Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
File: vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json)
Hash identifier: aYFHjTZb/GjWylp7+Jx3ZM00TdkWx57489rHZyRzvRY=
Subject key identifier: 99:F3:4C:CC:63:84:DB:E4:D2:51:96:37:F9:A6:96:D1:33:AA:A0:77
Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
Certificate issuer: /CN=be370733b8db614daa760a002c24048028300e2d
Certificate serial: 019D9962F14ACF7243A63767B68E31ADEAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:01:31 +0000
Manifest this update: Fri 17 Apr 2026 03:01:31 +0000
Manifest next update: Sat 18 Apr 2026 03:01:31 +0000
Files and hashes: 1: D-LoIPh4w6ZRPr6EB3oORu8b_qM.roa (hash: IJEKqU/hmkuGGlwqmZo6DWM0XWvE4LTwDePizqu7MS0=)
2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: 1nijzUD0T7uJOXL/NFVLoTDY9fQAsbS/sGs3pWXn/wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f1:4a:cf:72:43:a6:37:67:b6:8e:31:ad:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be370733b8db614daa760a002c24048028300e2d
Validity
Not Before: Apr 17 03:01:31 2026 GMT
Not After : Apr 18 03:01:31 2026 GMT
Subject: CN=99f34ccc6384dbe4d2519637f9a696d133aaa077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:0b:7a:db:f0:83:af:b9:57:ac:87:08:46:
92:77:4a:52:f0:70:ca:64:d4:99:41:1a:50:13:9a:
5a:52:27:3a:0e:fc:3f:35:0a:3c:e9:aa:f6:97:f8:
d5:da:72:fd:37:94:ce:9c:56:ba:8e:1c:9b:17:e7:
63:62:41:df:b4:8c:a3:60:99:9b:16:a8:bf:3a:39:
7c:6c:02:fd:a1:c4:42:30:04:44:34:b2:ab:0e:5c:
6e:c9:75:e5:3a:ac:76:64:d9:6d:65:e4:7c:f9:50:
11:d9:5c:1d:21:98:da:76:47:aa:8a:f1:43:34:c6:
19:97:a8:e9:f8:1f:51:04:67:9f:69:ea:70:e5:8c:
33:ac:bd:ba:ba:be:e0:24:02:5a:00:e1:ef:04:0d:
ba:5b:11:4d:45:64:17:89:bd:73:ce:c9:fc:71:4b:
f9:b0:5a:d6:a5:8e:72:c1:b3:fd:2c:d9:49:c7:7e:
58:ec:b4:bf:4b:68:cb:15:56:f0:a6:ad:72:6f:ab:
ba:66:bb:67:03:fb:16:c9:35:4d:24:f7:34:89:f4:
2a:ed:e3:ce:62:0d:5f:90:77:21:a1:4a:59:fa:31:
4d:10:0c:bc:d6:bb:df:11:8b:82:62:ac:2c:52:12:
13:65:81:dd:66:91:e8:ef:15:6d:45:b6:af:ec:5e:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F3:4C:CC:63:84:DB:E4:D2:51:96:37:F9:A6:96:D1:33:AA:A0:77
X509v3 Authority Key Identifier:
keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:16:4a:11:51:d7:77:b8:5c:35:68:f9:4f:2a:6c:c2:53:95:
08:8b:08:b4:8d:27:9a:c4:dd:4f:7c:c4:d1:d7:7b:83:d6:49:
34:e7:51:31:66:e6:67:40:20:51:62:43:25:e5:9f:7a:96:8e:
a4:d8:2a:e0:03:a4:6c:9b:e2:71:c7:07:4d:bb:78:c3:4a:f7:
17:59:ff:d3:ab:12:02:00:fa:5f:51:c7:56:0f:15:d4:a4:9d:
e7:80:83:bf:18:7f:f2:2a:d6:97:80:71:33:1d:58:40:3a:b2:
d3:cd:18:4d:a7:f5:e4:63:b2:c7:9e:ae:28:d6:48:5e:89:68:
49:07:8a:01:4e:42:3c:4e:f5:8a:c3:54:0d:25:66:32:41:b4:
7b:d8:01:c4:f7:13:eb:b5:a8:4b:ff:4b:48:13:b8:37:a3:16:
69:c6:96:8e:7b:97:1d:5d:41:71:89:b1:b9:ad:f1:e3:2d:01:
bd:a2:3d:ac:6e:30:7b:db:f9:6c:ff:3a:fe:bf:74:1e:bd:df:
81:3b:c2:f9:69:d4:6f:25:24:cd:49:df:c6:8a:31:73:d3:27:
29:d8:02:13:07:1f:c1:a9:d2:d0:0b:d8:8f:1b:b9:83:36:e0:
00:ce:3c:fb:9f:51:a2:c9:c3:77:92:82:54:5f:30:f0:c7:eb:
39:c2:df:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:39 2026 by rpki-client