Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier: vq3mlLsX3+nOIhWIjdFwwJTm2CyjVCmfEeVKyLyaUqE=
Subject key identifier: 06:EF:95:FE:D6:28:3B:CD:CB:21:FB:0C:61:6D:8C:1B:62:F4:B3:CB
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 019DA453B16FF225DAD34A408FE102456A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number: 18CF
Signing time: Sun 19 Apr 2026 06:00:41 +0000
Manifest this update: Sun 19 Apr 2026 06:00:41 +0000
Manifest next update: Mon 20 Apr 2026 06:00:41 +0000
Files and hashes: 1: 1lthQpNbdjvBjBvjx6o7dCcl_Lo.roa (hash: 09BW9AeuTKZNn0ro2yAFDYjo+0iZf6CKLrMs3cH5rIY=)
2: 6aiY7xcGMBhwSg811tAap0q5YOE.roa (hash: 5uK3tyYvucJWaPpSSYb7UKyYwuwhu+iE+thzsmoLCeU=)
3: RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa (hash: XjBkKwPLZL3Yi2tKr0y72A6eYen+buTvuweq1X1GG4Y=)
4: UzRHQuzUI0Ss5Pz4cItdnmMHCLw.asa (hash: 3AMssHCd/Ax3dExijoPFYSMky22OYdzCGjVn4xJGhIA=)
5: dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa (hash: NGvNDCH8JOp3+J18djkqIKrsn9XAQSXC2Ct+Fov8XNs=)
6: gahY2AwMV2dT0-Rml8PSy5NNRwU.roa (hash: YqOJQ01+Og7TwNTW8gpVjpEoYoqEByjHecFHs9UvJNo=)
7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: 3qFMyuiHjWbz37MP/shBdIT0ahNBpObCDYypCdxwbDE=)
8: xuh6sRkHSsQPLZas7QrHkiH1T2k.roa (hash: /cp/uJIEUnczl8mvWtL8aIuZWLWYTpcWWurRsAFLXiA=)
9: ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa (hash: DK9+AlzaJPs7Bge4vOR9auQX8qnNw3cNCE94Ti0BdaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:b1:6f:f2:25:da:d3:4a:40:8f:e1:02:45:6a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Apr 19 06:00:41 2026 GMT
Not After : Apr 20 06:00:41 2026 GMT
Subject: CN=06ef95fed6283bcdcb21fb0c616d8c1b62f4b3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:7d:0e:de:bd:24:8a:01:68:07:4f:c0:21:
67:1f:2b:b0:11:c7:a6:7d:da:3c:75:ee:16:ae:a9:
59:3e:dd:f8:2d:78:4d:4e:6d:21:5f:d9:af:cd:f8:
f5:a7:3f:e6:5a:95:05:de:fa:1c:7e:89:fb:e4:38:
72:97:5e:3a:59:8d:66:a3:fe:17:84:3d:ef:a8:d7:
f6:39:ab:00:0a:03:44:bb:72:ec:a7:02:31:55:a3:
94:12:43:cc:27:7f:94:95:77:ac:23:22:16:7f:ce:
e1:37:2d:16:c6:7d:76:ee:b2:81:79:30:8e:45:39:
b7:66:ff:e0:5e:57:ec:d5:d0:93:e7:89:34:a4:9c:
09:e3:31:ed:5a:ae:eb:70:50:2b:11:fe:68:3d:95:
df:96:98:d8:b0:97:d7:2e:f5:52:23:f2:03:7a:3a:
86:6b:0a:93:ed:e0:72:83:56:76:30:62:5f:5f:10:
4b:0d:9f:c5:ad:2d:f8:52:40:42:9f:e0:66:bd:af:
a8:27:4e:89:40:ec:2e:8c:14:9c:02:52:7a:66:51:
8a:09:98:72:e1:85:65:18:9c:37:6d:0d:eb:08:fa:
a4:19:c8:90:89:f2:6c:ef:91:2a:24:53:42:cf:20:
1a:c3:01:77:72:c9:fb:66:b1:f5:e8:f4:5f:83:2c:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EF:95:FE:D6:28:3B:CD:CB:21:FB:0C:61:6D:8C:1B:62:F4:B3:CB
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8a:4c:30:8a:9f:44:47:e0:a6:43:66:c9:0d:df:51:f1:af:
ad:9b:08:9d:3f:63:ee:6f:97:85:86:24:9d:5f:09:c2:56:f1:
5b:88:c2:52:22:ab:79:40:4d:eb:1f:67:34:57:dd:13:d2:5a:
11:44:17:1f:66:fd:6c:16:8f:f9:fc:57:b8:92:b6:2f:66:67:
be:1b:87:59:b4:fa:f4:cf:5d:58:e9:a6:1a:17:35:ac:2c:d0:
5d:da:95:ea:66:5e:87:28:27:89:d5:af:b0:a0:d1:3d:d2:97:
ac:e3:fb:d2:2d:75:fa:6a:f4:1d:aa:bb:ec:14:ce:a7:11:5e:
5b:9d:c3:d6:6a:d5:52:46:bb:29:48:3e:ad:1f:49:8c:bb:8d:
84:6a:dc:f4:93:93:85:8b:77:ef:d6:43:c0:52:54:52:ad:b2:
86:b5:89:ff:08:49:4b:e4:0b:fa:86:4c:e5:d3:b5:b5:a8:c9:
3a:36:d6:7b:ef:f8:32:03:b7:2d:fe:44:fb:b2:73:4d:f9:7c:
20:01:18:ce:89:ad:e1:c7:cb:22:46:a5:85:c4:b7:76:a4:03:
1b:2b:bf:c1:ef:e1:47:68:b7:69:9b:09:98:ed:b2:05:cf:00:
4b:80:2c:1b:52:9c:44:26:c7:48:0b:5b:1b:55:19:b0:6e:05:
ad:f8:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:58 2026 by rpki-client