Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier: fBCgCRbLieBXSG66T1hxvEKjvWhA2FTVpK+CW1HSXJk=
Subject key identifier: 5C:2A:15:7D:F5:DA:42:9B:26:4C:64:C7:14:25:34:FE:F6:FE:FF:C7
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 019DA41D1736CB6FBEFD71BB2C23B85A4114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 05:01:02 +0000
Manifest this update: Sun 19 Apr 2026 05:01:02 +0000
Manifest next update: Mon 20 Apr 2026 05:01:02 +0000
Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: v9j14NPLt9uoS3nWMWxFUbYsNV5NgWz/W8zvocJe+co=)
2: b5RJOv7qZAeN9fC5WkVRpB4SgFc.roa (hash: Wt8WdKPtW4g2V/ELjbMd7aeJz0MptjN56nKh7aTTs9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:17:36:cb:6f:be:fd:71:bb:2c:23:b8:5a:41:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Apr 19 05:01:02 2026 GMT
Not After : Apr 20 05:01:02 2026 GMT
Subject: CN=5c2a157df5da429b264c64c7142534fef6feffc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:a8:3c:03:99:c1:fb:e1:ed:e7:9b:be:90:
d9:88:2e:64:e9:aa:4c:03:c0:aa:8f:f6:5a:37:09:
9f:e8:04:80:5b:19:2c:42:8e:35:00:ee:c9:46:6e:
59:04:99:1c:7e:ab:21:0a:da:35:74:62:1e:a8:3b:
c3:ff:dc:de:0f:ad:40:88:f3:c8:b2:ad:d7:f9:34:
cf:dc:31:d5:c0:9b:00:0c:42:8c:df:4d:e3:de:07:
b6:a7:b4:95:e3:ec:ae:15:4b:71:d6:c7:73:d6:13:
5e:c7:3e:95:b7:23:20:4b:68:e4:ea:83:1c:32:61:
40:d7:ca:e5:c8:69:1d:e0:7e:5d:21:a4:5d:ea:73:
3c:0c:3c:b0:99:1e:42:aa:81:a4:c4:bf:b6:1b:e4:
e4:f1:66:4e:9b:20:e0:cb:ac:1c:ec:df:2a:27:96:
de:05:dc:6b:5d:db:5d:16:bd:43:04:3f:b5:8f:4b:
a9:96:db:20:9b:5e:93:72:13:86:85:0f:6c:03:27:
0b:31:91:01:ca:3a:9c:4f:1b:93:3a:63:6f:0a:96:
f4:33:36:f0:57:44:de:54:d3:bf:27:a2:26:80:1c:
08:76:62:3d:ea:97:56:f5:40:7f:7b:13:ec:73:8e:
4f:f2:8d:71:3c:36:09:d1:ff:2b:ae:13:47:22:f8:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2A:15:7D:F5:DA:42:9B:26:4C:64:C7:14:25:34:FE:F6:FE:FF:C7
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:55:65:d9:93:ca:b0:74:ae:64:43:eb:55:11:cf:1f:fd:e8:
58:21:61:81:30:38:61:8f:cc:b4:e4:3b:b7:18:b2:c2:10:e9:
3a:9a:aa:32:ff:b1:90:d4:52:e1:55:5f:21:2b:4d:e7:9d:ea:
a1:6e:b1:f8:ae:4b:30:1e:a4:2a:37:37:2e:e3:f8:ca:2a:9d:
1d:1a:ce:3f:5d:26:5b:5e:e7:c7:aa:cc:dc:cc:ae:2f:69:0b:
67:f9:13:79:11:32:f3:d7:da:c1:bc:46:d4:1e:51:c7:18:53:
79:22:10:3a:21:b3:09:b1:a0:a8:36:43:db:52:c3:a3:25:d9:
f9:f1:6f:34:be:85:fc:55:c8:2e:ca:90:71:e0:90:eb:11:54:
98:8c:ee:46:26:42:ab:54:72:d1:5d:a0:38:e8:0b:57:76:40:
b2:f0:db:88:67:77:bf:c1:92:a6:9e:7a:b8:98:65:64:f6:12:
bd:7a:6a:72:63:f0:71:75:a9:aa:65:52:c4:51:99:2b:e5:23:
81:e0:7b:32:68:03:33:e8:db:82:b4:92:a9:f6:ed:bc:ba:ab:
68:25:e7:09:51:4b:2b:e6:4d:45:dc:61:86:95:b9:11:59:3b:
c8:0a:f7:3b:0d:94:1c:f3:0a:8d:66:83:db:e0:59:6b:c5:09:
a7:3c:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:43 2026 by rpki-client