Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: uegMUyBo9qIfX5/qdlKO1AHsdDUMSLpAroA+OGVqIbQ=
Subject key identifier: 9D:80:03:01:F2:18:EE:12:79:1B:F2:1B:AE:3A:F1:36:9E:9E:53:DA
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 019D9850332047306DEDE797A5B522FC073C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 18FC
Signing time: Thu 16 Apr 2026 22:01:25 +0000
Manifest this update: Thu 16 Apr 2026 22:01:25 +0000
Manifest next update: Fri 17 Apr 2026 22:01:25 +0000
Files and hashes: 1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: AO6w0d9z6FlEwze2P4kI0nwdwR7Qwj7rhuExCiTnqnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:33:20:47:30:6d:ed:e7:97:a5:b5:22:fc:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Apr 16 22:01:25 2026 GMT
Not After : Apr 17 22:01:25 2026 GMT
Subject: CN=9d800301f218ee12791bf21bae3af1369e9e53da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:63:c5:62:97:34:dc:1b:db:39:1c:86:77:
9e:cd:5e:2b:2c:23:c0:12:ee:89:e6:2c:e3:80:73:
00:1b:8f:6c:af:ff:69:41:83:4c:b0:b4:e9:3d:6e:
c6:b3:d3:71:82:96:3d:1c:46:b6:c0:0e:e8:a1:4a:
6b:23:3e:38:bd:74:2b:2e:57:fd:b8:03:bd:1e:c9:
6c:92:e0:2c:75:e6:0a:82:2b:2c:45:1f:53:a7:ac:
a4:4f:ee:23:3e:9e:06:02:bb:d4:90:50:8a:bf:a5:
a9:00:fb:e8:b4:e4:75:ce:d1:7e:9a:a6:dc:3f:4c:
ea:d8:40:5b:14:43:20:51:ed:2a:5f:1d:52:d2:74:
90:b7:28:e4:77:d0:c9:92:1a:c7:2a:f1:04:ad:96:
cb:31:15:0a:76:b0:3a:68:4c:b3:2c:26:b3:a7:76:
61:4b:84:dc:da:30:61:71:15:43:79:45:f8:85:41:
60:52:51:65:46:ce:e6:e9:e5:3a:d5:6e:43:a8:f2:
44:68:4f:dc:f2:9b:65:9f:b1:25:59:39:af:a1:2e:
9b:ad:5c:6b:9d:6a:42:ae:62:db:34:06:a6:d1:a0:
19:42:61:41:a9:bc:21:5f:cc:17:88:50:26:a8:16:
5c:0d:a9:3a:9b:32:61:fb:34:ba:c9:fa:0e:23:93:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:03:01:F2:18:EE:12:79:1B:F2:1B:AE:3A:F1:36:9E:9E:53:DA
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:95:b6:7b:b5:e6:d8:db:ec:2d:82:3d:95:b1:9b:f8:72:da:
00:14:8f:d2:c7:fe:13:5e:63:aa:5d:ee:d9:72:0d:e0:84:e5:
8c:ad:14:cf:87:d0:ad:ac:32:30:ef:89:d2:08:92:3c:30:c8:
d4:84:c7:c7:76:a1:7d:c2:08:18:6f:b1:55:45:f5:dc:28:38:
d5:8c:9d:91:bb:8f:21:01:97:81:3f:80:f4:6d:3b:b6:a5:6a:
5e:00:9a:b1:8b:43:b3:8f:f2:37:c9:99:57:b7:2e:47:ce:70:
75:58:e4:ac:ea:00:bb:87:b2:3b:fa:d7:da:a9:df:9e:63:a2:
9e:a0:96:56:0f:eb:74:aa:4e:ea:53:22:da:fb:4c:52:31:83:
af:da:7b:38:1a:1e:54:e6:6c:e4:74:8d:bf:1d:27:c3:94:de:
f4:67:0d:a0:06:42:4e:56:47:9a:29:26:59:12:ad:95:a8:82:
f2:99:c4:2d:20:ad:cb:63:5e:1b:a6:39:de:65:30:e4:29:67:
9c:6d:d8:1a:81:e0:cf:2c:c4:e9:cb:f5:8c:dc:a9:df:93:74:
31:14:c4:1c:6d:98:f8:a4:87:4e:61:6b:5b:16:53:fe:ee:5b:
24:09:0e:a7:c4:4c:36:5a:83:eb:42:9e:c3:57:c6:50:1d:5e:
93:e9:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:15 2026 by rpki-client