Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: Qp7zyKUkWqWRqB0sEVrZR4qIWcmPeitZBw53MJtwOQ4=
Subject key identifier: 3A:26:B7:7A:89:30:69:B2:B3:F5:7A:8A:E9:06:48:51:B5:4A:51:C3
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 019DA378A4C194E9556EC28C7E8082C104EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 02:01:25 +0000
Manifest this update: Sun 19 Apr 2026 02:01:25 +0000
Manifest next update: Mon 20 Apr 2026 02:01:25 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: INaAs6AKytpdhAlkrIgVFwIm+kW1ZgqP6F79+q9iNI8=)
2: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (hash: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a4:c1:94:e9:55:6e:c2:8c:7e:80:82:c1:04:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Apr 19 02:01:25 2026 GMT
Not After : Apr 20 02:01:25 2026 GMT
Subject: CN=3a26b77a893069b2b3f57a8ae9064851b54a51c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:30:81:f3:67:89:cb:18:85:c4:dd:ab:f5:
14:00:b3:bd:f3:35:28:53:de:4e:4b:58:0d:d6:4f:
08:28:6d:0d:1f:b2:00:41:79:36:5f:35:25:35:e0:
01:a8:31:91:5e:ab:4e:91:9a:e6:19:e8:5d:1a:3a:
11:b1:32:57:27:b6:a4:5c:91:e5:b2:c7:62:ce:0f:
9a:b1:2e:35:b0:be:9c:04:23:84:dd:0f:35:be:3a:
28:dd:ee:3c:81:ac:75:b8:9c:7c:cb:0a:26:dc:9a:
c3:90:8a:68:e6:a5:78:76:00:93:65:3f:51:f4:ea:
48:9b:e6:bc:2f:e5:7f:1f:1b:ce:f9:e2:ea:b9:35:
50:66:6d:fb:17:94:6d:33:77:6c:93:23:b7:94:dc:
3d:77:d6:63:7c:fd:be:aa:09:47:11:76:5a:03:df:
db:d2:cc:80:ea:5e:cf:81:cd:5b:63:cf:3c:aa:05:
06:28:4a:e8:c8:12:ac:a3:e1:e6:5c:0c:32:88:86:
18:1a:62:83:79:40:4c:15:9a:9f:e0:f5:00:ed:ff:
83:c3:04:21:fa:12:54:34:31:97:e7:ad:44:18:25:
02:e6:1c:22:ea:ee:1f:29:e4:5b:ec:55:0f:79:4b:
9a:84:0b:8e:69:04:cb:83:16:f3:2c:fc:17:6a:ec:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:B7:7A:89:30:69:B2:B3:F5:7A:8A:E9:06:48:51:B5:4A:51:C3
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:85:bf:a7:7a:23:49:af:fb:b0:bc:51:1a:e6:a3:87:a3:b5:
66:5e:69:56:e5:75:55:ac:d6:21:e4:9a:1e:01:87:f4:4b:3c:
70:75:cb:37:db:02:d3:be:c9:69:f3:d1:77:4f:0b:00:68:b8:
65:7f:52:ed:1f:1d:0a:8f:a2:36:a7:f7:4e:c3:18:6a:8a:c9:
df:cf:03:92:54:75:b3:ce:7c:73:43:1c:71:30:5b:6c:6d:8c:
c5:c9:ac:73:3c:b0:90:0d:f1:88:7a:c6:f4:d4:1f:97:bc:a0:
cb:fe:18:23:af:57:60:c0:21:22:8b:c6:d5:9b:71:04:08:95:
53:6e:f9:9e:5c:4a:90:8e:9f:c8:d5:47:43:1a:39:42:1e:d2:
1e:ed:0d:05:24:11:51:15:25:a2:23:95:7a:a2:3d:08:2d:0d:
dc:a8:44:0d:8e:b3:79:48:0a:8d:b9:2a:4c:e7:13:b3:7b:d2:
a3:68:4c:74:99:3a:da:81:b0:99:5c:46:c5:f5:bb:a8:57:79:
6f:5f:2a:04:ea:87:ef:8e:90:9b:a4:08:e9:a8:90:86:49:35:
95:43:62:4f:7c:f3:82:cf:fe:d6:7f:31:1f:27:6c:c5:cf:3e:
ce:82:9e:e8:58:83:c8:3a:1e:fb:7f:6e:de:5c:e9:34:74:bd:
dd:bc:57:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeKTBlOlVbsKMfoCCwQTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky
ZDc5M2QwHhcNMjYwNDE5MDIwMTI1WhcNMjYwNDIwMDIwMTI1WjAzMTEwLwYDVQQD
EygzYTI2Yjc3YTg5MzA2OWIyYjNmNTdhOGFlOTA2NDg1MWI1NGE1MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD0wgfNnicsYhcTdq/UUALO98zUo
U95OS1gN1k8IKG0NH7IAQXk2XzUlNeABqDGRXqtOkZrmGehdGjoRsTJXJ7akXJHl
ssdizg+asS41sL6cBCOE3Q81vjoo3e48gax1uJx8ywom3JrDkIpo5qV4dgCTZT9R
9OpIm+a8L+V/HxvO+eLquTVQZm37F5RtM3dskyO3lNw9d9ZjfP2+qglHEXZaA9/b
0syA6l7Pgc1bY888qgUGKEroyBKso+HmXAwyiIYYGmKDeUBMFZqf4PUA7f+DwwQh
+hJUNDGX561EGCUC5hwi6u4fKeRb7FUPeUuahAuOaQTLgxbzLPwXauwIIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDomt3qJMGmys/V6iukGSFG1SlHDMB8GA1UdIwQY
MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt
NGM3NGQzMzJlYTU4LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4
LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoW/p3oj
Sa/7sLxRGuajh6O1Zl5pVuV1VazWIeSaHgGH9Es8cHXLN9sC077JafPRd08LAGi4
ZX9S7R8dCo+iNqf3TsMYaorJ388DklR1s858c0MccTBbbG2MxcmsczywkA3xiHrG
9NQfl7ygy/4YI69XYMAhIovG1ZtxBAiVU275nlxKkI6fyNVHQxo5Qh7SHu0NBSQR
URUloiOVeqI9CC0N3KhEDY6zeUgKjbkqTOcTs3vSo2hMdJk62oGwmVxGxfW7qFd5
b18qBOqH746Qm6QI6aiQhkk1lUNiT3zzgs/+1n8xHydsxc8+zoKe6FiDyDoe+39u
3lzpNHS93bxXCA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:22 2026 by rpki-client