Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: aGW/ZKetBvclGPlqUcJ6SXOpZQ1VeT4lkDFNYI3shz0=
Subject key identifier: B2:E0:05:EE:DE:89:81:66:B5:BB:D0:60:19:A7:55:DF:07:B7:51:08
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 019D98862CCED5C14597ACD229D35A8B903E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0D2B
Signing time: Thu 16 Apr 2026 23:00:23 +0000
Manifest this update: Thu 16 Apr 2026 23:00:23 +0000
Manifest next update: Fri 17 Apr 2026 23:00:23 +0000
Files and hashes: 1: MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa (hash: 1RlOpJPGUwPySnoc4bJ92X2BUeJ9PgaVyLOke+PwpWY=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: CEx42h1xsuYhsXGFBpMV40LzgThCwDHnHFwq9uLaZ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:2c:ce:d5:c1:45:97:ac:d2:29:d3:5a:8b:90:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Apr 16 23:00:23 2026 GMT
Not After : Apr 17 23:00:23 2026 GMT
Subject: CN=b2e005eede898166b5bbd06019a755df07b75108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:0b:5a:9f:1d:0e:a1:1b:70:44:4c:35:8a:
dc:07:52:37:95:7c:bb:04:96:3a:94:52:4b:49:19:
7e:54:40:a6:2d:a3:ed:5f:97:b4:5d:08:dc:d2:8e:
c7:eb:68:0c:5b:bb:44:64:70:04:fc:11:25:10:b2:
2f:37:18:d7:c5:95:ae:30:bc:ef:77:65:92:74:35:
07:7c:91:09:c4:09:83:1e:20:84:f0:32:25:59:fe:
27:21:cb:40:4a:56:3c:83:7c:95:d4:95:13:0d:9f:
f4:c0:5c:32:24:89:b8:fc:ff:31:30:08:d7:b9:97:
64:75:64:7d:ec:d1:2a:47:52:9a:58:1e:17:39:02:
d1:8d:b6:e8:5c:c5:6a:33:51:38:18:40:5c:dc:46:
e6:08:71:47:af:47:52:33:24:cd:72:74:2b:a9:18:
24:fd:82:95:51:1a:5a:f5:fe:e9:40:ab:af:89:48:
14:ee:24:cf:f7:87:b7:77:3e:06:6f:39:56:6e:1d:
99:2c:09:8e:09:c3:78:49:6c:b4:b0:02:04:62:74:
fb:1a:2a:c3:93:32:59:1d:9b:dc:33:8b:0b:00:19:
1c:2d:eb:88:d1:dd:44:f5:15:63:bb:ea:33:14:c5:
92:51:3f:bf:4c:5b:1b:2e:1c:54:ee:e4:b3:71:83:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:05:EE:DE:89:81:66:B5:BB:D0:60:19:A7:55:DF:07:B7:51:08
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ae:cc:e7:10:1d:10:ad:19:7d:2d:a2:63:ba:65:45:f3:61:
c8:1c:84:5f:a7:ba:07:8a:07:90:8d:07:55:49:33:0b:3d:4a:
7d:73:80:32:7a:a6:c8:0d:84:9e:f0:ef:73:86:6d:5f:42:8f:
3e:95:fa:7d:5d:5b:c9:7d:75:4f:69:13:3a:61:09:0c:c9:74:
09:07:0c:00:6f:a9:0d:49:7a:f1:b3:cd:77:63:00:0a:42:cc:
2e:dd:c3:6c:2e:0f:3e:1f:04:a7:85:bb:c8:5d:48:39:1f:29:
e8:90:1e:f5:67:f2:6f:52:df:a8:81:1d:82:fc:72:b7:76:45:
31:7b:1d:76:d6:0a:73:a4:20:2f:ac:aa:47:6b:00:57:3c:c7:
fb:fb:88:58:ef:b8:f8:59:54:55:b6:71:cd:5f:a8:d5:c1:7f:
63:ae:a8:f8:a7:a1:98:4e:ac:2d:0a:65:b9:6f:86:ee:43:0b:
58:c4:ba:f2:4d:32:bd:d2:e6:2d:62:7b:92:6f:e2:61:91:ae:
ea:ce:52:91:39:8d:ba:0f:fb:df:72:83:16:8e:7f:0a:48:73:
76:64:21:e1:1e:b5:9c:f7:c0:a9:92:5d:27:5c:7a:ed:23:be:
30:98:80:1d:14:e1:bf:ca:cb:05:63:57:c0:a9:9b:39:08:5d:
b0:08:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:58 2026 by rpki-client