Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File: VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier: LKaMWnGkRpbhdVLQl+dTCPuziaBCWorp1104ZjjgFtI=
Subject key identifier: FD:53:FC:40:10:F9:78:09:64:3C:B8:9D:FE:0D:0E:1D:02:4D:56:F5
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer: /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial: 019D9AE2D42A3101DA0E964315F651598480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:00:49 +0000
Manifest this update: Fri 17 Apr 2026 10:00:49 +0000
Manifest next update: Sat 18 Apr 2026 10:00:49 +0000
Files and hashes: 1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: pFEF/LLbg2DThpcquEOqdwXlDPriBUvV8jfAFcbfLyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d4:2a:31:01:da:0e:96:43:15:f6:51:59:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Validity
Not Before: Apr 17 10:00:49 2026 GMT
Not After : Apr 18 10:00:49 2026 GMT
Subject: CN=fd53fc4010f97809643cb89dfe0d0e1d024d56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:30:2e:d5:29:07:82:ce:6a:99:84:d2:80:
b8:c8:5c:cc:6d:d0:2b:b0:d8:62:38:dd:8f:db:e4:
25:43:cd:aa:4c:01:11:c3:95:af:08:ee:5c:f2:43:
92:92:4d:1e:80:2d:75:01:d7:e2:00:b9:af:91:d9:
a8:5b:cf:67:1d:eb:a8:c0:b2:12:15:1e:e2:b1:37:
3d:d5:ba:f2:11:aa:98:29:72:cf:04:f3:88:42:de:
8f:9d:86:7e:16:21:83:76:e5:1a:84:f6:13:1b:84:
5c:c7:5b:be:8d:97:61:c6:50:70:87:ae:74:d4:59:
74:bf:bb:e0:b4:61:2f:2a:93:38:18:fd:93:f0:4e:
df:60:bf:09:15:5f:c6:ae:b4:a2:3e:f2:39:f4:d0:
ed:5e:3e:0b:e3:a8:64:fb:1c:04:18:b2:14:bd:dc:
c1:ba:96:76:27:fc:b4:b8:8d:98:28:ef:16:87:ec:
f6:f8:5e:c6:54:09:0e:68:f6:72:f9:db:ca:99:1e:
e5:c6:c4:cc:7b:27:b1:de:30:3b:2a:95:3e:a9:63:
69:68:c4:18:70:e3:b9:80:bf:b8:11:5e:dd:78:72:
2e:66:b2:9f:4a:ad:23:7e:bb:a0:8c:ff:d3:77:72:
c9:87:b7:87:1b:98:4e:09:bd:d9:c1:08:e3:6b:05:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:FC:40:10:F9:78:09:64:3C:B8:9D:FE:0D:0E:1D:02:4D:56:F5
X509v3 Authority Key Identifier:
keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:92:e9:13:66:55:5b:46:20:b5:57:24:ca:72:95:a9:4a:96:
8a:d8:28:17:4c:a3:f7:07:9b:38:40:a5:ea:b4:8b:d2:ec:eb:
22:e2:45:f8:12:10:08:e0:68:74:25:fd:c7:3d:57:d3:2e:e3:
8a:72:ce:aa:74:86:cc:d2:2c:ac:59:8b:94:31:87:e7:a7:14:
b5:5b:8e:18:55:b9:1c:83:6c:0b:be:98:d8:52:4c:60:1a:35:
66:7e:f0:f8:65:7d:f1:5d:e4:5e:94:49:8e:1c:6d:6b:49:09:
1a:42:a7:d0:83:66:18:87:52:e9:6b:ad:2c:00:b5:a9:01:ab:
fa:fb:b2:0d:5e:bd:d9:a7:8e:dc:a1:60:ed:75:97:e9:bf:11:
ae:42:b5:78:64:bc:f6:ee:4e:8e:69:4f:eb:de:76:96:4a:03:
dc:05:88:df:53:b5:08:d2:00:a1:cf:8a:1f:60:b0:c7:78:ed:
f5:60:c8:a6:7f:38:13:7e:44:56:91:bc:00:be:c1:1a:b4:02:
f0:d3:c0:89:d3:d9:91:3c:5c:f8:53:da:fb:aa:11:9a:97:ab:
04:c5:9a:4d:c8:68:b0:f7:04:55:48:4e:ae:8d:e3:8f:81:43:
7d:bc:59:98:fa:57:0a:77:26:d4:61:9f:6f:6a:2b:ef:84:06:
f8:9d:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:07 2026 by rpki-client