Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: BaEG5r9rEjuc+AFdoTxRh3btXCxX6RQlB3Ke3x4PW9o=
Subject key identifier: 75:D2:1B:48:58:87:BD:55:86:5C:51:87:96:42:90:7B:90:FB:8F:A2
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 019D9A3E04D442182EE503A8C593EB8E0D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 1364
Signing time: Fri 17 Apr 2026 07:00:48 +0000
Manifest this update: Fri 17 Apr 2026 07:00:48 +0000
Manifest next update: Sat 18 Apr 2026 07:00:48 +0000
Files and hashes: 1: PYk6RC5m7OJWXRNYO3x9foVmPwM.roa (hash: PyAWpAbdnvAvMuGXImxWil5LYMDe43kyqM8HknJO3mg=)
2: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: k70711ZgHY8qjVf7xqgrB+UU5iikHa+oeMBkZjraPXg=)
3: VilG8hdH4e2PgtPf0HH0QvCs9SA.roa (hash: X3S3ljAAWfahEeHRRoaDomf7TEYfABDZSsMixEQ2Qa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:04:d4:42:18:2e:e5:03:a8:c5:93:eb:8e:0d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Apr 17 07:00:48 2026 GMT
Not After : Apr 18 07:00:48 2026 GMT
Subject: CN=75d21b485887bd55865c51879642907b90fb8fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:d6:db:63:58:c9:f9:9e:ee:f4:c3:75:d4:
39:ee:10:ed:83:d4:55:ee:de:26:ed:13:a9:96:1c:
45:a5:85:cd:ed:14:90:96:c1:a5:27:b3:92:8e:1d:
2c:73:c7:f8:a1:e5:b0:78:5b:a3:94:0a:3c:bb:7f:
95:b1:0e:7b:2f:cc:f6:a9:55:64:66:a3:41:7c:d2:
15:cb:16:8b:77:0a:0b:4e:85:41:7f:c7:e4:0b:72:
dd:06:51:1e:40:81:b7:4a:61:b1:3d:77:b6:85:29:
74:25:8e:87:cf:46:87:48:1f:60:8c:c3:91:ce:34:
b7:02:83:e3:27:a3:5a:95:72:6e:80:75:c6:15:85:
a7:b8:00:fd:c8:a1:fc:61:3e:af:51:e7:16:4c:8d:
85:fb:99:dc:19:4b:8d:51:4e:72:2c:d0:06:76:24:
df:90:55:bc:3b:6f:7d:2d:cf:df:fb:e0:51:0a:5a:
4b:3d:de:b7:34:dc:53:39:b9:af:67:a7:6a:30:54:
0c:ae:85:cf:4c:42:71:4f:c8:0e:2f:69:6b:b2:a6:
c7:ae:aa:17:f7:13:27:75:18:db:bf:83:5f:f9:5b:
d1:1f:ff:40:a4:ec:56:f2:6e:7e:ec:e5:df:45:b1:
60:05:d2:aa:ab:60:4e:eb:cc:42:0f:a5:39:06:9c:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:1B:48:58:87:BD:55:86:5C:51:87:96:42:90:7B:90:FB:8F:A2
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d9:8d:b4:dc:7c:35:0f:09:99:f7:bc:3c:76:9e:6a:24:32:
48:a0:cf:97:95:81:96:a6:b1:69:ae:ee:8a:c2:13:f3:94:0e:
11:db:25:c6:da:a5:7e:f9:3c:09:ac:f9:65:7a:72:de:ec:61:
fe:ba:8f:78:a0:d4:ce:eb:22:10:7a:31:5a:ed:d6:a3:ca:3f:
60:e1:94:ee:51:08:8e:fd:b0:3b:1b:5c:1a:4d:f2:0b:fd:2e:
fa:07:66:48:42:d6:66:0d:2e:ba:9a:f5:d6:dd:97:c5:fd:38:
be:fa:7e:8f:b6:aa:1c:ad:4e:b0:e9:79:5b:37:e3:5a:3e:5a:
74:4e:ea:2c:a3:5e:a9:23:b9:da:90:e6:c4:35:29:3f:3e:61:
6d:b0:2a:1d:88:49:e1:67:32:f9:e5:0b:b4:6f:98:b5:3b:5b:
b2:e1:11:ce:10:eb:9d:22:c6:3c:dd:1a:f1:b8:fb:93:ce:4c:
e0:2b:49:fc:9e:7a:44:4b:56:a0:48:db:3a:80:bb:d6:b6:ee:
c1:9c:55:50:5e:cd:57:27:0d:e6:ca:fe:ba:75:cf:61:ba:b1:
3e:15:9a:9a:6e:d6:d8:d6:cb:4c:fc:5e:29:88:56:c3:70:c1:
7a:7e:ed:ab:37:7c:30:72:b7:8c:66:1d:bb:45:ef:bc:a6:64:
c2:b4:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:11 2026 by rpki-client