Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: fzArG/GsRXFDPbqx8+8yu9Nat32OW/KVMjpnP2j1Y64=
Subject key identifier: 0A:42:FD:9B:5E:F9:18:03:02:85:CB:9C:A1:0F:62:EC:53:BA:23:7D
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019D9818748C28C664DD91B0ADE22095ABD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 12E5
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: 2bTJ_cU3SQ-gJfl0bH0gkLStvrY.roa (hash: /WqWxkY//9oNjVYpzmeb2SjQVPFdK4RO0mizarAVGZE=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: 8MSqJRwQ9BrwkKXVgT4jsTCtnNshJA3cyOJqoyWNlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:74:8c:28:c6:64:dd:91:b0:ad:e2:20:95:ab:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=0a42fd9b5ef918030285cb9ca10f62ec53ba237d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:fc:91:ac:95:3e:43:c5:08:97:55:b3:6b:
df:23:74:19:d4:31:6a:b6:a9:38:9a:f9:44:0f:5d:
60:74:c5:ab:b6:97:f9:ed:b0:8c:a9:10:cc:d5:f5:
9b:e8:60:fa:9a:96:b5:e1:9a:01:4c:50:88:7a:b7:
07:d0:82:c3:87:de:1a:19:5f:d9:2c:cf:71:36:36:
db:2d:2a:4a:af:78:a3:1b:9b:45:21:02:36:c2:1f:
67:52:ff:6d:34:30:a3:52:a2:18:6f:10:74:16:9e:
b2:00:d1:0d:04:49:f4:7d:35:98:07:91:a9:3e:d3:
73:69:3f:7c:0b:47:3c:5c:5e:49:e7:ce:67:32:d8:
16:98:79:7d:16:97:76:ec:0a:b0:36:84:57:0c:0d:
bc:f3:0d:50:11:2c:51:08:aa:1a:35:d0:fe:ed:b4:
49:2a:ae:f5:38:d9:d0:87:f6:73:c7:fe:a5:89:88:
3b:41:d1:12:c4:ee:c8:47:bf:f3:7e:f5:89:7d:d6:
f8:8f:eb:cd:6a:23:b7:f5:17:da:01:65:71:e7:1d:
6f:11:5a:39:61:aa:13:01:04:93:37:cb:0e:4e:4d:
b8:83:ac:1a:f3:05:61:c5:71:fc:fd:0f:c6:3d:15:
a1:7a:e4:98:be:02:d0:8a:dc:b7:6d:de:44:c8:5c:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:FD:9B:5E:F9:18:03:02:85:CB:9C:A1:0F:62:EC:53:BA:23:7D
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:8a:de:24:0b:f4:06:31:ef:53:be:68:e5:98:cf:4e:f4:
15:50:54:d1:77:ac:ba:33:07:b2:5b:b1:25:b4:a9:33:8b:8e:
93:e5:36:6a:b0:cc:67:dc:2e:9c:85:1a:6f:00:8b:81:c7:7f:
86:6f:d8:b3:e9:8e:a7:ca:e1:12:2e:20:0f:fe:7a:10:53:08:
61:28:60:27:c6:42:40:ae:81:ec:d0:0a:dc:84:f2:4b:b1:7a:
e5:8a:3e:33:49:bd:e8:1b:78:db:8f:69:39:7e:a3:6a:17:27:
6a:7b:c1:7c:bd:2d:ba:6c:97:34:9b:91:e6:12:a1:ee:cd:6e:
bb:98:61:00:9d:98:68:ea:ea:bd:22:c3:01:95:8f:42:ea:df:
b4:89:7f:21:47:1b:92:0c:9a:f9:3a:4d:6f:b1:f5:81:c1:b4:
a0:aa:f8:4a:46:41:92:c8:17:bb:ea:4b:46:24:f6:27:a6:7c:
7a:61:9a:82:d8:20:da:bc:58:f5:27:7e:db:c4:aa:73:a5:1d:
fe:ac:71:15:8a:b0:d6:52:ee:18:af:25:7a:9b:11:6a:3d:a1:
00:b2:1b:f8:cc:2f:60:8d:46:ae:a3:39:01:60:a5:fa:27:65:
84:73:eb:cb:42:ba:20:92:c3:14:32:01:a5:dd:c3:4c:3c:3f:
96:7a:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:16 2026 by rpki-client