Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: qZ1QuaPYhiKmWeFmAr7x9PQqZDxOboMZDqsnUFTvmzI=
Subject key identifier: 1D:E1:FD:C8:09:25:5E:68:15:58:8F:EF:BC:09:2F:B6:1A:1A:8A:1D
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 019D99D09B45873CE26D4EE41E7F5504B32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 0298
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: 6Qi3TB3VbEZamoSpD8uWLVftrLABvR46ku2Hmcpb9t8=)
2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9b:45:87:3c:e2:6d:4e:e4:1e:7f:55:04:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=1de1fdc809255e6815588fefbc092fb61a1a8a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:5e:f2:e0:d6:c7:e7:dd:28:ef:fd:fe:38:
e8:e4:63:cf:b1:37:ac:10:e8:1f:98:60:22:4e:fd:
87:d6:47:38:1b:ba:a1:a1:6e:59:cb:af:43:68:08:
f2:d5:9c:9b:ac:6b:32:92:90:a1:23:34:65:45:f5:
c4:e3:96:71:3c:20:83:22:21:a0:83:ed:9a:ea:5e:
3c:0c:f2:fd:b4:a9:2e:44:e6:24:66:30:f3:97:65:
05:88:80:c0:01:3c:7a:a0:8c:91:46:4a:dc:03:8a:
bf:46:5c:eb:a3:f4:cc:ae:8e:e9:fc:fd:55:17:37:
83:3f:95:5e:f2:c4:df:cb:64:1a:d0:15:58:b4:14:
c2:de:7a:3a:19:af:f7:04:63:b4:92:20:49:26:46:
7c:ae:20:57:1c:81:a2:4d:15:bc:21:f4:2b:f8:79:
cf:ec:95:4d:99:10:23:ac:17:ca:27:58:96:5b:07:
8b:be:5a:08:52:cb:08:c3:93:3b:46:34:9b:54:3b:
ac:a8:ce:a6:9a:73:e0:98:e0:ff:0d:39:cc:d2:ec:
18:5a:f4:e0:05:97:fe:0c:fa:27:d4:a8:94:a1:5e:
3c:de:7b:96:7c:6b:df:75:42:39:e1:0b:28:55:b9:
26:dc:70:60:3d:2f:e0:3a:d7:80:23:df:b3:49:5c:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:FD:C8:09:25:5E:68:15:58:8F:EF:BC:09:2F:B6:1A:1A:8A:1D
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:0b:47:c5:10:f9:db:8f:74:ed:63:ee:35:32:60:ae:6e:1a:
cd:b1:eb:f0:a5:df:d0:9f:30:1b:78:66:87:83:df:1c:21:0c:
4b:d8:b9:dc:a2:74:bd:ac:d1:f5:83:29:49:98:57:fa:4d:33:
7a:0f:fb:e7:86:11:65:46:04:86:da:7c:3a:64:ce:f4:89:0f:
19:92:39:d1:b1:e5:f3:69:c5:a4:ca:44:7b:98:ee:60:62:27:
9f:67:a5:68:be:e5:57:6b:8e:f6:59:73:2f:02:c7:4a:7f:f5:
4d:ba:79:37:f2:d9:d2:54:e7:b3:93:04:e6:b1:eb:30:1f:b1:
5f:a1:10:90:d9:0a:e6:cd:a1:1e:cb:ee:17:44:29:08:28:b5:
b1:df:9c:fc:87:9c:80:03:d2:bd:af:36:49:44:8c:75:22:50:
3e:ec:8a:c8:83:33:3e:fd:af:3a:2d:4f:d7:ae:82:ee:41:02:
a6:df:04:1a:bc:c5:b7:78:65:a1:03:10:b4:9d:04:10:98:57:
af:4a:55:0c:ae:d1:ab:b7:b2:60:15:ea:68:16:90:94:1b:a9:
6d:5f:f3:e5:96:d9:2c:02:58:12:30:26:45:52:58:89:16:53:
9f:df:a2:80:3a:00:86:79:ff:18:33:a1:5f:75:8c:42:ec:95:
f0:87:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:52 2026 by rpki-client