:fa:ab:3c:76:c9:
96:03:ed:f1:50:b2:e4:6b:3c:6a:2a:60:34:c2:71:5a:77:dd:
59:1e:42:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:10:28 2026 by rpki-client