Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: YlDS7Der3Enr4+tNvXT3toBdd7UD5jFmOyBEgPL5XY0=
Subject key identifier: 7F:E1:55:0C:04:86:6F:69:D5:8E:2C:E8:2D:B9:34:06:F9:81:40:F4
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019D98500018090B893CD9EB2DE5699741DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:01:12 +0000
Manifest this update: Thu 16 Apr 2026 22:01:12 +0000
Manifest next update: Fri 17 Apr 2026 22:01:12 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: v0PJFTfVMf6yoUKn6g4ZDSSCBMBgFa5E7UJrCI3S1is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:00:18:09:0b:89:3c:d9:eb:2d:e5:69:97:41:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Apr 16 22:01:12 2026 GMT
Not After : Apr 17 22:01:12 2026 GMT
Subject: CN=7fe1550c04866f69d58e2ce82db93406f98140f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:5a:47:68:ef:41:e1:ae:48:28:81:81:72:
47:88:ec:a0:aa:6b:63:f8:a4:49:99:d1:32:66:5f:
9a:a9:66:d6:7b:4a:d9:84:0a:28:bb:2c:19:d2:06:
2a:78:4f:fd:1d:53:77:aa:b3:37:13:7b:92:68:ea:
d3:e7:b4:73:7a:07:f6:95:0e:ec:83:83:52:30:97:
73:0b:60:1d:2d:b6:b3:ca:31:06:95:fa:84:77:9f:
d8:6a:8f:07:41:a1:26:cd:c3:65:d3:bf:eb:d4:69:
8b:9c:70:46:19:e5:64:bf:c3:c2:d1:a3:ef:fa:3d:
c5:4d:71:5a:1c:d4:7f:e1:35:e3:50:fc:b9:42:cf:
2c:d4:3d:f4:d8:ce:08:6c:25:ec:fe:2e:27:8f:19:
5d:22:5c:7a:5a:48:cb:58:8f:d9:db:ca:f1:fa:d4:
05:0d:a8:98:21:01:1c:50:86:0e:95:6f:d0:eb:68:
70:5a:3b:ed:c5:e1:15:dd:dd:b8:12:65:1f:1a:f2:
9f:9c:24:8f:b5:bb:53:5d:6a:c2:0d:97:80:a0:9f:
e6:fd:35:e6:79:1d:3d:bf:b7:3e:72:fe:3e:f0:bb:
0e:91:de:96:f1:b3:aa:73:8b:41:c8:e0:64:91:37:
91:3f:3d:da:b3:7f:a4:c0:b5:b0:c1:4b:62:df:81:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E1:55:0C:04:86:6F:69:D5:8E:2C:E8:2D:B9:34:06:F9:81:40:F4
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0d:29:b4:b6:e5:22:52:a0:36:5a:af:40:a6:e9:9d:65:29:
b9:32:ac:8b:14:15:ff:ec:fb:2a:81:cd:ce:52:05:a7:12:b6:
c3:e5:01:2d:d3:d7:9c:dc:58:ee:d2:fd:7e:5d:59:ad:b3:74:
d3:b4:47:0b:d0:bd:a7:49:ca:4f:db:ad:5d:36:c5:be:b7:79:
d5:e9:1d:18:52:41:d9:d9:bb:2d:7b:c3:20:f6:57:52:24:fd:
83:bc:92:14:f9:17:00:69:20:52:c8:90:7a:85:a7:34:eb:58:
b2:df:1e:a8:5c:5d:31:b4:36:a7:c6:b7:ed:05:be:5f:20:6e:
7e:70:e5:58:f8:a1:f3:e4:fb:f1:3b:50:d2:c1:90:58:ba:3e:
47:a8:d7:f1:4c:14:b7:5c:e0:41:1a:9f:96:11:5f:84:9e:f4:
22:02:ca:ab:19:42:0e:3b:85:73:8c:d2:f7:66:e9:f3:0d:ea:
86:ad:99:15:53:c5:98:75:b3:cd:b7:b4:50:0a:fb:53:1e:46:
25:d3:03:5d:56:b2:9b:99:cc:10:21:1c:4c:25:4e:11:16:33:
27:c7:a5:7d:91:bd:51:86:76:88:15:9d:06:a9:c5:91:ab:33:
a2:22:9a:bc:3f:bc:4b:71:48:0a:86:2f:be:06:53:f1:fb:28:
d2:aa:0b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:36 2026 by rpki-client