Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: 6wupuMIf+K644xfSgsSW9NbRqVNGKW1CzbaeF0RbGyE=
Subject key identifier: 21:34:ED:61:16:09:95:BA:6A:19:EB:27:7A:BF:D3:23:00:DC:8F:03
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 019DA41C8019F6A173362495D77C27D3DC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 18CE
Signing time: Sun 19 Apr 2026 05:00:24 +0000
Manifest this update: Sun 19 Apr 2026 05:00:24 +0000
Manifest next update: Mon 20 Apr 2026 05:00:24 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: 67CgO7M9HndFHOe2IG02wdIWEejlq/hJcDJ08c4y7y0=)
2: hUSppmm3TUDUe9c3zKVYGDhp5FI.roa (hash: wajskwcklMoTdKJT16kOKBQL/f8FpnT58RrghPxKbEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:80:19:f6:a1:73:36:24:95:d7:7c:27:d3:dc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Apr 19 05:00:24 2026 GMT
Not After : Apr 20 05:00:24 2026 GMT
Subject: CN=2134ed61160995ba6a19eb277abfd32300dc8f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:cf:4e:75:9a:96:1f:2a:ec:7d:5f:36:5b:
dc:c8:3c:2d:f2:e7:82:42:d3:66:f0:cd:db:4e:fc:
3b:85:19:94:11:e7:29:92:5d:c4:eb:d3:7d:d4:7c:
8d:3c:09:87:4c:0d:13:bf:7b:07:7a:d2:1e:74:bf:
9a:da:0f:69:10:57:a5:0e:39:b4:6d:0d:46:0b:b0:
a8:de:e6:d9:f9:18:95:51:c5:5c:85:ba:e5:a7:f6:
df:2f:a2:0f:69:91:77:f1:42:fa:50:e7:f3:79:db:
50:cf:83:6c:06:c9:59:e5:29:f6:64:7d:32:fa:40:
fd:e4:35:45:5c:59:00:e6:e7:cd:af:a4:bd:b4:4a:
65:df:9d:b4:8e:fa:ae:52:a8:4f:9d:55:ab:fd:da:
1b:d2:d7:96:b7:bd:f1:b8:3e:f8:87:6f:38:32:6a:
b2:c0:8a:72:e5:2f:9a:bd:2d:91:4f:7b:51:21:1d:
f0:27:b9:1e:1e:bd:82:70:68:86:cd:72:b7:42:7d:
f6:24:80:4d:fb:01:fa:7d:63:73:4c:ef:dc:db:3f:
b3:97:37:a1:b8:06:03:dd:62:3a:d5:17:1e:a6:7e:
9a:05:fc:55:65:c8:9a:de:a3:f6:e3:1c:ee:1b:09:
05:6e:10:cf:7b:2c:e7:cc:8e:69:52:84:a2:d2:da:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:ED:61:16:09:95:BA:6A:19:EB:27:7A:BF:D3:23:00:DC:8F:03
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:64:4e:21:ea:e1:a8:94:c6:b4:02:5b:7e:08:53:c8:ef:cf:
05:00:e5:d3:be:82:be:a2:ab:3d:b4:6b:41:43:80:eb:27:66:
f3:2d:7c:4d:72:05:9b:23:27:06:f9:ea:46:83:59:0b:cd:b6:
7a:ec:de:a7:51:69:0a:11:75:ea:31:75:bc:ac:d2:4f:8a:44:
ab:eb:da:fc:c4:7e:ae:c8:38:a5:7f:76:e9:e4:19:74:46:37:
9f:36:4f:aa:f1:f2:38:8b:d2:9f:35:6b:09:ea:7c:3c:59:da:
2e:fd:1f:db:c8:bb:98:51:d8:4d:e7:25:6c:1a:87:b2:7c:8a:
d6:37:f7:7c:cf:a9:f7:67:94:bd:6d:c3:73:39:68:1d:ed:e6:
59:5b:ac:cf:56:c2:18:4b:16:af:95:20:46:6e:68:40:5d:69:
64:f8:19:c1:ab:8f:57:0b:57:a6:98:c9:04:a0:fc:ee:05:8b:
d6:dc:7c:4a:34:57:f9:3b:b6:11:49:20:f1:6f:a1:48:1b:d0:
3d:3f:1d:78:09:42:2f:86:f9:4d:53:b5:5b:45:14:e4:b6:20:
5d:7a:0f:41:38:70:37:14:a3:9d:63:9f:63:a6:99:5b:69:3c:
8a:40:bf:91:13:a8:35:35:37:8c:bc:60:fc:42:6d:bd:86:a5:
cb:5b:1f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHIAZ9qFzNiSV13wn09wyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw
MDUyZjMwHhcNMjYwNDE5MDUwMDI0WhcNMjYwNDIwMDUwMDI0WjAzMTEwLwYDVQQD
EygyMTM0ZWQ2MTE2MDk5NWJhNmExOWViMjc3YWJmZDMyMzAwZGM4ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMjPTnWalh8q7H1fNlvcyDwt8ueC
QtNm8M3bTvw7hRmUEecpkl3E69N91HyNPAmHTA0Tv3sHetIedL+a2g9pEFelDjm0
bQ1GC7Co3ubZ+RiVUcVchbrlp/bfL6IPaZF38UL6UOfzedtQz4NsBslZ5Sn2ZH0y
+kD95DVFXFkA5ufNr6S9tEpl3520jvquUqhPnVWr/dob0teWt73xuD74h284Mmqy
wIpy5S+avS2RT3tRIR3wJ7keHr2CcGiGzXK3Qn32JIBN+wH6fWNzTO/c2z+zlzeh
uAYD3WI61Rcepn6aBfxVZcia3qP24xzuGwkFbhDPeyznzI5pUoSi0tojrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE07WEWCZW6ahnrJ3q/0yMA3I8DMB8GA1UdIwQY
MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt
ZWUxMTI2YTI4MTk1LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1
LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2ROIerh
qJTGtAJbfghTyO/PBQDl076CvqKrPbRrQUOA6ydm8y18TXIFmyMnBvnqRoNZC822
euzep1FpChF16jF1vKzST4pEq+va/MR+rsg4pX926eQZdEY3nzZPqvHyOIvSnzVr
Cep8PFnaLv0f28i7mFHYTeclbBqHsnyK1jf3fM+p92eUvW3DczloHe3mWVusz1bC
GEsWr5UgRm5oQF1pZPgZwauPVwtXppjJBKD87gWL1tx8SjRX+Tu2EUkg8W+hSBvQ
PT8deAlCL4b5TVO1W0UU5LYgXXoPQThwNxSjnWOfY6aZW2k8ikC/kROoNTU3jLxg
/EJtvYaly1sfOQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:18 2026 by rpki-client