Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File: VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier: eW/5RSkP8yffg75MkoRO/ecqy1diIdK7C1uKylfDTIU=
Subject key identifier: 83:42:DE:83:B1:59:E4:A0:EB:6E:BB:A7:F4:07:56:96:14:3E:87:CE
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer: /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial: 019D992B986D755D7A13660D8AAF44B55D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number: 0BA4
Signing time: Fri 17 Apr 2026 02:01:04 +0000
Manifest this update: Fri 17 Apr 2026 02:01:04 +0000
Manifest next update: Sat 18 Apr 2026 02:01:04 +0000
Files and hashes: 1: CzItBfhQLOr19TXshG8xIrAepZo.roa (hash: ZsL/eMEoqm5jb00MeORDPPBuXgnALTUh1B2vg5ljlWY=)
2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: 1bRm1FrrMqS91V3FpPn5krd1/V9+9/TNrA6ivGptXC4=)
3: WXvsTnxMt47LTjXSgDyfYfbpykk.roa (hash: u83fQhVuD38r45zKJ9wB4bVcPJz4aOcg9/qnwLnAsDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:98:6d:75:5d:7a:13:66:0d:8a:af:44:b5:5d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Validity
Not Before: Apr 17 02:01:04 2026 GMT
Not After : Apr 18 02:01:04 2026 GMT
Subject: CN=8342de83b159e4a0eb6ebba7f4075696143e87ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:a7:e9:ec:c8:d1:38:55:64:34:6c:c5:30:
6e:f8:eb:d6:f5:30:76:22:af:74:17:0e:56:bb:e2:
c5:d7:cd:37:e6:62:33:86:9a:81:4a:68:1e:ee:8c:
38:f3:b6:e7:0a:0a:09:13:d4:f7:04:c8:a1:12:42:
66:64:48:a9:25:e1:51:22:8f:27:fb:c7:9e:07:2f:
a0:f0:d8:e9:08:37:7a:cd:ca:9a:68:a5:4c:8f:15:
42:31:9e:e0:54:b9:4e:31:77:90:fa:01:74:fc:47:
e8:fe:69:cd:8a:61:6e:c0:45:32:e0:a9:ec:9f:ca:
ef:8b:77:4f:e1:e8:58:15:99:cd:0c:9f:a2:0a:b7:
61:ec:e7:b5:ef:ab:85:00:dd:3b:97:7b:a8:2a:6d:
a4:0e:23:8c:3b:9d:46:8a:1d:a5:cf:e3:bf:2c:2f:
f6:c1:71:37:a9:c5:62:a8:7d:e5:aa:5a:20:1e:47:
41:12:df:01:7c:b7:6c:74:0c:11:cb:d7:fd:48:96:
74:7d:b5:e4:da:ab:59:b2:f1:c1:94:4a:28:35:65:
46:0b:98:5b:6e:07:9a:52:ef:01:7b:72:01:cf:36:
bf:63:06:59:cd:16:53:46:29:e0:d0:71:6e:73:a7:
93:34:c2:a1:68:fc:f4:13:19:00:0c:7b:0b:7c:d7:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:DE:83:B1:59:E4:A0:EB:6E:BB:A7:F4:07:56:96:14:3E:87:CE
X509v3 Authority Key Identifier:
keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:b7:db:14:32:54:e6:ba:cc:52:41:ad:a8:9e:3d:c1:71:
94:4f:51:00:f7:15:3e:8f:d8:7e:d3:b5:d4:08:3b:07:5c:b0:
26:13:ca:f5:98:77:69:79:88:98:66:30:d0:03:95:38:52:19:
2a:b7:a1:e9:d4:f8:60:a8:16:f1:3b:b9:6c:d6:8a:48:26:5c:
bd:46:95:a7:ee:cd:fe:4d:2a:50:43:36:7e:eb:61:f6:42:7d:
03:23:09:d0:88:8d:dd:85:eb:d7:4e:98:ef:44:4b:75:9f:54:
26:5f:e4:5e:f4:e9:f8:3f:3a:a7:5e:35:d9:72:72:1c:f0:07:
39:81:a6:4b:53:56:a8:91:43:9b:24:e5:ef:bd:3d:f6:7d:b7:
c5:2b:77:fd:30:eb:0a:6d:66:cc:e1:58:e8:ba:ec:a5:c1:49:
58:0f:b0:04:44:99:de:57:73:a2:b8:49:d1:9e:c1:19:10:43:
fb:61:0d:92:7a:89:dd:d4:c7:f5:77:f6:27:a7:1c:f6:d5:c0:
16:7e:c6:58:8d:e5:b4:b4:91:35:b9:08:40:9d:59:9b:f0:b2:
3f:43:2a:29:c7:61:9c:da:b2:37:3b:19:f5:c0:d5:50:9d:68:
ec:35:39:3a:65:35:86:f4:0e:09:f7:28:99:5b:f3:7d:70:37:
c9:4e:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:22 2026 by rpki-client