Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: YpwdDpdiS2Fs2U228IfZa9cot7BaEpkXCL3+XkdFw1E=
Subject key identifier: DC:10:FF:0D:10:D6:3F:F3:46:BE:27:63:89:B3:91:10:28:AA:0C:48
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019D97AAE6EEB18C00490A5523C3BA8C4C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 19:00:52 +0000
Manifest this update: Thu 16 Apr 2026 19:00:52 +0000
Manifest next update: Fri 17 Apr 2026 19:00:52 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: LgRZliYc7ywV3y5alOd5sO5pwAT2hrlv5P5+gaGzZkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:e6:ee:b1:8c:00:49:0a:55:23:c3:ba:8c:4c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Apr 16 19:00:52 2026 GMT
Not After : Apr 17 19:00:52 2026 GMT
Subject: CN=dc10ff0d10d63ff346be276389b3911028aa0c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:5d:23:79:e4:7e:3a:b4:2c:42:40:be:0a:
eb:f5:e5:6d:7c:e8:9a:d1:9e:fb:bf:a8:0a:78:0e:
e5:46:80:38:47:42:45:d0:8f:35:d9:6a:77:18:36:
17:cd:ea:dd:9a:3e:48:3a:2d:a2:03:4e:34:5b:43:
f3:23:e9:77:38:c4:59:7f:ef:49:bd:de:ce:bf:55:
21:38:dd:d8:a6:2d:56:fd:5d:23:ea:74:be:bd:b2:
e1:80:e6:9a:d0:b2:2a:d0:5c:88:52:88:0c:39:9c:
6c:b2:7c:44:cb:89:5a:18:e7:ac:84:12:81:1f:22:
ba:51:3b:d8:b8:71:67:66:18:5a:a5:d6:89:fc:30:
85:47:ce:6e:f5:c6:2d:01:ac:7a:9f:8d:b9:d4:0a:
a5:8e:2a:96:48:b9:27:4f:95:d0:55:11:8d:61:75:
1d:b1:a9:c7:60:b2:3e:6b:37:02:bd:04:23:be:5e:
25:e9:ad:82:fc:a4:a4:ad:14:84:36:22:cf:7f:b4:
2c:a6:3c:4b:19:fe:8d:41:6b:8c:47:38:7a:12:73:
50:c1:d3:4b:50:bb:72:f2:92:4c:17:e1:d2:40:d3:
4a:ff:c6:50:8c:a9:22:24:33:33:28:5b:06:49:8c:
e0:06:28:16:10:fc:f8:b6:35:0a:90:98:0c:c4:c7:
1c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:10:FF:0D:10:D6:3F:F3:46:BE:27:63:89:B3:91:10:28:AA:0C:48
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:6a:59:49:ea:26:ae:ab:8a:5f:25:23:4e:dd:a7:ab:84:
22:7e:36:98:33:0c:fa:35:33:11:9b:7c:73:e8:dc:17:57:5b:
ac:17:3a:cd:08:04:b2:fb:ea:af:fe:b7:aa:d0:4d:b6:e9:72:
ff:f2:40:c0:f6:fa:84:ee:76:b4:0a:d2:77:ad:4d:5c:ea:53:
c0:dd:85:28:d2:90:80:b0:e1:6c:07:dd:e6:c5:e2:b7:29:cd:
ea:4c:d5:0e:b1:85:17:46:3a:f1:42:7d:3d:fc:f9:e5:06:bb:
81:32:3a:18:a6:7b:c2:9c:1c:ad:12:87:bb:9f:e1:51:c9:8e:
28:18:42:79:d9:26:19:f0:6f:c7:ca:84:6a:e2:1c:b5:b0:f9:
31:22:f4:bf:4f:9d:53:97:89:ad:b3:43:22:6e:0d:07:c2:9a:
63:63:ac:45:7d:bd:95:b2:17:41:ab:a4:dc:16:35:2d:91:2b:
05:b5:15:46:50:fd:79:53:78:d6:b6:c5:49:ba:b2:ef:59:2d:
85:55:42:0c:74:d1:6f:a5:72:fc:07:de:8c:4f:20:f4:ae:1b:
1f:67:b2:4d:75:14:e4:bb:44:b9:29:05:59:a3:be:c8:77:4c:
9e:c7:b2:55:3a:e0:21:56:9c:79:61:ab:89:27:ed:ab:e2:3e:
fc:a4:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:59 2026 by rpki-client