Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json)
Hash identifier: Ap4DxhCPBcavhYAYbIviqROCZ5ZRaoEPyZup9BSd9p0=
Subject key identifier: A8:A4:F2:EC:46:3C:B6:02:21:81:6F:D8:B3:9A:70:FE:8D:84:8F:BA
Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971
Certificate serial: 019D9A3DE482D27F0C11DBBA0B58D652FD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
Manifest number: 0F16
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: ndzKClLWlviBieFtdxkF3sZ68GrSd31FwBPHig6PXPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e4:82:d2:7f:0c:11:db:ba:0b:58:d6:52:fd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=a8a4f2ec463cb60221816fd8b39a70fe8d848fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:0e:df:72:9c:65:46:4e:b7:d0:a2:7c:64:
9b:1a:08:02:4a:8c:ed:bf:1f:6d:87:11:13:1c:e5:
2b:32:49:4d:f2:ad:10:76:3f:fc:b0:26:33:ea:c1:
fa:de:43:42:b4:76:02:71:70:89:af:d1:5b:8c:54:
68:64:5e:35:5d:22:48:84:75:dc:87:ef:80:ba:80:
1a:af:3b:65:6a:db:1a:41:2e:dc:00:57:52:a1:6c:
58:42:4d:76:5c:12:5f:7b:1e:59:e2:87:85:33:8d:
9c:6c:76:4a:a8:97:f8:5d:5a:9d:41:1e:23:fa:e3:
6f:2d:96:36:2c:e7:a8:87:19:72:7c:99:30:9d:81:
12:40:80:ec:5e:a8:b2:1d:c7:e4:17:c7:02:1f:8a:
83:78:ff:37:0d:ca:3f:93:48:54:08:a6:7d:63:61:
82:ce:8d:8c:31:79:72:33:91:e3:d4:a1:f0:5f:b4:
99:e0:7e:ef:7f:f7:fe:63:96:6a:c7:bd:57:dc:c0:
79:02:22:e1:0a:bc:e3:bf:36:3f:43:98:57:d8:57:
d2:f4:8f:0f:b2:d6:aa:a5:47:53:71:7c:fa:da:e5:
fb:e6:d9:53:0f:93:b9:ed:6f:67:9e:2b:b2:de:1d:
c8:0f:ed:74:f0:5d:ad:87:b0:a2:d4:b8:68:13:68:
4d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:F2:EC:46:3C:B6:02:21:81:6F:D8:B3:9A:70:FE:8D:84:8F:BA
X509v3 Authority Key Identifier:
keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f8:db:1d:9e:2e:ac:d9:88:65:ad:70:45:fc:e1:6e:bf:c2:
7d:25:52:51:25:7b:af:73:2b:15:14:46:6d:fb:70:01:a6:cb:
87:98:72:78:7c:ec:d7:f5:86:3e:8d:36:23:bb:f6:69:5b:b4:
d8:03:9d:53:f0:7e:2b:41:93:df:89:9f:77:d1:e2:3b:ff:3d:
8f:12:e3:12:b9:17:17:d1:c0:cf:48:1f:4c:32:98:1c:49:b5:
a2:f1:00:13:2e:c8:e7:99:bb:69:65:91:01:97:24:d0:d5:8c:
45:60:87:b6:38:fb:b4:d6:9f:e2:a8:44:58:1c:58:82:6e:1a:
c7:57:fd:f9:5c:23:13:b7:79:e7:bd:df:69:ff:b3:f0:87:b3:
f6:0d:c8:5f:ef:24:ed:d8:a7:f3:52:29:10:c5:25:7f:24:77:
08:fc:e3:27:3c:9a:21:65:2b:87:84:2b:1b:31:8c:af:88:e4:
e8:54:45:93:34:4f:ac:6d:40:ef:5f:ef:a3:af:4e:45:99:d0:
8f:f0:f2:c1:b2:7c:14:26:fc:ce:49:22:47:fe:bb:2a:41:80:
2b:f8:15:b2:ae:43:c0:be:77:6a:ec:15:7a:46:9f:c3:11:c9:
15:ce:a8:12:11:93:0a:1a:f9:74:2f:4a:e8:fe:ce:d3:9a:b8:
00:85:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:13 2026 by rpki-client