Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: cUG8gHk7jaqqfQI9I0ha5KVqIS8ECgS+dFSArKSDv70=
Subject key identifier: 94:EB:0D:E4:C4:5D:11:E7:3C:5E:47:64:FE:F4:C6:3D:B3:CA:46:4A
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019D98BDC0C33B5D7FA7A6F4D3361483501A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 1608
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: rDGJuwwnGZwcJg1qrbYoWEEKrGL3pTkf8iqKt3f3jz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c0:c3:3b:5d:7f:a7:a6:f4:d3:36:14:83:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=94eb0de4c45d11e73c5e4764fef4c63db3ca464a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5b:89:da:ec:69:bc:64:92:76:b9:7b:ff:85:
6d:62:d5:35:0e:be:3d:cc:f3:b7:45:5b:09:88:eb:
27:a1:cf:f1:25:f7:77:15:0f:4e:87:b1:96:9b:94:
f9:9a:b5:93:02:c8:a9:ce:2f:0b:2c:6a:6c:5a:c1:
2c:a3:57:67:50:58:83:10:ff:1f:e6:ee:17:4e:cb:
b5:93:14:06:74:3d:32:86:1a:1c:d2:c8:4a:31:a1:
35:ac:9d:eb:20:a1:3d:0f:fe:b4:dd:60:59:f2:3e:
79:20:93:95:ad:d9:46:e0:70:a0:00:f0:f0:2d:4d:
f0:32:48:44:9b:bf:bd:ac:6c:2d:eb:8e:43:b7:4b:
76:cc:e5:9f:e1:1e:7e:df:d4:59:06:2f:12:df:d6:
d8:42:0e:55:82:10:e0:5c:be:43:fa:fa:33:8f:47:
91:a0:16:18:6a:5e:76:c3:f1:d0:c4:8a:09:21:fa:
93:af:7f:16:a3:35:5f:bc:43:42:72:6c:8c:f5:1f:
1d:95:9b:0b:b1:0c:79:af:4f:2e:0e:73:7f:2b:e0:
a2:80:7a:67:41:6f:bd:f1:6a:2a:14:4c:1e:92:d7:
bb:a6:47:71:69:2e:8c:d1:9f:9d:27:cc:42:36:9a:
2d:a3:d2:c7:b8:b5:97:3e:7a:e1:dc:43:18:a9:a9:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EB:0D:E4:C4:5D:11:E7:3C:5E:47:64:FE:F4:C6:3D:B3:CA:46:4A
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b3:db:ba:25:eb:03:18:4b:2b:11:ea:6e:34:ce:15:89:fe:
ee:79:00:24:c5:dc:01:18:fe:cc:06:c8:fd:3a:63:7d:ae:0f:
6d:df:36:08:56:3d:6b:d3:96:77:d0:0a:86:33:ae:1d:50:0b:
3a:ac:b5:d1:fb:0e:2d:e5:4d:20:ed:0c:8e:6f:32:78:4b:6c:
9e:3d:b2:ca:21:a9:32:ff:1f:1c:b7:a6:86:20:1e:bd:53:02:
c3:04:57:62:cf:71:71:55:aa:70:75:4d:90:0f:c6:be:04:22:
a4:b2:9d:db:c8:12:35:9d:1c:f7:07:96:43:20:6f:b7:77:b2:
c0:ef:20:0c:50:1b:d1:21:c6:be:2e:1b:b8:06:11:94:71:df:
67:b9:cf:e1:7f:ab:47:03:3c:05:cc:1d:94:fb:42:0a:86:d6:
ef:a1:36:67:09:33:66:b9:ae:e8:7a:f9:12:8d:dd:87:00:c6:
52:39:a6:f0:99:41:b7:7a:94:d9:2d:96:b5:b5:a3:3a:20:5a:
96:7c:00:2d:10:a6:9e:7c:34:b6:2b:27:1b:4c:e3:44:f8:11:
81:96:bd:1e:ef:53:f1:bf:4d:81:e7:0b:db:98:8c:fb:ca:56:
09:ad:c7:49:48:43:7a:60:af:8c:05:30:f3:47:a3:31:c5:10:
ed:82:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:26:59 2026 by rpki-client