Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier: XUl2JZVf5DX5KB+uvw1jdTnIO+lJvSUTZdwrDQjCjvw=
Subject key identifier: 72:ED:54:63:28:31:FE:5B:45:B7:BF:EA:23:68:74:9C:2D:CA:40:B0
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer: /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial: 019D999945A5C2782F148840DEA81FF9CB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 04:00:51 +0000
Manifest this update: Fri 17 Apr 2026 04:00:51 +0000
Manifest next update: Sat 18 Apr 2026 04:00:51 +0000
Files and hashes: 1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: 8vKCU8kyATnUuWWpprQzEDnrZE/a0TOGP7xAsG8TuhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:45:a5:c2:78:2f:14:88:40:de:a8:1f:f9:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Validity
Not Before: Apr 17 04:00:51 2026 GMT
Not After : Apr 18 04:00:51 2026 GMT
Subject: CN=72ed54632831fe5b45b7bfea2368749c2dca40b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:69:f1:2d:53:78:7c:f5:d7:ce:d9:e0:b5:
36:f1:bd:fe:f0:37:41:8c:06:c0:6f:a1:9a:aa:6c:
57:84:0e:1f:ef:83:17:e6:f5:a6:17:fe:84:cd:ed:
03:10:70:f1:e6:4d:ea:77:6d:ce:67:db:7c:00:4b:
17:53:e0:0c:d4:d4:be:41:d0:5f:4d:8d:d3:77:6e:
02:3a:f1:0d:57:fe:f3:fc:c5:1e:60:5d:e3:32:f8:
30:5f:79:86:cc:e1:2c:9e:61:06:fa:8c:80:04:3b:
dd:cf:2e:58:12:6c:c6:c9:42:b6:30:62:95:6f:0a:
60:dd:ce:7c:a3:72:a1:be:5c:97:22:c6:76:6b:f2:
fc:83:12:8d:f5:b9:d0:c1:ed:c9:e4:ed:6a:b8:16:
78:be:35:1c:7d:6c:7b:c5:1d:11:5d:11:88:f4:18:
52:49:f1:4c:3d:d8:aa:e1:16:cd:e9:f2:78:b4:4f:
e3:96:c9:5b:f3:68:91:04:3f:86:1b:8b:1d:cd:3e:
2e:f0:29:81:2a:e1:3d:05:bf:7d:00:44:7b:3c:b3:
13:9f:17:5f:02:06:86:75:58:ff:27:7d:d4:1e:12:
73:65:55:b0:f6:92:a8:a7:7b:c5:a0:f8:d4:52:4a:
c3:e4:24:2a:ca:9d:99:2e:5b:6a:c4:16:43:63:e1:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:ED:54:63:28:31:FE:5B:45:B7:BF:EA:23:68:74:9C:2D:CA:40:B0
X509v3 Authority Key Identifier:
keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d8:fe:ec:95:5e:73:c9:8e:9b:22:a9:f9:a8:87:2a:3b:8f:
92:d4:d4:4d:80:a4:a6:f2:df:91:0f:ef:a6:75:03:34:a6:e0:
92:28:04:c4:e5:56:83:6a:d9:f8:a8:d2:2f:37:e2:58:d8:e0:
bc:29:f3:e1:b7:72:62:f1:f9:ce:ff:02:5f:99:25:af:e9:a9:
28:d9:a2:0b:38:32:c8:4e:3d:d8:97:b6:5a:73:8f:47:62:fb:
40:25:ab:4c:59:c0:e6:c4:bf:74:ab:ec:25:c9:32:a8:60:07:
0b:43:57:7e:5c:b0:de:b8:1e:3e:18:39:89:28:61:91:29:4b:
e1:a0:a2:bb:48:f9:76:bf:10:84:89:ab:6c:61:e0:92:8b:5f:
cd:dc:9e:7e:10:a3:bb:4b:06:06:5a:51:10:85:88:c0:68:df:
2f:d3:76:f5:61:08:29:1a:ea:8e:a5:51:0e:a1:e8:d1:61:f3:
7e:b1:08:45:0c:32:ac:06:9c:d2:39:c8:e6:77:a5:53:52:f9:
92:ba:70:50:4e:3c:1d:64:7c:8b:0c:da:b8:d5:bd:7d:42:b2:
0a:fd:d8:b4:5a:c0:d2:55:79:e7:92:0b:de:d4:b3:c3:ed:22:
90:3b:6f:76:cd:ac:ed:97:33:2e:ca:d7:c1:43:8d:7f:13:8d:
46:59:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:17 2026 by rpki-client