Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: e/70QJXUicY7clRUHuu5GV3dkVKc2DgXbkl9Ym6LGic=
Subject key identifier: 8A:DF:FB:47:6D:AD:ED:DE:5D:73:95:DC:BB:A7:5F:97:E0:0B:99:C5
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 019D984F88707468FE1DF4EAE60A3AF599FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 12A4
Signing time: Thu 16 Apr 2026 22:00:42 +0000
Manifest this update: Thu 16 Apr 2026 22:00:42 +0000
Manifest next update: Fri 17 Apr 2026 22:00:42 +0000
Files and hashes: 1: bbz47osIb4c7uoiyZJGPaxcYxu8.roa (hash: yDftJ0V1zP6tNWS59D23nQ4A6wYjaRjcaKzcMkYk8QQ=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: j9a9CHJliPcGgWlBT6aHS6weZQjVEyYESDQZoqzGz1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:88:70:74:68:fe:1d:f4:ea:e6:0a:3a:f5:99:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Apr 16 22:00:42 2026 GMT
Not After : Apr 17 22:00:42 2026 GMT
Subject: CN=8adffb476dadedde5d7395dcbba75f97e00b99c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:18:15:d7:92:b8:a2:25:a0:7c:d4:5b:a2:
d6:78:f4:e8:b1:e8:cb:d4:f0:00:ee:fb:8e:d4:86:
f1:06:fb:35:ea:15:f0:e9:6f:1c:33:52:08:77:7c:
04:50:c8:3d:a7:69:7b:cc:84:03:00:c6:7a:60:f1:
19:64:24:c4:55:c1:b4:a4:da:3e:3a:7f:3a:7f:a1:
be:e8:93:33:4c:e2:67:68:71:1d:68:93:65:21:1b:
92:ba:57:d7:54:72:88:b0:8e:f7:ff:77:a9:fc:a4:
ba:e7:9e:2b:3a:1e:ef:a9:b9:4f:8e:d4:e3:0e:d1:
c6:63:a5:aa:c7:57:b9:0f:e5:0e:a3:cb:98:54:51:
d8:e2:bf:5c:44:a1:c5:78:21:f2:6a:52:dd:21:80:
22:e7:84:c6:f0:a7:9a:34:b8:35:80:9d:07:4a:1c:
7d:8f:be:c1:fa:12:bd:43:2d:b2:ee:02:db:c8:86:
e0:fc:a4:ed:b7:1c:aa:a8:63:1b:43:b1:72:1c:0d:
d2:62:d4:43:fb:24:cd:fd:7b:3c:d7:51:db:d0:87:
95:75:9a:8b:59:ac:9d:d7:e7:b4:2d:97:b3:a8:b9:
98:eb:ad:fc:83:df:34:5d:58:c7:1e:35:61:21:69:
db:43:7f:8f:6d:91:fc:85:8a:53:7c:bb:58:2f:4a:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DF:FB:47:6D:AD:ED:DE:5D:73:95:DC:BB:A7:5F:97:E0:0B:99:C5
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:99:92:5d:83:68:66:d2:a0:c2:2b:91:79:aa:11:6f:4b:ea:
69:7c:ab:f6:f7:7d:b9:e0:3a:f7:95:74:a2:dd:95:60:71:ce:
ff:71:7e:27:77:8b:89:e1:4d:89:4b:c9:84:bd:87:0d:3e:28:
73:ba:f7:4e:19:31:d5:c0:93:dc:7e:da:cc:7d:66:13:c2:2a:
97:29:b4:db:fc:9a:1d:52:2d:d8:7e:6a:e6:c5:75:e6:f3:d3:
59:fe:8c:88:92:56:02:a3:68:17:8a:eb:c8:df:db:2b:fa:72:
4a:5b:0b:4f:a1:1f:98:e4:7b:15:a7:c4:04:b5:e4:01:6a:fc:
51:2f:1a:2d:7a:c2:7c:33:32:54:1f:0d:d1:4a:1c:f3:05:97:
e8:4c:a3:b0:67:75:1a:5b:dd:f3:42:6e:fe:d5:fe:4c:6c:2e:
bc:a1:4c:c1:2d:45:a7:0f:ad:81:fd:ae:5d:f3:88:0f:22:c0:
3d:ba:0f:a5:7d:1f:97:87:21:c4:d1:24:cf:ef:a9:5f:ca:2a:
3c:c8:e6:52:db:ee:b3:48:41:69:92:19:8e:5b:6e:a4:11:5d:
df:c5:8f:4d:1a:db:ac:b1:39:ad:31:ea:c6:55:16:55:00:55:
95:f5:c1:ee:b9:d5:46:c3:26:1a:88:a0:fd:dc:5f:6c:6c:14:
63:79:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:25 2026 by rpki-client