Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File: VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier: 0jqmz77Tq/1aqWa6G6Awebjyen+PyLjRpJy3E2Kp4ts=
Subject key identifier: 92:00:1F:BD:EC:FC:9D:F9:CF:23:F5:1E:FC:15:F6:1B:AA:44:DB:DF
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer: /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial: 019DA48B507C1FB1E024F43D94375D61E37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 07:01:26 +0000
Manifest this update: Sun 19 Apr 2026 07:01:26 +0000
Manifest next update: Mon 20 Apr 2026 07:01:26 +0000
Files and hashes: 1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: loq6VubUnyPW42uaInbAKmTySbKOZJ8nk4ehTelclGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:50:7c:1f:b1:e0:24:f4:3d:94:37:5d:61:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
Validity
Not Before: Apr 19 07:01:26 2026 GMT
Not After : Apr 20 07:01:26 2026 GMT
Subject: CN=92001fbdecfc9df9cf23f51efc15f61baa44dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:a2:39:4c:d2:e5:11:d5:b2:91:8d:c2:75:
30:eb:04:aa:ae:e9:ac:ce:83:53:e1:e3:7a:ee:04:
a9:2a:81:fd:7a:9c:72:12:c0:78:56:c5:72:aa:87:
67:de:b1:7c:78:da:1d:f5:0f:4a:39:73:97:c7:0f:
1b:ff:9c:15:88:f0:ab:a2:2e:26:29:c3:94:5f:eb:
18:25:96:53:aa:b9:7e:5b:d0:9d:49:ec:7a:a8:ff:
5d:c6:e4:10:9d:d2:df:1f:2d:02:bb:7d:2b:36:01:
a5:8f:d0:46:02:6b:f3:24:95:35:dd:60:fb:08:a6:
ba:4a:c5:a3:bc:d2:a7:65:d7:70:8a:10:5a:26:fb:
1b:f4:6e:4d:7f:0c:0c:a7:51:fa:41:cb:9d:e0:3c:
d2:55:79:08:cd:e0:e1:dc:da:62:96:aa:51:61:fe:
82:dc:5a:b2:5f:38:ea:a1:58:6a:87:09:f4:ea:8a:
cf:5f:2d:4b:c1:85:99:8e:1d:60:99:3b:52:e5:16:
4d:65:0f:80:db:e6:92:77:21:a9:86:27:58:c9:92:
a9:31:d7:51:95:51:92:35:6e:2d:c2:b9:c4:57:c2:
3a:cc:40:f1:91:0d:55:cd:53:22:f9:e1:16:1b:1b:
c1:c0:80:51:b6:c3:05:2e:1a:8c:71:b5:76:ae:cc:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:00:1F:BD:EC:FC:9D:F9:CF:23:F5:1E:FC:15:F6:1B:AA:44:DB:DF
X509v3 Authority Key Identifier:
keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:02:67:14:3e:b0:b8:8c:b0:df:30:a6:c1:4f:2a:9b:58:7b:
2f:de:bd:7f:2b:41:33:5a:49:2f:bd:0a:de:f3:1d:f5:00:c8:
71:f9:e4:75:17:ff:38:31:c8:b4:cb:f7:8b:fe:9a:b1:f2:21:
8c:24:02:65:99:b8:2b:9f:df:81:e6:d7:61:51:ae:dd:f3:17:
dd:6e:4d:6f:33:89:55:3d:40:e1:f3:b8:1e:0c:2e:1f:0c:32:
26:cb:8f:36:29:ce:10:b4:4d:65:cd:ec:a6:87:cb:bd:e8:83:
61:1b:79:71:cd:f8:40:44:9c:63:8f:89:b9:bf:7c:92:4b:c8:
fa:7c:38:c3:a1:0d:ef:e9:0c:81:45:00:c8:ac:01:4f:3e:0d:
4c:d2:d1:b4:7c:78:be:f9:31:76:2f:1c:dc:79:e7:28:e4:b2:
c5:b0:9c:31:bb:da:1a:5d:18:69:f5:9d:f5:b6:31:08:01:6b:
ad:b5:c7:28:27:c2:75:f0:3f:04:40:2d:df:41:0a:34:fd:59:
79:30:9f:d1:69:c4:2a:42:d6:2e:c7:90:1e:90:4b:97:1e:17:
7a:6c:23:03:7c:b0:81:61:ac:8b:27:89:0b:1c:83:91:2c:7d:
c9:e0:a4:4a:18:35:bc:61:2c:4d:49:6d:c6:ca:13:e3:ac:12:
35:7f:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:39:46 2026 by rpki-client