Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File: vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier: AmAUcKmSo3V4Qs9PliBNsX+ne5QnUapI7SAgZRciHE8=
Subject key identifier: 43:F6:7A:38:49:C6:8A:AD:60:8C:90:3B:06:35:0E:A2:27:BF:B7:3C
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer: /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial: 019D985055D4459FFAA1DE3D0C1529E0FF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number: 0EF2
Signing time: Thu 16 Apr 2026 22:01:34 +0000
Manifest this update: Thu 16 Apr 2026 22:01:34 +0000
Manifest next update: Fri 17 Apr 2026 22:01:34 +0000
Files and hashes: 1: 1-K5viE_tD80UCpoY9vGuHEt9bYY.roa (hash: 0PAUh76wGv4SeSVcF89n/81BqOvrny0HN1SsAK5KcyI=)
2: MUcb1NLuFfY7MdF9X5f0dfTZRhE.roa (hash: 6+se8GWynfFcWjVvzZnWa9acPijPMo+xD9nNkmbbk70=)
3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: MGBHwXQpeFxuaALPEu+HVVPLtkZjZFkS+8Y1GzVf8Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:55:d4:45:9f:fa:a1:de:3d:0c:15:29:e0:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Validity
Not Before: Apr 16 22:01:34 2026 GMT
Not After : Apr 17 22:01:34 2026 GMT
Subject: CN=43f67a3849c68aad608c903b06350ea227bfb73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:61:13:16:aa:5c:2d:46:ba:ce:45:00:16:
3f:5a:ff:c0:03:bb:9c:eb:f3:90:80:4b:88:c5:5c:
ed:62:05:c2:b5:f9:fd:25:3e:ae:1e:87:82:0b:36:
4a:2d:90:ee:48:36:84:cc:97:fc:1a:f5:ea:a2:db:
da:f4:36:0b:7b:f1:1e:f0:43:d0:c2:ef:60:6f:8b:
74:1e:4f:93:62:34:ee:a1:94:12:76:09:ce:3e:8c:
9e:fb:de:84:c2:07:1a:15:17:bb:7b:cd:df:2b:96:
f5:3b:f4:21:eb:b9:8d:0e:18:af:9d:82:91:ba:b5:
b4:be:30:8f:23:7f:75:5b:8a:a6:b0:1c:bd:f2:a9:
a5:25:07:b9:2d:19:5b:cd:d0:5d:15:a1:2a:f3:1f:
89:4b:c5:00:c6:d1:bb:e4:c9:cc:57:76:f2:b3:66:
1c:31:dc:6b:0c:11:87:7f:bd:e5:10:a8:86:3f:37:
99:8d:f8:04:41:58:df:a9:44:ed:7f:45:e1:22:d8:
d9:a1:de:7b:47:6c:eb:a6:c6:8d:11:97:3c:a7:e8:
a1:36:6f:a7:c6:4f:e3:35:39:82:22:20:0f:dd:89:
df:1b:41:d8:41:f7:63:73:a7:a3:57:69:77:f1:e1:
21:ed:00:08:27:45:1e:b0:26:e3:62:75:3d:7e:44:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F6:7A:38:49:C6:8A:AD:60:8C:90:3B:06:35:0E:A2:27:BF:B7:3C
X509v3 Authority Key Identifier:
keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cf:64:8b:72:bc:63:35:0c:3a:5e:d2:dc:a0:50:05:30:df:
3d:4a:29:7b:e4:b6:bb:a4:bb:22:ce:36:dc:bf:87:50:4e:1b:
b0:9e:7e:b2:60:6a:ba:4d:46:55:9c:b5:19:89:ed:17:44:8b:
6e:00:84:2d:6b:90:31:04:0f:49:31:78:56:23:06:b4:1e:40:
d5:c9:e5:18:85:5c:21:8c:ff:f4:4d:41:28:0c:cc:7b:3a:9b:
53:34:1c:0f:1d:2b:61:fa:eb:ca:ef:0b:69:f6:2a:d5:4d:7c:
e4:af:8e:d7:31:4c:01:94:b7:34:12:59:38:25:3f:fd:c5:d8:
3d:31:e6:4f:29:b6:5a:2e:bc:88:72:c6:7c:4c:d5:50:36:bd:
0d:97:83:0d:31:86:f8:eb:3e:f6:6f:c4:46:bd:54:d5:a2:24:
0d:9b:d5:84:64:67:00:d5:d4:34:4a:71:fd:55:aa:93:ed:11:
df:f9:af:fa:01:1c:f3:b3:31:d4:7e:02:66:aa:30:51:68:2a:
2b:a9:c0:95:2a:3e:6f:a6:50:12:2e:d9:af:d4:0f:17:c9:e5:
f8:af:88:ff:51:7c:30:f1:67:50:a7:da:0d:b4:42:1b:84:16:
0a:8f:5d:e6:50:74:32:c7:a3:ca:32:80:99:c9:42:1f:18:7f:
d9:d2:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:21 2026 by rpki-client