Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File: VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier: elBmyCJ7WOE/N94VK0nAgYlmCUQPb7AlrYYcDYUXEfE=
Subject key identifier: BE:21:C6:D8:20:BF:CB:C4:2D:35:69:FF:EC:33:0B:8A:A8:70:70:E2
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer: /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial: 019D9A74981D7E49A5D6C0AC962A34ED78CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number: 11ED
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: uTLVSEX0Oij9XlpG/s7UzkZZ1E30N2Np8omFuRAJnEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:98:1d:7e:49:a5:d6:c0:ac:96:2a:34:ed:78:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=be21c6d820bfcbc42d3569ffec330b8aa87070e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:e6:78:5c:e9:2d:b9:ef:30:8e:27:29:42:
82:13:f3:d6:b3:31:ae:7d:e4:6d:73:42:a2:66:df:
28:40:6e:e2:ed:2a:69:cb:2a:8d:6a:7c:50:62:f1:
d4:50:59:cf:09:95:03:7a:4c:53:c4:02:a4:ca:69:
bd:41:09:9a:82:c4:a3:55:36:08:6b:c9:16:d1:ff:
38:d2:28:7a:7b:1b:b0:0a:18:9f:c1:b9:a9:32:33:
6a:19:63:14:56:24:7f:e0:09:c9:4b:6f:10:49:a8:
e1:41:e6:da:28:83:43:8a:0a:7b:45:f8:46:4e:88:
b1:9f:51:71:d2:a1:69:f8:27:9c:8c:60:0b:5e:24:
b9:cc:0a:11:5a:df:33:10:dd:0a:06:f7:cc:59:b2:
fa:81:9a:bd:13:f7:01:28:19:1a:16:a6:1e:7b:fb:
22:a8:ed:f0:98:4d:ba:48:d1:d7:26:69:6d:f4:c4:
fc:a5:a0:cf:cd:45:85:15:84:22:07:b7:14:9c:c0:
36:bc:57:d0:65:f4:fb:b1:5e:e3:76:17:71:b6:4a:
46:3f:ab:c8:7d:3a:33:85:b8:d7:66:2b:09:df:7e:
1a:50:ab:f0:2d:0e:9e:e2:02:e2:ef:c7:f9:a7:c6:
01:db:2e:09:02:29:60:05:a5:e0:bf:70:86:78:bc:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:C6:D8:20:BF:CB:C4:2D:35:69:FF:EC:33:0B:8A:A8:70:70:E2
X509v3 Authority Key Identifier:
keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ac:2a:a8:cb:ad:a0:dd:03:f8:10:9b:f5:ee:a7:3d:95:00:
ca:c4:49:05:07:73:4f:81:6b:1b:c9:fc:30:3d:37:7b:87:aa:
1a:dd:c4:76:ec:20:b3:ac:e8:3a:46:b0:08:e1:91:57:64:20:
5c:3e:d0:6b:f8:6b:22:d4:ea:73:a3:60:73:33:12:e0:8e:ed:
f8:a2:c5:d7:2c:02:f7:c7:26:b3:c3:9b:18:bd:04:71:be:b1:
98:54:fb:41:a2:7d:7d:79:a0:88:7b:d2:ee:cf:9b:04:38:2f:
2d:89:6e:41:f0:c9:d4:ed:ff:86:e4:45:71:64:17:63:9c:70:
3a:3b:86:36:e4:23:c2:b3:6e:e1:8d:17:d6:ce:3f:66:ba:d6:
2b:9c:2e:a2:8f:af:78:c1:62:e7:60:eb:0e:a9:b5:f4:49:a7:
32:60:0b:33:39:54:e2:94:55:a4:99:6e:c7:62:7f:1c:34:54:
69:93:f0:2a:11:ab:01:fc:33:bf:4a:37:40:49:dd:b4:86:e5:
81:94:ec:4b:a5:8b:d9:03:44:b0:50:24:b5:72:44:0d:cc:86:
12:cd:4f:13:8c:3d:5a:e4:e7:1a:f7:0e:88:ae:21:1c:76:c3:
4f:bb:5f:2f:db:00:50:c2:03:2e:d3:82:40:87:1d:a6:5a:ee:
85:6c:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:30 2026 by rpki-client