Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: rPlnqIIMLo3rCshu1L/MjKeVnZINRIzo6t2Eoaonkrk=
Subject key identifier: 49:93:48:24:1E:8F:03:07:A2:AA:7D:0C:18:C1:46:22:9B:5F:5A:2C
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 019D9C99E3DB9F3D3A162662AAE3040E4E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 18:00:24 +0000
Manifest this update: Fri 17 Apr 2026 18:00:24 +0000
Manifest next update: Sat 18 Apr 2026 18:00:24 +0000
Files and hashes: 1: QOx2LcItYAde8Bu7yyYezAd_b5U.roa (hash: recLbl2iES5/0aXRvjtkzbHI5bXaE/LjpnXC8P4lC98=)
2: QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa (hash: q6REhdk2/z8f63MlyAEiLr/0oQ0zIK2tSS3WmI/QIxA=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: snFwzKeVK4Mrt6U7MVkzKjfKPL4TNy1KIrWJzVAJP94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:e3:db:9f:3d:3a:16:26:62:aa:e3:04:0e:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Apr 17 18:00:24 2026 GMT
Not After : Apr 18 18:00:24 2026 GMT
Subject: CN=499348241e8f0307a2aa7d0c18c146229b5f5a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:fc:c4:76:95:5d:c4:c3:e7:88:43:a4:80:
f7:ac:83:c7:8e:ea:06:12:af:db:0a:c0:84:45:a1:
63:5c:54:e9:bd:a1:ba:b8:f3:30:36:ef:30:43:9b:
b5:a3:6e:5c:c3:c1:97:5f:b8:6e:ea:34:91:ba:7d:
6e:30:ef:ff:b5:f2:01:7b:fc:2f:02:b6:32:de:71:
b1:c5:66:84:0a:82:b0:ff:8e:26:0b:ea:e4:6f:b1:
c1:a8:81:a2:64:a6:84:4a:d3:6b:d3:d1:14:7c:7d:
3a:88:f9:d6:bb:4b:36:f5:0e:52:d7:9d:f1:7f:8d:
ee:9b:bb:77:8f:32:4e:6e:20:08:30:e7:c0:16:62:
a4:c9:f1:01:ef:04:95:83:ab:4b:9d:08:cb:36:96:
8d:33:ed:ea:99:2c:f1:bf:0b:4a:1d:c9:a4:52:78:
d7:b0:94:4b:6b:30:bc:8b:19:1a:4e:23:fa:d7:b8:
7d:15:cf:50:fe:a4:88:c7:46:6c:12:08:9c:2e:23:
36:dc:f2:c5:5f:85:b3:ee:9f:81:f9:92:25:1f:44:
d3:04:bd:4b:58:23:e0:57:33:e6:b8:ed:93:65:51:
82:5a:3a:e1:9c:d9:1c:23:b0:b3:3c:33:7b:35:c8:
d5:0c:a4:3d:f2:b5:09:11:49:03:eb:0a:c6:c3:2b:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:93:48:24:1E:8F:03:07:A2:AA:7D:0C:18:C1:46:22:9B:5F:5A:2C
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:73:56:ff:e6:e0:d1:44:a6:be:52:8c:0c:ae:e3:26:2f:48:
7d:7d:53:f2:61:38:9b:b5:9e:5c:6e:e4:2d:32:a6:96:8a:36:
94:97:53:4a:a1:9e:b5:fe:0c:05:0e:c2:a3:f4:ad:44:8a:10:
54:8b:1a:7b:68:eb:f3:f7:dd:3e:11:52:0b:0d:92:a1:bf:ba:
b0:f6:43:46:3b:a0:8f:e1:eb:4e:32:ba:17:f6:ec:c4:1e:74:
0a:e6:15:ef:5b:21:08:9a:46:2b:52:ea:f8:dd:44:bd:63:23:
4c:58:91:bb:46:19:29:3b:16:b1:5c:f7:f5:5a:df:b3:d8:ca:
fd:bf:5e:b4:8f:5e:1c:ed:e4:1e:a3:54:c7:65:35:88:11:18:
c9:7d:f0:e0:3e:10:f4:a2:e5:1a:17:ae:4b:0e:27:e7:2f:28:
0d:03:f3:6b:95:e4:98:3d:0e:7a:b6:10:9b:21:b4:51:95:3b:
48:bd:f7:15:a6:1a:cf:1f:f7:29:a3:c2:2e:4f:4b:c8:b6:df:
b1:76:6c:cc:5d:df:fe:8c:0d:ae:21:e8:d1:68:f5:ce:7e:99:
a9:36:16:37:6c:5f:a2:be:59:7b:8a:2a:04:79:8b:07:32:e7:
b3:b1:6a:c4:5d:80:f7:d2:d9:95:d2:16:f3:53:b9:a7:27:db:
d1:de:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:19:50 2026 by rpki-client