Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: A7r2AFYH2iE+iHn1c7jKANz2eDoiOl5LmeEw7JIr9cs=
Subject key identifier: CC:22:91:06:FB:C2:20:02:FD:8B:65:DB:C0:A3:24:18:E9:68:0E:83
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019D98BDCC7960FC7CDF6037BA4840F1A520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:01:08 +0000
Manifest this update: Fri 17 Apr 2026 00:01:08 +0000
Manifest next update: Sat 18 Apr 2026 00:01:08 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: NNj11X99d16hwI4fj9kVMxpg4VMjJ9mQkYsN1yE+z38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:cc:79:60:fc:7c:df:60:37:ba:48:40:f1:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Apr 17 00:01:08 2026 GMT
Not After : Apr 18 00:01:08 2026 GMT
Subject: CN=cc229106fbc22002fd8b65dbc0a32418e9680e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:61:a1:5d:d8:61:cc:91:a3:1a:dd:b7:be:
e5:3f:a9:d3:be:b0:1a:10:74:a0:5e:3f:cb:78:f9:
d6:78:e8:51:1e:82:62:6c:43:78:4c:51:d4:99:2a:
a1:1e:44:68:30:72:a6:5d:70:a5:3e:ca:f5:ca:12:
f6:01:3e:a4:0d:6f:17:ba:e3:0b:d3:3e:f9:62:69:
29:2a:9a:58:1c:1a:5a:66:e4:27:9d:26:54:68:21:
01:3b:29:8b:ea:5f:60:65:c1:f0:79:fc:84:63:fd:
15:8f:9f:a8:11:75:50:4d:13:e9:64:29:d6:c2:72:
b7:84:0d:0e:81:71:cd:14:71:16:18:74:fe:69:bf:
00:12:4b:f0:cf:44:95:d7:9d:8a:fc:5e:ff:a7:35:
6d:8e:3a:34:ce:05:c1:71:91:79:5c:e0:b5:6d:04:
74:71:4c:30:c4:79:10:de:ec:d7:17:b4:99:84:a9:
51:e3:11:7d:dc:c1:80:b2:dd:e3:7a:37:24:ce:d8:
d0:bc:7a:81:ef:3b:f8:d4:da:e9:70:b4:40:c8:d9:
c4:c1:79:30:9e:ca:6c:5a:8a:25:64:e1:72:a1:c8:
18:b0:19:14:a1:cb:82:5f:9a:f1:59:f6:31:b3:22:
c0:1b:f7:51:f0:54:60:bf:fd:26:fb:41:e5:9e:f2:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:91:06:FB:C2:20:02:FD:8B:65:DB:C0:A3:24:18:E9:68:0E:83
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:08:4b:9e:22:77:26:bb:87:dc:29:00:0f:07:01:c4:0f:a7:
63:9e:27:90:02:88:1a:20:10:af:3e:6e:d4:21:bb:e3:34:da:
6e:75:33:aa:01:83:41:87:f0:de:fd:8d:90:a4:03:b9:0f:6d:
08:24:54:ec:50:30:d5:1b:e3:c9:74:9f:34:bf:2d:68:aa:63:
36:fb:7c:70:77:bc:12:c1:a0:f2:4c:87:55:8f:59:40:f2:b1:
a8:cf:77:32:31:e2:af:fa:2a:2f:90:61:ee:6a:40:ad:ad:84:
08:7b:c1:3f:ce:fd:83:4a:ae:f2:2b:42:78:b8:2e:7e:c1:5f:
cf:27:57:4f:b8:f3:53:5c:89:7c:07:8c:27:a6:9e:0f:05:62:
26:68:52:db:73:2a:06:ff:8e:16:cd:ed:3f:77:3d:84:1b:ad:
22:21:7e:84:a7:2c:f6:9a:6a:e1:60:4c:7a:9e:e9:e2:78:ee:
d4:b3:8d:a9:63:87:a1:ae:50:f1:56:1c:12:5a:88:fd:78:29:
32:1e:29:7a:de:60:a3:c3:84:77:9c:67:da:1a:31:27:2d:cc:
3b:69:04:a7:b6:ff:b3:04:d7:a7:2a:67:2f:06:ae:b6:1f:2a:
95:eb:c5:23:d1:ca:a1:d3:d1:b0:19:30:c7:85:76:52:16:07:
fc:20:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:29 2026 by rpki-client