Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier: 1zOgE1yBhHSDkNMTDJA5drCKcB4FMw6mERAhirjKcN8=
Subject key identifier: C5:CF:DF:DB:69:FA:28:B6:92:9D:CF:8E:2F:F2:AD:C1:31:2D:BF:C7
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 019D98BD26C2F5B6E4EC6D7173E762794D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:26 +0000
Manifest this update: Fri 17 Apr 2026 00:00:26 +0000
Manifest next update: Sat 18 Apr 2026 00:00:26 +0000
Files and hashes: 1: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: yKbcAW0zkR2l8U0hQidm5i0jm44w1/YmDK6K5d/I6AU=)
2: suOB_ZQoCS-jB4-4M7W0CkzCA10.roa (hash: fu8wltWFAdaXQHJ+Qv7XTp7V+UFU1J7Zj9suudIqJF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:26:c2:f5:b6:e4:ec:6d:71:73:e7:62:79:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Apr 17 00:00:26 2026 GMT
Not After : Apr 18 00:00:26 2026 GMT
Subject: CN=c5cfdfdb69fa28b6929dcf8e2ff2adc1312dbfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:a7:9d:c5:e0:b6:ad:e5:0b:7c:32:32:a3:
22:0f:3a:c8:16:bd:75:55:67:02:f9:40:df:26:f3:
54:65:66:ae:cd:ae:05:1b:06:33:24:51:05:50:ab:
7b:f7:79:68:9b:d8:0a:83:56:79:97:40:8d:8e:4b:
a8:a4:ea:da:35:f6:a6:0a:f7:7c:55:44:0f:25:56:
9d:33:3f:a3:91:d1:2b:ff:a5:37:41:b5:bb:dc:51:
92:d1:e3:c1:c2:dc:3d:8e:91:ad:64:30:2f:a8:13:
4f:d5:c5:fb:8b:ea:c3:8b:16:bf:3a:2e:d8:3f:cb:
5f:50:e9:56:9c:6b:7e:0c:5a:7e:7d:25:e7:69:04:
92:d8:99:e0:ea:67:ee:70:36:b8:38:1c:12:89:51:
5a:4c:5d:95:25:0c:46:4d:09:dc:87:c9:12:8d:52:
47:c0:19:b7:45:2f:a3:87:5f:d5:75:a3:06:4d:05:
47:90:01:49:68:ea:2e:08:96:35:3d:e5:a8:1a:6a:
e9:02:23:ac:9f:58:d7:81:9e:f1:82:df:2b:db:5d:
cf:22:3f:c8:7a:f4:45:14:d4:02:8f:e9:15:aa:ee:
a8:1c:1c:b2:a6:15:47:fb:73:f6:a1:4b:b8:5c:fb:
0a:dc:0e:96:90:13:47:4f:8e:b0:cd:ba:ee:35:1e:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CF:DF:DB:69:FA:28:B6:92:9D:CF:8E:2F:F2:AD:C1:31:2D:BF:C7
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:eb:50:60:42:8e:7e:82:b9:29:ac:6f:79:c4:05:10:97:d9:
52:4a:48:c2:5a:b7:e9:10:07:94:34:ac:2d:c1:fe:e9:12:68:
dc:6c:65:54:c6:f8:c4:14:19:11:25:3b:36:5b:dd:a2:54:87:
21:13:81:1c:6c:12:e8:f6:51:00:e6:a2:4d:88:a7:af:e6:7e:
65:f9:c5:bd:67:23:9c:b3:48:af:62:8c:85:b3:14:a1:c9:a6:
b0:a2:d5:20:b0:06:f8:db:90:fc:b6:8c:c5:eb:d9:a1:6a:3d:
ec:a4:ad:ed:d8:6c:44:96:2e:e4:26:2a:23:31:cf:4b:38:82:
b9:c7:41:9b:92:c6:09:30:d4:ef:8c:d5:b6:9f:cd:22:cc:a4:
c0:4b:2e:e9:1c:46:c9:dc:33:07:50:4e:a3:08:59:1e:11:54:
72:1a:bb:b8:d5:c0:30:d0:e6:93:8e:f8:44:87:55:20:75:9a:
57:e5:15:a3:15:c2:d2:3c:30:55:4c:ff:50:89:ef:72:2b:2c:
9e:e9:41:8f:2f:da:1a:37:3e:2c:7f:2b:51:0d:f0:71:ff:81:
80:95:53:dd:00:46:42:b9:db:ae:9a:6b:a8:94:d8:84:07:85:
d3:6e:e9:d9:b6:29:c2:02:60:a9:56:5b:4b:cc:f7:91:c3:c6:
66:ab:75:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:51 2026 by rpki-client