Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
File: vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft (raw, json)
Hash identifier: Hnqi/M/kADCycGy02b+v3Py9vbkpxuWviwh3xHM/Zxo=
Subject key identifier: 53:91:C2:A5:46:AA:D6:5E:01:78:4D:DF:45:92:52:BC:F6:9B:D7:40
Authority key identifier: BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
Certificate issuer: /CN=be1868205b3d137355aa71f2467295cd871952c8
Certificate serial: 019D9DAD2DAC4F7AEEAAF1FAD915FD86963C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
Manifest number: 0EC4
Signing time: Fri 17 Apr 2026 23:01:05 +0000
Manifest this update: Fri 17 Apr 2026 23:01:05 +0000
Manifest next update: Sat 18 Apr 2026 23:01:05 +0000
Files and hashes: 1: vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl (hash: z7DCx9nOMS+olMQSupjEn4LRhY+vBtuWDTqbrDPtgBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:2d:ac:4f:7a:ee:aa:f1:fa:d9:15:fd:86:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1868205b3d137355aa71f2467295cd871952c8
Validity
Not Before: Apr 17 23:01:05 2026 GMT
Not After : Apr 18 23:01:05 2026 GMT
Subject: CN=5391c2a546aad65e01784ddf459252bcf69bd740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:53:51:b0:d2:08:8e:b7:e3:08:06:5e:42:
db:c3:50:d2:8e:35:76:d3:63:9b:f4:a3:ac:7d:36:
50:51:67:ee:b0:bb:e7:5b:50:04:d0:ab:04:ea:36:
f9:be:e4:a9:f0:a8:4f:da:e9:6a:a1:6e:02:56:0d:
ac:86:07:4d:b3:69:35:84:40:62:a2:4c:6e:a9:96:
65:b9:f1:3a:e7:10:37:dd:8b:81:cd:af:27:43:7f:
ae:18:41:59:6b:25:fe:ea:be:32:d8:ca:97:57:1f:
f5:df:d4:a3:cc:9e:a6:33:a6:3d:54:bf:77:df:e4:
25:44:15:89:f1:18:18:51:b8:a7:1c:5f:37:c9:78:
ec:94:1b:16:59:b7:8d:e2:04:f6:9f:f9:a2:d2:b5:
ae:7c:82:23:54:17:35:5b:2d:b0:e6:54:96:27:02:
54:b1:11:2d:49:8e:d3:f3:72:e1:6f:8f:b8:68:90:
e1:5f:1f:3c:0b:3b:46:aa:18:d6:85:41:e9:74:c9:
a0:80:83:40:86:90:7e:63:c4:75:21:c9:c9:bc:b9:
0b:60:79:dc:37:50:fa:65:91:19:e3:6c:91:d7:9e:
52:53:65:f2:48:05:1c:f3:fb:78:52:e2:cb:58:b1:
ce:96:41:9a:a6:b6:c9:d1:05:20:53:2a:53:31:c4:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:91:C2:A5:46:AA:D6:5E:01:78:4D:DF:45:92:52:BC:F6:9B:D7:40
X509v3 Authority Key Identifier:
keyid:BE:18:68:20:5B:3D:13:73:55:AA:71:F2:46:72:95:CD:87:19:52:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhhoIFs9E3NVqnHyRnKVzYcZUsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/d980d1-92c8-44b4-a5ab-757f99927571/1/vhhoIFs9E3NVqnHyRnKVzYcZUsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4e:ec:cb:01:7d:8e:34:c3:45:03:a8:1c:54:df:8c:02:4b:
b3:8a:42:a2:07:f3:0b:17:65:8a:4f:59:61:c6:70:4c:9a:7e:
1e:b9:05:ca:95:99:10:ce:5b:9d:c6:30:81:59:c9:9f:7c:4d:
be:0a:4f:7c:99:51:68:15:b0:fb:21:9e:ec:b3:9f:a8:38:10:
74:cf:b8:fd:9c:22:26:3d:c2:6e:ae:8b:52:09:0f:11:de:1f:
90:5b:b3:34:de:e7:97:b9:97:c1:06:c3:c8:b8:2f:22:70:af:
5d:0c:77:e3:c6:46:59:36:8d:f2:f9:6f:32:a6:3b:93:dc:b4:
ce:c1:47:c3:d9:74:f0:fb:1c:df:e7:8a:77:7c:10:74:cd:80:
05:b8:2f:62:0e:6a:fa:4b:d6:15:7a:84:dc:8a:c8:cf:79:a5:
72:51:a9:15:ce:da:4c:85:5b:67:3d:26:08:da:e5:ed:a6:c6:
c4:3a:11:94:6a:79:f6:b5:13:a8:19:a0:57:ce:4e:da:d6:c1:
c2:a4:32:d2:c0:23:7f:35:03:64:99:61:67:53:23:af:17:1b:
3f:c2:c6:ce:75:72:a4:1c:46:cc:fd:ea:78:d0:58:92:b8:b3:
33:d8:6e:e2:f1:f0:51:20:03:09:39:a6:21:d7:94:73:bd:ef:
5e:22:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:28:07 2026 by rpki-client