Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: 6XDUG0KNG2J+puq8PyInjcSiebsL4XptnRsGcl7w1GU=
Subject key identifier: 5A:A4:7E:E5:6F:A9:63:BC:65:97:9C:8E:AF:21:EC:C5:22:B8:D2:5F
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019D9C2D02F38244A128D68511DEFEC833E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0CC4
Signing time: Fri 17 Apr 2026 16:01:28 +0000
Manifest this update: Fri 17 Apr 2026 16:01:28 +0000
Manifest next update: Sat 18 Apr 2026 16:01:28 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: 99cUWGp6wZ4PeXqu3hONnbYlR75WJDFiI3mi2hBn5IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:02:f3:82:44:a1:28:d6:85:11:de:fe:c8:33:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Apr 17 16:01:28 2026 GMT
Not After : Apr 18 16:01:28 2026 GMT
Subject: CN=5aa47ee56fa963bc65979c8eaf21ecc522b8d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:4c:2c:cf:7b:5b:96:c6:a0:8d:28:e5:41:
ce:55:27:fd:bc:4b:52:80:98:98:21:77:03:83:f4:
c3:5d:93:8b:db:69:9c:72:79:20:d3:9b:10:d9:74:
b6:f5:a2:d5:3c:4b:f0:fd:d9:a0:31:ab:48:f3:30:
5f:00:64:ba:7f:57:1c:97:48:2e:f7:71:3c:72:6a:
32:5d:33:40:c1:24:20:80:e6:fc:4b:de:20:63:03:
be:68:3f:65:2a:a7:4c:ac:5c:b1:8e:59:a9:e4:c6:
1b:83:f7:f8:e3:a7:c4:db:9d:5d:3e:3e:31:96:b8:
d8:c6:45:df:dd:bb:95:e1:70:05:7a:e4:c6:c8:99:
84:9c:55:03:d3:bb:da:e3:6c:c4:d3:79:a2:bc:94:
45:30:d2:39:8a:95:b9:17:71:91:42:57:96:c7:77:
f6:75:6b:d8:20:6b:3b:7c:97:42:40:6b:9a:0b:f7:
16:09:49:5b:8c:52:12:45:4d:f3:78:a0:3e:23:1f:
1a:4a:2f:43:2b:02:15:83:1c:45:10:e5:4f:38:b9:
64:33:c1:78:eb:3a:6f:d1:f6:ea:57:f9:6c:0f:0f:
fe:30:ad:84:5d:06:75:94:f2:28:cc:61:1f:ce:4b:
7f:8d:15:33:5d:88:98:26:5a:3c:83:2f:b6:32:11:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:7E:E5:6F:A9:63:BC:65:97:9C:8E:AF:21:EC:C5:22:B8:D2:5F
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fd:cd:f6:16:04:b4:d8:28:49:81:84:f3:b4:56:e6:e7:57:
8f:d9:d4:af:17:d1:b1:60:ba:17:de:d2:5b:80:d6:9d:5c:6a:
6e:b4:38:ed:11:9c:2d:c6:e9:3a:e7:c3:04:f9:29:14:62:3b:
a5:bf:88:09:ac:86:f4:c3:98:df:ee:2f:33:b9:ce:b7:ad:88:
2b:91:56:16:43:68:d1:04:63:9a:50:0c:1e:7e:00:ad:82:30:
72:e7:d3:dc:0f:ed:ff:87:9f:bc:74:3d:0e:75:07:b6:e4:09:
a0:56:b7:a4:06:b1:28:dd:1c:ca:2c:68:a6:37:f2:1c:db:4e:
40:f8:d4:0a:99:89:a0:f0:57:97:0a:a2:0e:e1:bf:4f:6d:eb:
f4:77:86:3d:3c:84:f3:21:8d:da:d8:83:11:68:d7:b3:0a:5d:
00:c2:63:7b:c0:ee:d4:48:20:9c:0c:5a:0c:69:cc:42:fe:93:
40:45:d2:6c:e8:54:9e:e6:24:ac:fe:52:14:16:85:11:ee:24:
a7:73:aa:97:ee:7c:2a:8d:bd:fe:a7:09:73:76:6c:f2:8b:79:
47:2f:82:53:05:a5:dc:c5:a4:fa:69:ee:3f:de:db:28:48:11:
b0:7f:2f:ca:9b:3e:11:0b:ab:bb:44:f0:bc:f4:23:fd:dc:4d:
28:dc:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:33 2026 by rpki-client