Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: 5cbQUQkBVCF7HR8SeLoZ+cmElPtHojZt8ksUc8SHiiQ=
Subject key identifier: 15:03:86:7A:C1:53:34:07:77:9A:2B:1D:F7:04:03:BF:2D:2A:91:B8
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 019D9886ADA2D0315B6542CC3D7A7BE1A200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 09DC
Signing time: Thu 16 Apr 2026 23:00:56 +0000
Manifest this update: Thu 16 Apr 2026 23:00:56 +0000
Manifest next update: Fri 17 Apr 2026 23:00:56 +0000
Files and hashes: 1: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: tQZQuXVYmdMA3+5qWD7M/He6Xs82oth09tFvwlrS8tY=)
2: xdDHjpMxa5Db0sg2IbYCFBzBU4g.roa (hash: i6O8Zdm48WH9FHIuopoB/Fvv/PqB8Y1fepb+H0IN4zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ad:a2:d0:31:5b:65:42:cc:3d:7a:7b:e1:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Apr 16 23:00:56 2026 GMT
Not After : Apr 17 23:00:56 2026 GMT
Subject: CN=1503867ac1533407779a2b1df70403bf2d2a91b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:5f:03:1e:28:93:02:09:39:a5:9d:a2:a1:
6f:d9:aa:d7:7c:33:52:29:a3:71:f0:19:be:9e:fd:
7a:3d:68:d2:b2:d5:21:00:e5:66:f1:57:e9:34:91:
92:70:12:4d:cc:62:33:7c:47:00:5b:dd:17:fb:5f:
41:6e:0d:a8:d2:25:85:f2:ab:43:d7:28:ff:4a:f4:
ab:65:06:65:5a:33:f3:4e:6c:1b:d8:a1:db:fb:65:
97:7a:dd:15:a6:94:41:03:01:ff:74:f2:9f:23:ca:
87:7a:62:99:55:ba:94:20:5f:22:0a:ee:10:64:e3:
40:f3:0b:5e:49:65:ab:5c:20:65:0e:e6:1c:ce:b7:
d5:98:ab:42:40:51:ce:f5:a7:70:cb:00:f4:57:81:
35:fd:de:82:80:87:50:3d:23:6d:67:fd:f3:90:ce:
9a:74:b2:00:1c:94:82:58:b6:d5:2e:7e:a3:7b:4d:
fb:b5:05:3a:93:0b:cd:93:d1:98:14:20:16:d7:9c:
1b:51:53:cf:ee:b0:d0:e6:ce:7c:80:98:b1:ef:7a:
f5:73:da:6a:0a:8b:34:ae:69:5e:5f:db:58:ba:13:
36:26:f6:cf:fb:b1:41:3f:16:a6:a5:a8:71:04:9f:
66:cf:91:ea:0f:19:3c:a3:33:33:aa:84:55:38:9e:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:03:86:7A:C1:53:34:07:77:9A:2B:1D:F7:04:03:BF:2D:2A:91:B8
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:bf:20:03:ae:c3:9d:e8:6f:80:c7:8b:3a:d4:d1:c9:ea:
e7:e5:c0:25:36:45:ea:09:74:8c:3f:c2:e6:86:6a:30:04:83:
a2:7d:e1:0d:d9:c7:7a:2c:50:6e:b4:9a:64:89:f7:54:fb:32:
bc:61:b4:92:47:fd:8a:7d:a2:90:f7:f9:84:cf:e0:f5:ba:3b:
b7:80:3e:93:ca:05:87:38:13:9c:12:4b:c2:3d:c6:55:0e:2c:
8b:20:a5:f0:39:1e:91:82:ef:4b:9e:c0:c2:15:61:f7:3b:cb:
f2:2e:32:b1:80:40:bd:41:55:67:07:df:a1:df:04:a7:35:a7:
df:36:e9:40:1e:13:c1:7e:d3:1c:cc:2b:73:c0:f7:cf:c8:f3:
18:03:47:4f:16:39:82:66:73:6a:dd:c8:a1:f5:a9:f9:91:dc:
61:e0:b6:17:12:5a:db:44:12:61:c2:32:ac:67:ea:11:d5:42:
eb:84:ef:b7:3d:4b:71:ba:2d:0d:cc:6c:ff:b5:16:c1:b7:c0:
6e:2e:0a:39:61:31:62:92:73:bc:c2:15:a6:bb:b6:63:bd:fa:
0f:ae:59:62:82:c6:31:cc:92:31:15:f5:b9:c6:43:dd:14:f5:
c1:9f:1c:29:f6:e2:a8:82:cc:7a:04:42:b6:aa:2a:06:42:7e:
d2:7c:b0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:58 2026 by rpki-client