Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier: IT23KVLL4+mWazqrlcaaJQ7qV9d5s3MOKyWupvevqxY=
Subject key identifier: 40:5B:40:DA:BC:6F:38:E4:68:B0:50:0B:21:FF:94:DF:BA:00:80:E0
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 019D99631105E2F2A2F4BEF40262F441D4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 03:01:39 +0000
Manifest this update: Fri 17 Apr 2026 03:01:39 +0000
Manifest next update: Sat 18 Apr 2026 03:01:39 +0000
Files and hashes: 1: 5OsbbnnHwhVNORbPHv-OJIeuoGI.roa (hash: XRJA8VpJASXYSnFu9o5yKclI6PUgREHgPT2bBiqSOmk=)
2: XiD6lDrgMPuS8eayCDVkIbui-4s.roa (hash: SBkJkhDft5A8cF6t/KuhZfif5su+kzjqoUhMEaiSsSk=)
3: pBECGuvlqI1JRG7h1KFoBdoLOQQ.roa (hash: g1yrRU6vVwlNdEkW9jmsyPMMiYUAGVw0ecH5Z2RUhlM=)
4: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: HuBDtHnvPqtEsysiSkg3OVHbYwe14kePC4GgRkbALXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:11:05:e2:f2:a2:f4:be:f4:02:62:f4:41:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Apr 17 03:01:39 2026 GMT
Not After : Apr 18 03:01:39 2026 GMT
Subject: CN=405b40dabc6f38e468b0500b21ff94dfba0080e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:b7:1e:d9:c6:f5:74:5c:3c:38:c2:7b:ae:
12:e1:f2:d4:be:08:e7:84:fb:98:3f:43:94:0f:a3:
ce:a3:36:6d:1c:82:48:e6:ad:26:ae:56:11:22:6c:
97:80:55:32:94:82:d8:04:fa:f5:1e:07:aa:1b:5a:
6a:15:c3:53:bd:03:91:26:3b:c4:de:4f:00:e6:44:
9b:db:94:04:e8:88:f4:fd:df:97:7d:99:6b:a5:e1:
03:49:46:9f:ab:2d:8c:ee:46:01:7b:82:61:49:55:
a1:b1:0f:e1:93:82:a6:8b:d0:5e:62:7a:ac:64:59:
05:72:31:f9:1c:f0:db:bd:71:17:9d:54:cb:e1:6b:
45:e4:88:9a:45:dd:5c:52:66:bf:12:b2:66:48:23:
d3:e3:54:aa:80:77:51:20:02:50:60:de:c9:3d:53:
b8:ef:f1:c0:52:ba:6d:93:81:4a:3e:4f:a4:75:34:
0f:6c:a0:6a:cc:3f:d6:6f:fa:30:a4:e4:de:8b:bc:
35:15:84:c6:46:4c:cd:c5:87:0c:92:2f:2c:0e:80:
e4:48:05:23:2e:5c:08:70:39:11:3a:ac:4e:e8:c0:
ac:c7:36:7f:69:a6:fd:a0:1e:fd:0c:9c:a3:d1:d3:
d0:d3:65:4b:33:8c:c2:be:06:4b:4f:11:0e:f3:aa:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:40:DA:BC:6F:38:E4:68:B0:50:0B:21:FF:94:DF:BA:00:80:E0
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e1:dc:93:71:78:56:2b:d7:bd:9e:bb:a4:47:83:0a:65:54:
43:c9:5e:1b:bb:94:41:27:d4:b2:45:1e:10:3a:b8:f9:3f:3d:
0e:1e:19:dd:bf:f9:7a:fc:ef:e9:eb:df:3d:9a:ca:e0:d9:95:
af:08:50:ab:e2:4a:c7:93:1e:e8:8a:6b:a7:71:fd:0c:14:78:
45:04:a6:66:97:e1:a4:4b:a3:8a:f6:26:1c:2b:65:db:02:81:
ea:9f:f1:f7:bd:d6:e4:ca:31:7a:99:4e:67:9b:cf:1f:ac:8d:
9b:3f:c1:31:84:d2:bf:86:19:23:1f:62:16:5b:c8:ec:ae:93:
37:67:46:a0:fe:22:3b:f5:80:51:68:26:64:08:a8:65:b6:85:
05:fa:13:47:a9:b1:1d:aa:cc:2a:29:bc:97:30:2b:ea:d1:d5:
b7:5c:a3:2a:e7:fe:be:e8:f6:6f:06:f3:de:01:51:96:84:71:
b6:ca:d5:fe:4f:54:d7:6c:79:2c:64:67:55:37:1e:07:40:4f:
a9:b3:03:27:6e:6e:6b:0a:ee:70:45:a6:ed:60:10:f1:35:13:
48:33:f8:1e:68:4b:cc:b2:7a:08:0c:cd:6b:0d:43:72:fd:15:
fc:d5:08:4b:e4:92:11:74:cc:38:c4:c9:a7:96:76:ab:11:63:
33:c0:e6:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYxEF4vKi9L70AmL0QdT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh
NzQzMWMwHhcNMjYwNDE3MDMwMTM5WhcNMjYwNDE4MDMwMTM5WjAzMTEwLwYDVQQD
Eyg0MDViNDBkYWJjNmYzOGU0NjhiMDUwMGIyMWZmOTRkZmJhMDA4MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHu3HtnG9XRcPDjCe64S4fLUvgjn
hPuYP0OUD6POozZtHIJI5q0mrlYRImyXgFUylILYBPr1HgeqG1pqFcNTvQORJjvE
3k8A5kSb25QE6Ij0/d+XfZlrpeEDSUafqy2M7kYBe4JhSVWhsQ/hk4Kmi9BeYnqs
ZFkFcjH5HPDbvXEXnVTL4WtF5IiaRd1cUma/ErJmSCPT41SqgHdRIAJQYN7JPVO4
7/HAUrptk4FKPk+kdTQPbKBqzD/Wb/owpOTei7w1FYTGRkzNxYcMki8sDoDkSAUj
LlwIcDkROqxO6MCsxzZ/aab9oB79DJyj0dPQ02VLM4zCvgZLTxEO86pHTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBbQNq8bzjkaLBQCyH/lN+6AIDgMB8GA1UdIwQY
MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt
NjE1YWNhNTFlMmY2LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2
LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+Hck3F4
VivXvZ67pEeDCmVUQ8leG7uUQSfUskUeEDq4+T89Dh4Z3b/5evzv6evfPZrK4NmV
rwhQq+JKx5Me6Iprp3H9DBR4RQSmZpfhpEujivYmHCtl2wKB6p/x973W5MoxeplO
Z5vPH6yNmz/BMYTSv4YZIx9iFlvI7K6TN2dGoP4iO/WAUWgmZAioZbaFBfoTR6mx
HarMKim8lzAr6tHVt1yjKuf+vuj2bwbz3gFRloRxtsrV/k9U12x5LGRnVTceB0BP
qbMDJ25uawrucEWm7WAQ8TUTSDP4HmhLzLJ6CAzNaw1Dcv0V/NUIS+SSEXTMOMTJ
p5Z2qxFjM8Dm9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:04 2026 by rpki-client