Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: roH6ouOVsM1TQ0qYKshmA8bm+S+m9EQN3v9ZnXErUYU=
Subject key identifier: 44:C7:63:53:69:D1:03:85:2C:D0:63:60:36:B0:C1:AA:11:3A:DD:62
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 019D99623A8BDE33A9A29AF7BBD91B203FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: bWPnQpIba47fMqTMB8tb7KMjh+EVUBuvj7S2vs+SAR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:3a:8b:de:33:a9:a2:9a:f7:bb:d9:1b:20:3f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=44c7635369d103852cd0636036b0c1aa113add62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:3e:04:bb:33:54:25:c5:77:7c:53:4f:3c:
fc:0a:ff:d4:6c:37:50:8b:d8:ef:ad:81:64:21:aa:
e1:4e:95:df:49:45:fe:f7:2c:03:8d:d5:a6:52:97:
a1:70:2e:45:84:16:7a:11:ed:e9:c6:51:06:5e:cb:
5f:5c:ed:d0:51:51:46:5a:ed:09:eb:dc:6a:11:b0:
24:e6:95:6c:38:15:bd:89:29:25:15:fa:2d:d9:b3:
58:fa:bd:89:ba:fd:d0:70:a5:18:08:d7:14:37:b3:
a7:31:81:2e:64:e0:6b:03:5b:9d:43:88:1a:a7:7e:
29:fd:5a:16:75:c6:e8:50:99:81:02:81:09:39:90:
14:e9:e5:fc:32:48:fb:74:44:ef:62:46:43:8f:c9:
19:9a:86:e7:c5:e9:ba:0f:12:fc:a4:03:23:f4:b1:
5e:7f:7f:9b:98:e5:d5:32:04:ab:b6:97:52:55:b8:
a3:f5:9b:e8:df:7e:25:08:b9:cd:64:97:40:a0:52:
25:7a:4d:62:fe:15:8e:60:c6:7c:96:1a:1b:04:4c:
d0:75:54:cb:8e:f6:a3:2b:c2:5a:ff:ac:96:c6:50:
09:54:7b:4a:84:a1:83:c6:36:84:76:74:cf:67:64:
ad:af:66:8a:81:69:2f:85:de:b3:5e:be:99:ae:b0:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:63:53:69:D1:03:85:2C:D0:63:60:36:B0:C1:AA:11:3A:DD:62
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0a:42:68:36:13:e9:db:e3:83:d1:96:f8:b0:af:65:56:75:
5f:f5:48:5e:21:9c:bb:33:93:18:f1:bc:39:6c:74:a3:6c:24:
a1:42:a4:fc:97:36:a5:13:5d:6d:e5:05:a3:f6:07:eb:e1:16:
87:d8:5b:6e:e6:b4:36:f2:e1:e7:59:1d:ef:46:e8:34:19:83:
9a:e1:c6:c9:59:b2:32:11:4e:8a:39:94:b1:fa:74:12:65:4a:
d8:67:26:62:0c:e1:cf:1a:50:e0:71:7c:ea:2a:16:c9:ad:b5:
d4:6b:63:4b:72:8b:c0:ec:15:5b:43:9c:20:c7:25:8b:bc:e8:
7d:8a:24:85:fa:e0:61:df:94:87:ef:99:74:8a:e4:2a:3b:5d:
33:c8:f5:44:9b:04:db:db:8f:ee:f2:e5:aa:39:d0:e6:0f:4f:
40:4f:b0:c6:eb:06:b6:f0:0d:04:57:23:d6:9d:13:79:d5:60:
af:ce:e3:3f:ac:db:a5:6e:d5:3a:93:0f:99:1e:4f:c3:87:8d:
f9:a0:ce:84:63:fd:7a:4c:5a:e1:8b:de:a2:ee:48:8d:77:1c:
df:df:e3:2b:d3:d1:83:0b:11:86:4e:96:17:b7:2f:bb:8c:48:
f9:91:8f:d5:10:2a:a2:70:7a:f6:7c:56:c3:c8:cb:a2:e7:13:
b3:eb:1f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:37 2026 by rpki-client