Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: +k8Vq1CmsTk7FnnOuKhbApHCdtVbvTtVcsZWio/oYoU=
Subject key identifier: 4D:7F:0C:D2:90:DC:7D:16:35:A5:5D:76:05:0A:C4:08:C5:8C:0F:D4
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 019D9B50F887CCC2BF1A365A4D6334ECC218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 169F
Signing time: Fri 17 Apr 2026 12:01:08 +0000
Manifest this update: Fri 17 Apr 2026 12:01:08 +0000
Manifest next update: Sat 18 Apr 2026 12:01:08 +0000
Files and hashes: 1: smH8IDaU7mi6eo7ubYIhaO6o_IM.roa (hash: zUmgtKSpqk5n2lEgS4LMSnmGpaSRvnHOfoCAI5v+7/g=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: 7QpT2Nrr+robGbd7MhbXzMIL7Vg/NNWy0DKSYcydWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:f8:87:cc:c2:bf:1a:36:5a:4d:63:34:ec:c2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Apr 17 12:01:08 2026 GMT
Not After : Apr 18 12:01:08 2026 GMT
Subject: CN=4d7f0cd290dc7d1635a55d76050ac408c58c0fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:c2:d8:a7:47:47:80:a0:75:bc:46:85:c9:
03:89:aa:d0:42:d5:d7:e8:d8:5e:e1:63:a1:8f:09:
a6:d9:7d:88:73:29:a2:e6:a4:7c:85:c1:0d:e2:72:
95:0e:6d:61:b0:76:74:26:bd:9d:a9:f1:ee:ad:c9:
5f:08:80:e7:24:58:cf:56:d0:e6:52:1a:c8:88:61:
56:56:50:2e:d1:0e:4d:6f:8c:50:cb:60:41:d8:aa:
4d:1e:3f:6d:cf:5e:eb:bc:ec:fc:c4:20:5b:b6:dd:
1b:af:bc:71:ea:8b:43:90:93:c8:7d:b2:d6:f6:80:
68:38:4d:1c:32:e1:aa:da:cd:50:ae:e7:ba:58:d3:
cf:37:19:60:3b:b0:de:81:e4:b0:68:f2:03:27:24:
7d:49:00:30:bd:01:72:5f:fe:2e:52:c6:b7:6d:4c:
6b:95:29:53:86:a3:1d:6c:2a:74:b6:68:c3:01:99:
48:72:26:45:66:1a:c4:05:53:3b:c0:ab:3e:18:49:
99:c6:bd:c8:8e:50:12:bc:c4:76:ab:84:0b:81:78:
a7:03:f6:e8:6b:55:1e:f3:e1:98:a9:09:39:51:35:
e9:46:f4:47:5f:34:ac:95:62:f3:73:f1:7b:96:90:
b0:15:db:23:7b:ac:99:33:cd:79:6e:a1:75:13:85:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:0C:D2:90:DC:7D:16:35:A5:5D:76:05:0A:C4:08:C5:8C:0F:D4
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:36:0b:e0:dc:11:0d:70:fa:06:a9:e3:71:93:bc:74:22:d6:
70:6d:9e:22:a1:ab:6c:e5:17:fc:a1:e3:a7:11:8d:ce:9a:9b:
46:29:0c:ef:a2:78:56:0b:51:b4:f4:51:61:51:27:33:f5:16:
4a:f2:c1:32:59:db:cd:ee:ec:9d:3c:98:86:33:4e:dc:13:c5:
4a:d9:0d:b2:be:c0:63:a1:c9:28:1a:8b:68:65:d5:3a:5e:33:
0f:43:50:95:7d:5c:88:39:1c:39:9f:cd:d1:0c:0f:a9:15:fc:
17:7f:a4:a7:b0:83:9d:70:5e:72:78:a9:98:02:74:86:60:9f:
84:90:94:3d:5e:7c:08:6f:c7:90:49:46:f5:be:b9:db:e8:63:
b1:cc:2c:f7:03:ff:33:5d:77:72:dc:a8:ed:ef:fd:4d:80:54:
df:dc:6a:07:ba:ff:30:83:8e:ba:25:65:e6:1b:8a:6e:e7:db:
05:39:a3:a6:a6:08:09:30:80:f6:ea:24:37:4e:7e:b1:ee:53:
eb:2b:34:53:4c:46:d9:f6:2c:f9:36:a2:82:7e:57:e3:9d:03:
22:a0:a0:95:85:2a:03:05:6f:93:5d:0c:0e:1a:da:1d:0a:65:
d4:0d:67:e9:9a:e8:cc:3e:72:5f:f8:6b:b0:ac:01:f7:01:a1:
65:e6:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:45 2026 by rpki-client