Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
File: vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json)
Hash identifier: nSVlGiW9w9ZeJDoO1cXBd5sAvhGbmFcCn5qkpzoxq9k=
Subject key identifier: 97:4B:07:5A:F7:DA:BD:94:EC:7C:9F:B5:FC:8B:CE:CC:E7:8F:88:90
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial: 019D9C2D14C50577B57392DF70339A6F2683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
Manifest number: 02C5
Signing time: Fri 17 Apr 2026 16:01:33 +0000
Manifest this update: Fri 17 Apr 2026 16:01:33 +0000
Manifest next update: Sat 18 Apr 2026 16:01:33 +0000
Files and hashes: 1: 4xL37WdyKuckc1NcWIr3ibRq75U.roa (hash: xWEsHO/c9sArzZBLYCNPmJHsetlDx8lTMIghlof+wtk=)
2: 8HPlLJKGC0uGDXpjxVBwb6wa0qk.roa (hash: Ojh5/xBT32ZIv2cbh6f99Qcqv0JCaF6De9sA3ACbGs0=)
3: IivqEYycEJ9ENYkDV_x_rR4eFr0.roa (hash: IQVchAwFZI4RDu0XF+MD2n3sIbpJvcGSbjEZGTu8Mwc=)
4: X8pouaMpaLsuYErTPUpgqpWeT9Y.roa (hash: psbUeXwDjoOPzcvtNOSx3ERhIjFSIX4yWz6HMVvEcEg=)
5: XyAp-ULJDGqQnYw4x0VOKO9WL4A.roa (hash: p7Y5UggA9XaPiUt8v09KTFjc/O7q3EmBodfSudOJ2G0=)
6: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (hash: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0=)
7: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: eKGvwpF4pGREoyNGI0/0Vgij4ZyBNRsCuoKHcNMYN1g=)
8: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (hash: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:14:c5:05:77:b5:73:92:df:70:33:9a:6f:26:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Validity
Not Before: Apr 17 16:01:33 2026 GMT
Not After : Apr 18 16:01:33 2026 GMT
Subject: CN=974b075af7dabd94ec7c9fb5fc8bcecce78f8890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:8a:55:78:8c:52:70:cb:cd:6a:2d:8e:ec:
aa:4a:b8:c8:cf:73:49:9d:77:23:7f:f4:65:0b:7f:
ee:4f:da:ce:57:bc:51:9c:a6:a2:6c:9e:33:f2:8a:
b9:88:6f:e3:11:7c:b9:c9:6e:85:07:1b:31:3d:7b:
94:99:3a:a3:3b:fd:b4:e6:fd:49:b5:e7:c6:e5:c6:
b6:6b:85:2f:18:8b:6a:b8:82:cc:93:b3:0a:67:1c:
39:ec:65:7f:a6:8d:4e:28:ab:41:5e:12:fd:12:bd:
6c:24:0e:14:35:71:84:66:47:bd:97:21:d4:d4:41:
a6:39:3b:eb:44:20:46:d8:b8:9a:7c:92:61:b8:05:
22:de:fa:14:47:e1:ab:36:34:d1:73:07:8e:87:56:
42:31:92:8e:50:d0:e0:c5:d7:eb:74:5c:f9:96:57:
62:72:f1:03:e3:3f:b2:33:29:42:5c:34:dd:fe:67:
8d:52:26:fc:3f:0f:5b:40:dc:1a:09:fe:48:e0:91:
57:1e:78:2f:26:0a:8d:9b:5d:ff:21:ed:40:36:73:
66:36:8a:00:00:35:cb:69:7c:1e:dc:43:11:82:3d:
8a:13:3c:15:5f:3b:05:76:6a:65:3f:0a:5e:6d:cc:
bc:1b:bf:19:a0:cc:a9:15:0d:49:25:3c:f2:de:db:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:07:5A:F7:DA:BD:94:EC:7C:9F:B5:FC:8B:CE:CC:E7:8F:88:90
X509v3 Authority Key Identifier:
keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1c:4f:e3:06:1b:c9:db:a9:1d:81:b7:9b:b2:e5:c2:6e:38:
a9:a9:48:f8:bf:cf:cb:e1:0d:3b:b7:3a:ae:c2:eb:4a:05:04:
f3:18:50:c8:fb:25:00:b9:75:15:07:74:ae:5c:de:2a:c4:6e:
02:5e:c5:14:c6:5c:28:2e:52:92:36:ea:40:b2:87:f1:45:78:
5f:7c:8b:1c:28:9c:85:5b:e9:46:b3:d9:a3:11:f7:57:85:ee:
b4:a7:c8:49:bf:f6:98:c2:32:05:74:5b:bb:5c:99:96:17:bc:
e1:f0:4d:b5:32:16:e9:db:5f:87:14:7e:06:80:68:7d:9d:dd:
a9:ef:8d:a0:5a:a1:fb:30:ff:3a:0b:da:42:63:4a:9f:f3:88:
5a:16:31:8e:27:23:c6:8d:3a:89:f9:fb:bd:6e:3f:aa:9c:cc:
40:3a:10:60:f7:d2:12:70:0b:e8:18:63:41:63:3e:3c:6b:82:
86:ea:98:d0:85:23:92:0e:41:0e:b3:1c:29:3d:91:18:94:77:
82:08:69:21:ab:ce:58:96:e6:8c:0e:6f:67:1e:3c:50:6d:71:
c8:20:eb:f9:6f:a7:5b:11:e2:48:2a:d8:25:f5:dc:a7:cc:5e:
e5:a9:f2:cf:07:ec:4c:ec:c7:36:c8:d1:3e:a1:7e:02:85:30:
e1:35:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:46:13 2026 by rpki-client