Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File: VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier: cRHuGWPLNQIqaKBFV0Jr2yBC2sH8X9zLI9sAyAaFeM0=
Subject key identifier: 1B:B0:11:C2:59:0C:CE:CB:CE:7A:C7:DB:7A:9E:94:12:C0:DC:96:32
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 019DA4F8992FA3FB0B3EFBB8F009528884A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number: 0D46
Signing time: Sun 19 Apr 2026 09:00:48 +0000
Manifest this update: Sun 19 Apr 2026 09:00:48 +0000
Manifest next update: Mon 20 Apr 2026 09:00:48 +0000
Files and hashes: 1: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: XaFi2DXAF6X5lsm4DRNZ3XbryRneq8gEUJteb6EcqSQ=)
2: cc8BNFaMVlbaSTGI8x6HmWHwtwY.roa (hash: WhsxgLT9TP0uFAV72UNKZ0OIf3Wuow/e/T5+vO3eQUw=)
3: hj9vrZtu_ptlT9holTDhc3lmO9I.roa (hash: HyRkrnYbKZroL4ZELZRBl7Cqf0iZoQ21yLkLhmG2ZnI=)
4: zATzhpg9xiU_0_8udzecrn-BFdM.roa (hash: LXOXPntIpCX+wDiB9sHExrI1VhXJrNUwhw9OhSaFlRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:99:2f:a3:fb:0b:3e:fb:b8:f0:09:52:88:84:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Apr 19 09:00:48 2026 GMT
Not After : Apr 20 09:00:48 2026 GMT
Subject: CN=1bb011c2590ccecbce7ac7db7a9e9412c0dc9632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:b2:f3:49:a0:04:c7:2a:9d:c5:5b:5f:56:
a0:d6:e1:46:2b:39:35:57:c4:f2:66:61:e1:7d:26:
91:ee:f0:fc:87:94:95:18:16:b0:6b:e1:4a:84:46:
69:a0:27:e4:de:4f:6b:e7:9f:f0:0f:36:f9:7a:08:
96:e8:f2:45:38:33:a3:9a:b1:87:88:c9:7b:07:3a:
5f:9f:6a:fe:ed:99:0a:87:11:51:eb:a3:8d:ce:dc:
20:f8:8f:37:f7:13:3d:cc:74:cf:90:c4:d4:cd:21:
cb:50:b6:4c:6f:6b:ef:43:f9:da:83:1f:30:b4:7e:
ba:97:54:1a:7b:69:17:68:ac:7c:11:f7:95:93:bf:
d4:87:d9:10:14:9c:89:84:97:42:78:68:b9:01:63:
f8:be:bb:52:28:84:0c:0b:9d:a1:03:29:07:20:0c:
cb:9b:95:c5:ec:1c:12:00:58:97:38:a6:0b:fc:99:
14:53:89:fa:a6:d8:8e:45:01:aa:79:89:16:85:37:
77:93:2c:dd:fa:44:3f:c5:b8:49:14:6c:37:47:69:
a2:42:ce:b8:cf:03:25:54:b5:d5:da:fa:74:2c:fb:
88:65:44:b0:a5:70:35:ee:48:d6:d4:b9:e5:a9:8d:
b3:f2:57:c4:4e:34:f8:d8:f6:d6:99:b7:e2:4a:e3:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B0:11:C2:59:0C:CE:CB:CE:7A:C7:DB:7A:9E:94:12:C0:DC:96:32
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6e:74:89:42:8f:0d:c4:1d:31:b2:00:a9:ca:cf:2c:db:22:
1a:e8:28:73:7b:6c:be:7e:79:6b:63:c0:be:3b:a6:82:1c:d5:
c1:b5:20:ee:19:2c:a0:91:1f:1e:62:ca:5e:90:23:f3:49:4a:
27:8d:e8:7d:df:6c:28:95:28:0c:22:dc:aa:ee:d8:31:b3:1e:
9d:c8:fe:4e:b8:a5:a9:ae:d6:e5:bc:25:38:8a:00:5d:6a:50:
9d:ca:f7:ad:6d:7b:cd:d6:31:da:d1:a5:8d:9a:e9:95:b9:63:
ac:70:cf:aa:6b:bb:af:6a:09:3b:a7:21:a0:eb:e5:07:e4:b2:
83:80:7f:0e:95:15:9e:ad:2b:34:4d:50:14:68:1d:c3:14:ee:
93:3d:ed:cd:7a:a5:68:5b:fc:4b:52:8c:39:90:c7:e6:96:f0:
c9:70:3c:71:8d:04:c9:54:0c:f0:47:bb:f4:0a:82:ef:45:8d:
c9:73:81:38:5c:62:92:7a:77:e5:fd:f5:f5:a1:c2:a0:60:fc:
9c:96:1e:69:f5:75:0f:4b:15:ea:79:ad:90:02:64:b6:45:42:
e2:4c:54:71:bd:82:ab:ee:cb:3c:c6:de:60:98:7e:6e:08:6c:
74:11:e5:68:0e:ad:18:18:5d:db:0f:57:f7:aa:d3:28:03:68:
b9:aa:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:32:13 2026 by rpki-client