Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: l+GRe7ii2QxjixogNW4j4Q+0lGOHp5YCpuLWhJQDHXE=
Subject key identifier: B3:5F:F4:DC:D7:8A:FA:B9:BC:BB:6D:C8:17:74:E1:96:05:E0:86:C4
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019D9CD1859C18FB5AE7E6630DE12394EB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 03AD
Signing time: Fri 17 Apr 2026 19:01:10 +0000
Manifest this update: Fri 17 Apr 2026 19:01:10 +0000
Manifest next update: Sat 18 Apr 2026 19:01:10 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: HsVyGLVNq7at8MFe6Caw6TfVxIlvB+V2bwXsiP6lbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:85:9c:18:fb:5a:e7:e6:63:0d:e1:23:94:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Apr 17 19:01:10 2026 GMT
Not After : Apr 18 19:01:10 2026 GMT
Subject: CN=b35ff4dcd78afab9bcbb6dc81774e19605e086c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:db:72:ae:04:c5:72:df:51:2c:ea:20:2a:
10:2d:74:12:57:02:55:d8:3a:54:68:3b:88:03:3f:
91:43:86:8d:ee:68:9a:53:c3:fe:2a:28:5e:3f:a4:
87:ce:b2:8c:10:c2:f8:ce:52:69:16:70:8a:c4:b3:
df:b0:12:9e:1f:17:6b:27:67:ef:a0:d9:01:3a:d5:
74:b0:e4:90:4a:a7:d8:79:3d:4b:ea:95:53:b7:2f:
65:89:3b:4b:0d:31:f4:ea:61:1b:da:3a:62:e2:97:
98:7a:66:c5:8b:c8:10:bb:a5:35:e3:d1:a8:93:39:
55:a0:cd:1a:3c:8e:a7:6f:56:36:40:17:8f:7c:81:
39:32:63:3e:4d:cb:67:82:9b:e0:75:dc:21:73:66:
04:21:1c:19:0b:d6:7f:7f:70:e0:e2:f1:c3:cb:ae:
da:f5:73:b2:fd:8c:b0:fa:d2:9b:4e:61:2b:f7:7e:
da:f3:d0:67:99:ca:6b:37:93:15:4f:e8:0d:77:ce:
fa:11:e7:1c:0a:75:61:a9:af:40:56:3d:79:47:2a:
63:8a:e6:60:8d:e1:29:3c:68:6c:34:10:dd:1a:16:
b4:79:f1:e9:be:9c:f6:74:4c:5e:14:79:16:74:3e:
88:4d:7d:b3:94:58:cf:3d:68:7d:f3:48:00:c0:ad:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:F4:DC:D7:8A:FA:B9:BC:BB:6D:C8:17:74:E1:96:05:E0:86:C4
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:08:21:bc:ba:ed:d5:79:5b:d1:35:d9:04:ab:89:83:f0:
6d:76:a4:7e:c6:46:65:e9:8c:13:f7:b4:5e:e3:d6:9b:b2:f7:
1b:46:a1:b9:c8:9c:83:6b:c0:61:a8:e8:87:99:24:1e:9b:60:
51:f5:b0:e9:35:88:81:ba:a1:72:01:33:7f:a7:b4:86:7c:25:
15:3c:f2:47:ec:0f:b0:6c:1d:1c:82:06:9f:ba:1e:97:4e:8b:
76:dc:0d:be:07:3b:4f:58:62:08:c0:06:ad:af:8f:37:60:69:
56:7c:aa:50:03:5a:7e:88:80:7e:14:ed:c1:27:c7:8f:84:a6:
f2:7f:a2:f2:8f:5f:74:31:d6:af:b4:d8:9d:56:e9:46:ab:0a:
9d:0f:35:16:ea:16:6b:f0:d3:4c:c6:d8:a0:9e:1e:a9:6c:d6:
5a:48:b8:38:1c:77:82:f8:ba:93:1d:34:7d:3f:d0:f1:b6:c0:
bb:b4:6d:df:38:67:b9:c5:74:22:f8:fd:23:93:bf:94:49:bf:
34:4c:ec:76:48:ad:ba:1c:f4:a5:20:2a:f9:fd:1f:80:e7:11:
47:19:3b:b9:85:77:df:c8:bb:1d:10:87:85:00:eb:f4:73:c8:
67:24:1a:9e:1b:e8:1d:cf:fc:10:e3:fa:99:dc:d0:3f:f3:9a:
36:7b:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:46 2026 by rpki-client