Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: Q+XAM2K3xkZyNcJVuNMj/h4fRMThVjF3KfplT9L73fU=
Subject key identifier: B5:7E:D2:49:E9:DB:05:77:DA:6B:1E:2E:3F:9B:FF:61:A8:B9:97:82
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019D9DAD8F4F3C0CEBF7F56847CF68303972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 019E
Signing time: Fri 17 Apr 2026 23:01:30 +0000
Manifest this update: Fri 17 Apr 2026 23:01:30 +0000
Manifest next update: Sat 18 Apr 2026 23:01:30 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: 1NWLOGAbwq6uiI5M3YXq8aimRGIymbbrhVadQJGPzkU=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:8f:4f:3c:0c:eb:f7:f5:68:47:cf:68:30:39:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Apr 17 23:01:30 2026 GMT
Not After : Apr 18 23:01:30 2026 GMT
Subject: CN=b57ed249e9db0577da6b1e2e3f9bff61a8b99782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:ca:10:98:d8:3f:e2:1a:c5:17:45:21:98:
83:bb:ce:6f:b2:6d:42:6b:cb:ab:a8:7d:fe:24:e8:
28:d8:5d:20:8b:27:b7:ad:e8:9d:6b:08:dd:f5:eb:
28:ae:86:8d:59:35:5b:c1:c7:ee:d9:7a:c9:55:34:
0b:98:f3:7f:6b:b0:8e:c8:53:70:1f:8b:ba:24:d0:
43:63:21:34:c0:10:af:53:de:f6:94:b6:ac:73:19:
4d:32:ad:d3:3e:04:26:78:a2:d1:b9:82:3c:95:18:
73:f1:29:0d:8c:6d:d6:81:d8:de:3f:31:d4:2a:47:
ac:a4:6c:d6:56:ab:95:2a:dd:80:1f:e5:86:82:63:
14:fe:0c:32:96:4b:5b:58:75:75:eb:26:c8:41:47:
3d:93:b1:41:dc:ef:2b:81:37:9a:89:c0:8d:47:8a:
75:8c:62:95:e5:e0:aa:f3:da:a0:28:a9:42:05:f8:
0e:5c:c9:4c:0b:76:f4:c4:57:b2:49:b8:5e:77:54:
ab:6a:6d:77:99:b0:c3:a7:f6:35:a3:6a:92:72:9d:
88:fe:7e:d8:95:3f:7b:92:82:ec:dd:7e:e3:1d:6d:
57:91:fb:c6:33:d7:c3:dd:74:f8:36:8b:bb:aa:5f:
1a:cb:86:04:54:7a:9d:36:7e:e4:41:85:65:92:73:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:D2:49:E9:DB:05:77:DA:6B:1E:2E:3F:9B:FF:61:A8:B9:97:82
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:17:1f:c2:30:48:3d:a3:be:4d:36:28:d6:c7:49:ff:f0:
0e:76:0f:a4:17:4c:e1:82:e0:63:6f:c8:ca:d4:41:aa:e0:b6:
c3:99:e6:98:c1:8b:6a:7b:22:8d:eb:96:38:05:e3:61:a8:8d:
a4:3a:bd:f6:e7:c2:3d:1e:d6:ac:8f:39:fa:bb:d3:9d:92:f9:
10:e6:36:ad:4d:b5:15:79:6b:d7:3e:15:12:d6:68:65:42:e6:
e2:43:0d:5e:fc:31:66:1e:6e:1d:c5:0f:19:20:1c:c5:6d:e6:
21:b9:99:54:39:79:c2:18:b0:44:40:58:ab:d5:11:27:8d:78:
62:11:8e:98:d1:2c:29:c3:74:b9:ca:5b:38:a4:54:bb:c0:27:
95:db:09:f2:eb:82:0f:7c:d2:e6:b3:d2:8e:f1:e0:e8:b9:e1:
d8:8b:c2:64:bd:af:85:f0:56:f8:91:83:fc:bc:10:37:83:f6:
e0:33:b0:19:04:49:4d:d4:45:79:cc:ea:f8:1d:98:0b:f3:8b:
3e:e9:dd:18:4b:97:a2:53:f2:d2:09:5c:9f:9a:53:7d:bc:63:
d7:c5:37:1f:a0:7a:6f:67:cf:5b:d9:9a:14:3d:3e:3c:b0:ca:
a9:fb:8c:14:6e:8d:2f:3f:b0:1e:e3:75:bc:6e:1a:81:77:cd:
9b:42:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:19 2026 by rpki-client