Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
File: VXe0uHq4aspXflbjjVuKWBPMzD0.mft (raw, json)
Hash identifier: AG1i4JVQ9q1ZC51cT3/4nkm4opn4aTfUxznJRnLtadk=
Subject key identifier: 75:5F:9C:A3:81:4A:C6:B1:6A:81:C3:A4:D3:E1:1C:C9:2E:20:5C:4E
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 019D9A3E88CD96CBA821D9C01D1717806025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
Manifest number: 13F4
Signing time: Fri 17 Apr 2026 07:01:22 +0000
Manifest this update: Fri 17 Apr 2026 07:01:22 +0000
Manifest next update: Sat 18 Apr 2026 07:01:22 +0000
Files and hashes: 1: VXe0uHq4aspXflbjjVuKWBPMzD0.crl (hash: xiohP3H/3cnKR+G7AQtYv+FsY9TvRioEJq+qPA7z+AQ=)
2: wtAobWAtIsJ9eoMextQEU1zoyGo.roa (hash: QGRc3yCeMrwfNC3vCqeJOv3KoeMn2Gn4BzCoJrTisLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:88:cd:96:cb:a8:21:d9:c0:1d:17:17:80:60:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Apr 17 07:01:22 2026 GMT
Not After : Apr 18 07:01:22 2026 GMT
Subject: CN=755f9ca3814ac6b16a81c3a4d3e11cc92e205c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:b1:d9:55:0f:19:68:40:3a:9e:fb:dc:1f:
1b:45:48:19:1b:7a:ce:d5:e3:b6:fa:f3:c1:64:c7:
9e:2f:dc:51:f8:a6:6c:0d:6e:4a:05:51:55:9a:2b:
a1:b5:7f:75:3a:ba:67:fb:d9:3b:5b:d8:53:bf:e3:
ea:01:9e:74:b9:68:c3:be:d7:ad:fc:e7:d4:4d:ac:
cf:78:2b:d0:f2:8f:ea:08:9e:e3:34:f1:de:cd:13:
d2:c7:82:40:71:f5:76:ed:81:30:8b:23:1a:f7:b0:
ac:66:ab:a5:56:da:73:96:2d:c9:e8:20:0a:0f:36:
17:f8:32:19:da:58:ac:85:26:0a:3a:6b:32:4d:b7:
7e:47:9e:22:59:2e:43:4d:5d:8b:55:10:e7:f5:53:
1e:99:47:40:c2:19:67:5d:c2:a6:90:94:a1:0b:ea:
15:6c:57:a1:8b:f1:04:d4:ba:a5:a1:d8:fe:18:dd:
ff:9e:c8:f9:bd:06:c1:41:f8:70:80:ca:09:53:9f:
48:e2:e7:85:81:72:6d:1a:85:a6:3a:bf:8f:20:6d:
2c:70:ee:7f:89:14:64:47:6e:8d:04:4d:8b:24:ac:
2b:52:65:5e:90:5c:7b:91:d4:89:6b:7b:42:21:05:
58:68:d8:cb:dc:ad:f0:5e:33:84:23:7f:b9:03:d0:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:9C:A3:81:4A:C6:B1:6A:81:C3:A4:D3:E1:1C:C9:2E:20:5C:4E
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:e4:44:23:16:7d:de:a2:3a:41:e8:05:1f:33:99:54:7b:
b3:12:40:69:b8:36:89:6e:03:30:8c:36:59:1c:06:13:ef:12:
35:5e:b2:e1:ce:f7:71:75:74:7d:0e:db:fd:9e:47:f6:4c:12:
73:30:b9:f6:f5:1b:8d:59:19:a2:81:6e:62:8a:bc:e7:57:10:
5e:bf:72:e6:61:90:95:b7:86:2d:de:b7:d8:d8:b0:3b:8b:63:
b0:41:21:b1:5c:f3:05:b6:ac:0d:cb:44:3f:23:40:04:a8:22:
81:98:b0:ff:38:a5:09:dd:06:4d:be:f5:23:44:7c:e8:d8:b0:
7e:56:59:a0:6e:62:13:a0:01:95:27:59:b3:f0:75:b5:64:00:
12:c3:e2:49:3a:80:ae:da:6e:df:22:53:f9:14:47:a9:c7:25:
77:a5:64:7e:08:0e:f7:21:f7:3c:4b:0f:79:ee:f9:fa:cc:30:
6e:43:fc:4a:8e:94:34:d3:8f:59:30:aa:94:e3:01:b4:85:e0:
e4:a2:ed:52:5c:13:52:6a:58:9a:65:f8:0d:c8:76:24:3e:27:
dc:10:5e:f0:13:82:0e:2e:ba:73:02:82:65:4a:10:b0:da:66:
71:19:78:58:b0:90:cb:2a:91:a4:45:b0:a6:e2:22:21:69:7f:
09:82:64:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:15 2026 by rpki-client