Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File: VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier: Eg68qoD1pWjYO+k9zLIhReY+tV7HRpt1qSn+FNViVEA=
Subject key identifier: 7E:14:CA:A4:58:80:CA:84:23:83:21:F1:80:A8:BB:8C:05:A4:EF:56
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 019D992B1875A425AFEAAE7B2396A1F96503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number: 18DE
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: 35RKWFaAWG0FZ0_sumSRQjo-ZTk.roa (hash: ZVFWp4+g/AarEhCpcB89stJLNFioN0GCQ4WE7V4D3XE=)
2: 3e1aB77stWTp_pcWReBzNO2IJyQ.roa (hash: y600ju7YKSbJWZwn4QGcu4eyhB4Kn+pcLohTFXP1j3U=)
3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: HtiTMjnzy1o7ZnfI/BJ0fTKwzLczZyNpBGQxC7csEFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:18:75:a4:25:af:ea:ae:7b:23:96:a1:f9:65:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=7e14caa45880ca84238321f180a8bb8c05a4ef56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:3d:67:e9:0e:cd:d8:93:45:0b:a3:b4:93:
5c:5e:85:12:17:71:fa:04:cb:9a:94:c9:43:5c:31:
34:29:6e:c9:23:2e:76:5e:33:4f:d9:50:8f:f1:2e:
fa:d6:8a:0e:c8:30:e2:c2:26:0d:1d:4c:d9:73:94:
f3:78:14:f0:0c:8f:73:36:d3:2c:81:8e:fb:37:50:
21:80:c1:83:93:f3:71:fd:1b:bc:5f:15:ae:bb:09:
29:2b:ed:53:42:89:20:5b:cf:88:cc:d1:45:56:40:
ca:25:c2:b0:73:f0:64:2f:30:ba:02:3d:d7:30:2e:
23:11:a4:09:13:09:30:9e:09:e5:44:2a:d3:23:0d:
3a:d4:6a:f8:e4:d1:48:49:a0:fb:74:4f:af:d0:59:
c4:85:83:a4:02:11:89:b4:72:f5:26:a2:d6:18:12:
7b:80:b2:75:56:44:b8:f6:21:ee:ab:72:a5:66:de:
e5:8b:80:de:41:17:62:de:d3:31:81:7a:4e:0b:3e:
b9:7c:5b:b6:89:fe:87:85:f7:3f:f0:92:1e:a2:3f:
c2:c4:17:0a:b7:0f:26:76:ad:0e:34:c9:17:f0:b1:
77:29:83:0c:1c:d3:dc:44:98:22:19:33:f3:0c:0f:
ad:e3:74:24:9d:29:f2:e6:f5:c9:e2:5e:7e:6c:63:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:CA:A4:58:80:CA:84:23:83:21:F1:80:A8:BB:8C:05:A4:EF:56
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f5:f7:6a:79:a5:ea:cd:24:86:23:7b:b6:13:80:fe:aa:93:
cc:84:c5:e0:80:fc:4f:f8:c8:d5:e1:0d:68:ec:f5:f4:d1:30:
96:a1:21:51:6b:51:a6:a4:76:e5:72:cf:42:47:da:59:e7:de:
e0:ac:45:9c:b1:4d:6a:6d:c0:cd:33:95:a7:d5:ad:9c:02:07:
c1:3b:10:9b:24:66:a4:f9:35:f3:f4:72:8c:01:b6:d1:f4:8e:
81:d0:5c:07:65:fe:dc:92:29:4c:00:4f:5d:30:2d:dc:de:70:
79:c0:f4:46:de:16:e1:8d:f8:27:14:ef:51:5b:43:48:cd:34:
a2:71:a1:e2:97:5c:61:ff:24:77:64:b4:47:11:ba:12:9a:20:
fa:f9:61:79:2c:a4:58:d2:7c:5b:7f:34:71:15:c1:e0:3e:58:
a7:24:d8:3c:75:23:4c:6b:3b:0a:e7:4a:50:5d:c5:0f:5a:ec:
2e:f4:36:6b:d2:05:34:f9:83:36:59:73:e7:5a:3c:89:61:87:
62:ac:f6:5d:ee:5a:e4:87:04:72:e5:92:af:33:1a:d5:d8:8b:
0e:30:ac:1f:79:17:53:f3:40:62:55:f8:03:b6:91:28:37:2a:
ce:68:6e:ab:ac:ef:0b:f2:08:d7:82:20:0d:83:9c:31:3d:9d:
ea:c6:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:21 2026 by rpki-client