Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: v0DIW8Hbn28ImS/iqOWoeLIk3w0FXf+On5eCTTkGEPs=
Subject key identifier: 18:26:60:42:FB:FF:3C:9E:6C:74:FC:82:53:6C:E6:04:F2:CC:B6:BA
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 019D9A74DA67E23FD2CF190AE0B9D339122C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 08:00:42 +0000
Manifest this update: Fri 17 Apr 2026 08:00:42 +0000
Manifest next update: Sat 18 Apr 2026 08:00:42 +0000
Files and hashes: 1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: Z6j3NS160U7lp2LL2NAB51Q8dRist2KYj4xCSWCXLL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:da:67:e2:3f:d2:cf:19:0a:e0:b9:d3:39:12:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Apr 17 08:00:42 2026 GMT
Not After : Apr 18 08:00:42 2026 GMT
Subject: CN=18266042fbff3c9e6c74fc82536ce604f2ccb6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:ec:ab:9b:20:0a:17:5b:fc:38:43:88:df:
fe:ab:49:30:30:3e:c9:20:22:fc:35:b3:30:9f:04:
ef:8f:02:50:ee:1b:9b:a0:7c:a3:ef:45:2c:1e:2d:
c4:15:dd:ff:c4:3c:03:1c:b8:1a:32:fc:ed:1c:19:
26:99:80:97:f7:32:16:40:22:7b:db:f1:5b:19:5f:
36:ad:f9:e5:6b:3c:9c:ac:0b:de:32:c8:69:7e:9e:
8c:a0:42:5b:80:85:d5:f2:c8:e9:d7:d5:9a:47:c2:
80:3c:4d:eb:d7:8d:1b:75:20:9f:dc:60:a9:72:a1:
1a:9c:09:7d:bd:db:24:1a:ae:4f:a4:e8:5c:5f:34:
f0:b3:04:49:48:f0:9e:3c:98:71:d8:ac:fc:b8:5d:
ca:ec:d1:eb:6c:bb:16:bc:0c:f2:c6:fc:0f:43:90:
d8:95:98:d6:ff:0c:78:00:fe:c1:c4:e5:f1:b7:f8:
ec:53:e1:15:4a:d9:5f:60:c4:cf:4d:c3:dd:58:10:
75:45:01:1c:ab:bc:aa:1d:04:42:da:1f:f1:4d:7f:
fa:c8:ec:c5:ce:12:f3:31:69:11:e7:c1:3a:d9:b9:
c3:26:e4:c5:62:7c:42:42:28:e1:74:2e:18:35:64:
22:0a:2d:86:c4:f1:c3:6a:01:f0:8b:ff:fd:df:de:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:26:60:42:FB:FF:3C:9E:6C:74:FC:82:53:6C:E6:04:F2:CC:B6:BA
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:03:a5:7b:df:22:c2:7a:c6:b8:a5:b0:13:de:b4:ee:e6:
b8:53:d3:de:cb:1e:8f:d3:ba:9d:f4:9b:13:67:ce:ed:ba:9c:
73:c5:f4:6b:f6:cc:21:ce:9b:6a:20:66:fb:0c:47:04:46:c4:
7a:7a:d8:4f:12:92:64:5f:86:a1:af:8f:d6:5e:2c:6c:0e:cd:
c7:0a:cc:98:d6:a5:b3:db:e9:fa:38:ea:61:7e:7c:94:37:07:
fa:5f:50:6e:78:8d:7e:f8:de:b1:a6:58:8a:7b:2e:7a:f7:a7:
41:15:96:4d:20:ec:80:67:f5:14:ce:da:7e:01:3d:71:05:0a:
91:d1:dc:dd:73:c3:6a:36:da:65:db:87:e7:fb:ce:3e:91:21:
f7:24:90:a2:e5:8c:70:a1:ee:c4:39:e8:da:e5:54:5e:ad:c6:
a8:6f:b0:7e:fe:96:34:0a:40:c1:22:ad:db:cf:cc:52:80:bf:
2d:f3:ac:07:f5:b4:d8:c5:f9:2c:2c:f9:10:c7:f9:9e:db:6e:
73:ae:32:03:45:50:22:ef:e4:7a:48:d3:fd:55:37:a4:a8:1e:
bc:40:df:53:55:0e:51:92:5f:ce:c9:41:13:cb:44:bc:c2:9d:
e7:df:a7:df:8b:be:1c:9c:2e:7a:de:b0:53:b8:ec:8c:e1:bc:
29:a5:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:02 2026 by rpki-client