Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
File: vVXPhK_d4xgniNwAdjqCMINM7FI.mft (raw, json)
Hash identifier: sPJZNmDJ1Lq6gmg0ssbJ0/iAzXdqrXnzCgwERntiwBs=
Subject key identifier: CA:58:A4:2D:86:50:6F:32:00:32:A8:44:9A:4B:DE:B4:99:3E:52:17
Authority key identifier: BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
Certificate issuer: /CN=bd55cf84afdde3182788dc00763a8230834cec52
Certificate serial: 019D9C2D560DB254B35C6AF66191E8B23F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
Manifest number: 66
Signing time: Fri 17 Apr 2026 16:01:49 +0000
Manifest this update: Fri 17 Apr 2026 16:01:49 +0000
Manifest next update: Sat 18 Apr 2026 16:01:49 +0000
Files and hashes: 1: m2i02yDWoa9OicV27GMj8Y2x37c.roa (hash: PcpljpVFgub8o7xEhsLEYIzvRxfNpdllqdeZVEQzjwg=)
2: vVXPhK_d4xgniNwAdjqCMINM7FI.crl (hash: SJ4nbXzvxe5TRKN/MGpJ51Q4w2dJsEbphvnD61fkGkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:56:0d:b2:54:b3:5c:6a:f6:61:91:e8:b2:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd55cf84afdde3182788dc00763a8230834cec52
Validity
Not Before: Apr 17 16:01:49 2026 GMT
Not After : Apr 18 16:01:49 2026 GMT
Subject: CN=ca58a42d86506f320032a8449a4bdeb4993e5217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:1e:63:4e:ac:62:73:7c:f6:c3:fa:b1:e9:
1f:b8:f8:89:b1:4d:51:11:3f:6a:46:2f:95:f2:40:
f7:f6:66:56:d0:f3:ec:1d:5e:1f:65:2d:d7:c3:e2:
3d:9a:81:a6:a5:63:e0:9a:9d:53:bd:0e:1e:8e:2f:
f0:5a:e8:32:f4:e7:29:fe:2c:04:6b:94:a5:2c:bb:
4c:39:37:14:9d:b9:bf:4a:02:18:bf:b4:2f:a8:45:
ea:d2:c7:27:db:cf:91:d5:84:07:59:42:d4:dd:be:
b3:11:37:21:5a:07:92:70:92:f4:5d:1f:9b:7b:59:
03:88:62:44:7b:fd:90:5e:95:4b:84:a3:e5:e2:9e:
f4:6f:9f:78:3b:8f:77:8b:5f:fe:29:f1:ea:c8:b4:
07:33:39:23:e8:f2:81:33:f5:e2:c1:d0:02:87:af:
1d:2a:70:03:d7:57:31:41:c7:05:68:65:7e:0e:76:
82:58:dd:d9:ae:d9:05:47:66:01:c9:e0:43:3f:e9:
9f:60:6f:43:31:c5:19:9c:4e:cb:db:13:c9:55:32:
aa:51:c1:ed:70:b0:28:46:45:76:d4:ab:ca:d5:c5:
a1:3b:49:97:57:40:85:5a:21:92:9f:17:56:31:b6:
2a:a2:f9:17:b3:bd:bc:53:cd:de:59:94:45:c8:16:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:A4:2D:86:50:6F:32:00:32:A8:44:9A:4B:DE:B4:99:3E:52:17
X509v3 Authority Key Identifier:
keyid:BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:03:a0:16:e4:d5:ce:8c:73:3c:f9:70:5d:7c:27:57:8c:ed:
6c:34:bf:6f:76:ad:0f:17:4e:1a:85:e8:db:69:43:16:50:1c:
f6:4a:e0:26:ea:12:5e:ee:f6:9b:93:c8:ad:e1:b1:8d:86:e3:
1b:b8:fa:48:c3:9e:cf:88:db:25:5c:07:69:1f:9f:a1:a1:72:
0a:b4:47:43:01:91:de:60:1b:7e:f8:b9:8f:11:b3:6c:51:ed:
92:59:66:ba:03:49:bf:4e:77:97:ce:9a:bd:a3:2e:0e:21:3a:
d5:6a:46:f3:78:3d:ba:5c:9a:c3:47:46:4a:c5:67:65:bb:62:
c0:e6:d0:50:6a:3e:75:0a:06:89:9c:23:8c:ef:5d:c0:54:75:
74:c7:0a:bc:54:16:ee:17:86:3f:26:88:3f:7a:a2:2b:12:14:
12:62:1d:15:36:76:b1:de:89:4a:d3:26:e0:a4:3a:a9:31:ed:
33:6e:38:5e:75:48:63:62:16:34:18:40:46:f9:84:68:cd:b6:
04:d2:5b:27:2d:c6:9b:2a:d0:ca:b8:6a:0b:bc:8f:f4:08:94:
bf:43:fa:03:dc:4a:eb:d4:4f:29:e0:22:a8:48:6f:d2:cb:6d:
ea:d5:98:9d:e5:26:aa:8b:68:bd:64:99:ef:f3:85:66:95:75:
67:a7:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:00 2026 by rpki-client