Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier: lfGb+wZNMxV7WUKqNq+jWgUQVVRtmAmb8yFwd/6tnXw=
Subject key identifier: FF:15:04:2A:7E:A7:FE:7B:1C:BD:E8:69:E5:D5:94:34:00:19:4E:14
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 019D98BD6BDB3615587EB73CAEF35E1A0618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 00:00:43 +0000
Manifest this update: Fri 17 Apr 2026 00:00:43 +0000
Manifest next update: Sat 18 Apr 2026 00:00:43 +0000
Files and hashes: 1: 1lthQpNbdjvBjBvjx6o7dCcl_Lo.roa (hash: 09BW9AeuTKZNn0ro2yAFDYjo+0iZf6CKLrMs3cH5rIY=)
2: 6aiY7xcGMBhwSg811tAap0q5YOE.roa (hash: 5uK3tyYvucJWaPpSSYb7UKyYwuwhu+iE+thzsmoLCeU=)
3: RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa (hash: XjBkKwPLZL3Yi2tKr0y72A6eYen+buTvuweq1X1GG4Y=)
4: UzRHQuzUI0Ss5Pz4cItdnmMHCLw.asa (hash: 3AMssHCd/Ax3dExijoPFYSMky22OYdzCGjVn4xJGhIA=)
5: dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa (hash: NGvNDCH8JOp3+J18djkqIKrsn9XAQSXC2Ct+Fov8XNs=)
6: gahY2AwMV2dT0-Rml8PSy5NNRwU.roa (hash: YqOJQ01+Og7TwNTW8gpVjpEoYoqEByjHecFHs9UvJNo=)
7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: ZrH6GJj2nfaUOl1FXXgSg+OVJgA/wPKXV1O7dDiJ1zk=)
8: xuh6sRkHSsQPLZas7QrHkiH1T2k.roa (hash: /cp/uJIEUnczl8mvWtL8aIuZWLWYTpcWWurRsAFLXiA=)
9: ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa (hash: DK9+AlzaJPs7Bge4vOR9auQX8qnNw3cNCE94Ti0BdaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:6b:db:36:15:58:7e:b7:3c:ae:f3:5e:1a:06:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Apr 17 00:00:43 2026 GMT
Not After : Apr 18 00:00:43 2026 GMT
Subject: CN=ff15042a7ea7fe7b1cbde869e5d5943400194e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:8e:dc:f5:4f:44:ad:c1:36:a8:54:8a:62:
76:39:c1:94:3c:4f:e5:2b:a1:05:1b:4d:65:62:11:
63:ee:0e:e6:22:b1:55:cb:19:6e:02:ba:23:66:27:
7f:70:15:92:74:5a:b7:97:4e:41:09:c7:36:d3:ae:
9d:0a:1d:dc:80:a5:fa:93:6f:cc:fd:84:e6:23:cf:
15:fe:cd:65:f5:60:31:47:2a:a9:cd:82:75:56:e0:
a1:24:33:9c:c1:0e:00:ec:f3:5d:6d:7d:00:9f:5b:
da:4a:0a:df:61:cd:a6:29:0c:f0:74:f0:f4:1d:39:
ea:8a:ec:df:ae:f9:07:ef:58:65:86:c8:8e:10:aa:
54:f9:90:74:bc:9a:fb:8a:43:1d:c6:8a:37:f9:01:
a1:f1:a4:9d:59:52:ba:ca:81:3c:31:a4:5d:c8:90:
54:76:fb:02:56:f8:d6:88:d7:e1:de:99:64:af:db:
ea:d2:ac:0c:7a:27:d4:a5:65:73:53:13:5f:88:23:
c6:c0:13:e3:4c:e5:7b:eb:26:c1:8d:c0:46:a2:69:
e6:26:c2:45:e7:12:51:d9:20:03:0d:40:20:fe:3c:
76:1b:f0:fd:9a:68:5c:45:93:85:f0:eb:c1:44:9a:
38:cc:f3:75:0b:40:91:45:76:36:7b:ee:b9:36:94:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:04:2A:7E:A7:FE:7B:1C:BD:E8:69:E5:D5:94:34:00:19:4E:14
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:74:fb:35:47:a7:f0:ca:0d:b9:3f:3f:e2:94:13:57:62:87:
91:ea:1d:ae:0f:a7:48:4c:c1:b2:5a:da:53:8f:f8:44:b2:63:
a5:62:a1:93:c9:8b:23:ed:b1:56:7f:81:da:6a:b2:4f:5b:95:
95:9c:70:a2:0b:fc:e7:93:76:4d:e7:2c:05:38:50:b6:84:06:
83:c7:15:16:f1:21:23:76:cb:3f:cd:33:92:2b:5b:98:25:9c:
78:89:c4:2b:e6:2e:2e:15:ad:57:33:48:47:7f:b5:2d:72:ce:
e8:61:5b:31:ed:fb:32:69:9c:fd:18:68:c2:a4:e6:65:7c:b3:
6e:92:b7:64:63:b8:bd:2a:7b:b4:1a:a9:87:8a:cd:b2:1e:fd:
e7:cc:0f:05:9b:da:69:86:7f:12:d8:97:cb:b8:95:b3:2e:e9:
3d:0b:f4:c6:cd:18:e6:26:eb:11:ec:ff:bb:c2:79:2a:83:ad:
9e:81:ff:99:45:b0:0d:bc:82:8d:c7:c5:a7:72:ed:f8:26:68:
5d:81:4c:f2:b5:23:62:f6:ef:5c:01:94:6f:9b:b9:93:53:f2:
65:0c:1f:19:1c:9c:eb:b9:6f:f0:83:be:cb:27:62:b1:e1:d1:
0f:d9:e8:ca:17:43:6a:a7:df:08:2a:9d:06:5c:f7:50:6e:80:
76:04:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:04 2026 by rpki-client