Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: yeCGyyvy2NKM8r4aeliEbm7+0y78mbuj6KbBv8rBtCk=
Subject key identifier: 9C:04:CE:55:E9:EB:CA:B9:5D:CF:81:54:A5:61:4E:AE:E3:49:50:EE
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019D99631A42D02684FDEEF4D7CC344FC193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:01:41 +0000
Manifest this update: Fri 17 Apr 2026 03:01:41 +0000
Manifest next update: Sat 18 Apr 2026 03:01:41 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: xCY8TKi/bQ9FJyZXUOm1zwxhMLt3NFJS6nOe9Fq9fs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:1a:42:d0:26:84:fd:ee:f4:d7:cc:34:4f:c1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Apr 17 03:01:41 2026 GMT
Not After : Apr 18 03:01:41 2026 GMT
Subject: CN=9c04ce55e9ebcab95dcf8154a5614eaee34950ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:78:db:41:70:7c:e8:7d:0d:29:78:ad:d5:
a7:14:9d:39:ba:a8:3b:48:9c:72:64:17:94:10:83:
c1:2c:60:84:8f:4c:c5:ad:14:2e:ed:81:80:fa:6f:
04:12:db:4e:ba:63:19:f2:f1:c0:88:cf:1f:d5:fd:
99:75:a4:81:fa:55:61:41:f5:68:21:55:bf:07:a5:
d6:6e:ae:41:48:2d:ab:8e:ba:83:3d:d2:a7:29:2d:
9c:50:c5:4f:04:1d:0d:19:7f:c9:a4:5d:8c:24:cc:
3c:4e:16:51:6a:11:35:79:d2:9a:b5:1f:aa:45:56:
f1:ba:cb:39:4d:cc:bc:b3:c3:52:a0:4b:b6:8f:a9:
95:69:d6:e8:57:76:c1:9c:c0:bc:81:31:e6:71:8a:
49:26:5b:af:ac:5c:d3:69:64:72:b2:67:a1:71:3f:
2b:69:20:79:5a:68:d0:59:ed:ec:c3:98:d6:10:f6:
1e:7e:2a:bf:88:99:af:36:b8:7d:5c:ef:3a:cc:9b:
0b:a2:ac:44:d6:fb:3b:b7:4d:4c:26:32:69:4b:24:
f9:5f:5c:1e:82:54:87:d7:8b:35:24:7c:bd:ce:6c:
10:b8:1f:82:e7:75:aa:0a:eb:bb:68:4e:ee:8f:39:
70:da:25:c6:b0:1d:fa:1c:57:26:02:0b:96:c6:0a:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:CE:55:E9:EB:CA:B9:5D:CF:81:54:A5:61:4E:AE:E3:49:50:EE
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:44:85:97:ae:4a:5b:aa:a8:3c:64:25:df:45:28:22:0b:dc:
5a:0c:90:56:3f:cc:17:42:3f:16:2d:6f:06:0c:24:09:85:69:
d7:c6:e9:75:6f:2f:ce:54:37:4b:7e:58:ac:6e:05:a3:fe:72:
2d:09:9c:51:9a:12:54:47:d5:0d:e0:da:cf:30:54:53:0b:1e:
d2:75:22:21:7c:f1:3c:de:78:2a:96:54:9a:b8:c2:c1:0f:96:
a3:40:b1:cc:5b:93:d3:70:59:35:53:52:ff:c7:22:cd:ec:77:
e5:90:6d:6f:f8:f3:4b:3f:c4:f3:08:0f:b9:c2:59:6e:f9:31:
76:f2:31:43:47:79:29:84:cb:1b:fa:2c:11:bc:65:2c:fa:6f:
fd:80:c3:e9:d1:c4:ff:99:3a:27:08:f8:a5:8a:3b:8a:00:f7:
fc:eb:82:b3:c8:d5:27:8a:69:16:80:1b:0b:25:b9:5d:5c:66:
34:06:87:76:8d:16:9f:9a:f8:12:96:2f:9a:4d:f4:39:f0:fb:
05:3b:19:f4:cd:d9:fa:e2:96:73:c1:9b:ac:67:e2:5e:e3:dd:
a7:6a:d1:6e:86:df:0a:39:7b:3d:88:bb:ac:1c:61:05:20:cc:
b2:33:b3:38:a4:a3:ca:d8:32:e4:44:ee:ce:81:fb:20:ed:1b:
ec:48:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:19 2026 by rpki-client