Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: FYxuzje71FG7hINxX2Ov/8AfUFEfgxZigtkcxJkXZD4=
Subject key identifier: 15:6C:12:30:0E:61:C8:40:1C:6E:E0:3B:AC:07:B6:7B:57:8E:0A:B8
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019D9B874FFB0C99FCABAC2A403A73A08862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 13:00:29 +0000
Manifest this update: Fri 17 Apr 2026 13:00:29 +0000
Manifest next update: Sat 18 Apr 2026 13:00:29 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: dDVIp+vLzcOgkrBWgeuEo0k/DE3G2sp//vhJbDXP/Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:4f:fb:0c:99:fc:ab:ac:2a:40:3a:73:a0:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Apr 17 13:00:29 2026 GMT
Not After : Apr 18 13:00:29 2026 GMT
Subject: CN=156c12300e61c8401c6ee03bac07b67b578e0ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:9c:22:5b:21:a0:3f:28:48:44:ee:f8:b6:
32:d4:ae:cb:12:31:53:ef:47:73:1e:67:9c:1e:68:
93:b7:75:80:6c:a3:b5:b5:03:69:78:89:a3:73:46:
24:48:de:10:17:03:07:2b:16:e3:c6:b8:cd:72:43:
09:3e:23:8f:d5:f4:6f:4a:14:93:81:1d:25:65:fd:
f2:ab:a4:dc:66:a1:8e:94:af:66:2d:54:71:dc:5f:
e2:3e:8c:ae:af:86:40:83:f5:cb:83:02:de:e3:7f:
7b:93:ca:03:d2:1d:37:40:df:c8:77:e6:84:90:30:
0c:3b:d2:8b:79:17:7b:6f:eb:c0:2e:dd:77:d1:7b:
ad:fe:97:41:73:35:d7:78:5e:5a:bb:cd:a9:e3:16:
0f:42:87:7a:72:39:eb:41:5a:52:6c:55:5e:1b:8f:
64:0a:44:c6:18:c5:12:07:44:3b:88:ef:55:66:dd:
ba:81:e3:4b:c7:a0:2a:03:48:a9:3c:ba:39:39:fc:
a0:de:83:dd:96:c4:1e:ba:e9:da:32:41:f1:0a:09:
79:29:78:0b:c6:31:51:80:6a:26:dc:c5:0f:5e:26:
df:59:62:19:89:e0:96:12:53:de:29:7f:c4:df:cf:
a0:d0:7a:d7:d3:b8:05:c2:da:aa:a9:10:94:28:69:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:12:30:0E:61:C8:40:1C:6E:E0:3B:AC:07:B6:7B:57:8E:0A:B8
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:b8:04:3d:fa:38:0b:2c:f7:48:08:aa:00:e3:0f:92:11:
f4:cc:88:81:19:8c:01:4f:61:85:83:0b:c5:fb:0e:36:cf:f1:
31:30:66:f1:c4:74:38:9c:21:1e:1d:bb:28:3b:8e:40:03:38:
b7:46:f4:25:bb:42:30:03:5a:c1:49:28:04:90:f6:c3:b9:07:
7f:30:85:69:94:64:d9:4f:2d:69:e2:b1:c2:f9:4a:18:be:0b:
06:40:c8:f3:c9:b1:f8:6e:82:19:3c:dc:33:be:24:b8:7b:63:
53:0a:ab:06:3a:fd:65:40:64:72:f4:c2:2c:4a:40:49:f6:79:
95:41:8e:81:a3:1e:f9:16:dc:97:c2:4b:a3:10:61:01:76:c7:
20:74:46:42:5f:f2:15:5d:22:94:d8:02:77:d5:e0:18:2a:54:
6b:a2:34:f0:6c:08:2c:d3:39:4b:aa:b3:ea:86:4c:3e:37:99:
35:0d:d7:54:22:3c:00:9b:27:8e:87:1d:09:c8:f8:1f:4e:67:
93:75:12:1a:58:8a:b6:42:06:60:f0:42:b0:04:00:69:b4:9f:
85:9f:35:c2:c3:9b:98:ae:71:23:7b:2e:d8:fa:b0:08:83:3c:
34:94:94:2b:2f:dc:b3:b3:05:b2:f1:99:87:fb:3f:82:e3:0a:
17:78:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:46 2026 by rpki-client