Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: UiJyiDT3ctrwGQ4UiVAMR6TeXizIyX3ERpe9EBKXg5s=
Subject key identifier: D1:18:0F:AB:99:B3:4E:38:AE:E5:33:ED:EF:B6:79:2C:A7:1F:D9:1E
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 019D9BBEC9A2C953582B1D8ECAF6CB9201BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: 0359
Signing time: Fri 17 Apr 2026 14:01:04 +0000
Manifest this update: Fri 17 Apr 2026 14:01:04 +0000
Manifest next update: Sat 18 Apr 2026 14:01:04 +0000
Files and hashes: 1: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (hash: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk=)
2: OlHHMfPygKkyr7HTvCn4K8p01_U.roa (hash: N9V2kxguErly1WsufOsx/epgV4HMlIpbzSH7yTgCKok=)
3: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (hash: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo=)
4: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: hpHwifI7LW9yHKCQuIUVCO9l20VLtV+94ieybtAJnRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:c9:a2:c9:53:58:2b:1d:8e:ca:f6:cb:92:01:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Apr 17 14:01:04 2026 GMT
Not After : Apr 18 14:01:04 2026 GMT
Subject: CN=d1180fab99b34e38aee533edefb6792ca71fd91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:c0:9d:17:7d:02:94:aa:a9:90:e3:07:1c:
85:bc:18:6f:35:a8:2a:d0:ef:16:73:3b:a6:eb:e2:
06:38:23:de:6c:bf:fb:ae:3a:f7:c5:a3:dc:a9:2e:
47:83:80:69:5d:ce:73:30:f0:c0:8f:d8:70:96:c3:
09:ed:88:b5:ed:96:d0:e5:33:f6:99:a6:6b:f9:39:
9a:e1:86:42:f7:09:a7:53:03:fc:05:b6:08:8d:02:
7b:d2:47:9c:63:74:b2:79:58:d4:60:c6:5a:e0:c7:
d8:ea:07:35:96:2a:25:49:91:0c:43:81:e1:b9:b3:
83:f4:75:2e:3c:5b:25:2d:58:8c:20:0b:e8:a2:1c:
bd:07:5b:21:64:2c:1e:a5:5f:32:88:ff:11:e7:8e:
97:1d:7e:a7:e0:a0:38:6f:cf:64:a5:41:23:fd:b4:
bc:1a:82:42:35:75:c3:f6:a9:e2:2e:54:33:3e:b8:
c3:a6:21:84:9f:b5:8e:9d:4c:51:f2:36:2e:de:e0:
9f:ce:b2:dc:c2:78:13:3e:2f:13:8e:05:15:f1:fc:
f4:a8:94:a8:fe:90:eb:58:72:16:67:b1:69:13:ef:
46:46:5a:62:cc:2e:2f:b3:ff:0d:34:41:10:99:dc:
35:2b:3a:a3:92:95:59:c2:ba:84:60:e3:61:07:b4:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:18:0F:AB:99:B3:4E:38:AE:E5:33:ED:EF:B6:79:2C:A7:1F:D9:1E
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7f:79:4b:3b:36:20:77:a8:fb:aa:d9:87:5d:80:53:83:f6:
87:51:20:4f:fe:9d:00:86:0c:bc:8b:0f:86:fa:44:83:03:fd:
68:a4:96:92:30:51:5c:a1:57:d7:41:b5:1f:94:9b:00:fd:cf:
3b:0a:0c:b9:b6:91:fe:5d:7a:1f:40:22:9d:04:16:fc:f1:8b:
ad:f1:14:8e:46:5c:e7:7c:fc:20:18:42:db:0d:1e:b4:58:9b:
75:92:7c:b1:c9:51:c9:4a:57:94:9a:55:17:21:4d:f0:52:7f:
89:38:0a:ca:e9:27:2e:8d:96:e3:53:db:54:9b:24:e7:e8:6f:
46:c7:67:d6:b9:f2:38:38:58:6d:e3:12:e1:67:fe:04:62:71:
87:fe:60:c3:a9:f9:37:85:44:0c:73:97:71:fe:18:2b:63:49:
df:5f:99:69:23:93:89:93:36:43:62:d4:22:d1:03:ce:52:7e:
0b:37:7f:b3:d2:3c:b0:2f:72:f6:79:e0:4e:b9:cf:3c:ad:bc:
f4:5a:46:f0:9e:37:92:55:18:f7:08:8e:8a:04:cb:34:3c:33:
45:70:2a:3e:80:25:f9:07:d4:c4:dd:11:86:a9:2b:d6:9d:dc:
52:69:de:46:a6:7d:43:0c:04:cd:7a:33:5e:e2:05:fc:12:07:
fe:1d:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:00 2026 by rpki-client