Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File: _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier: 4yAbBORv4zHlhrsnlOYtoUxKKBqi27E9Jl1RLme2W5g=
Subject key identifier: 4C:9A:41:92:5A:86:94:F3:DE:43:CA:1D:C7:33:08:BB:B5:FE:90:4A
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer: /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial: 019D9A3E3076318613DA75CDD0B57FB3A09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:00 +0000
Manifest this update: Fri 17 Apr 2026 07:01:00 +0000
Manifest next update: Sat 18 Apr 2026 07:01:00 +0000
Files and hashes: 1: YDqB-p5vk-4L2YR5aO0cuvsVq9k.roa (hash: 7U5jh2vi/G/upM+AvoXUEwZnlZBa83DrrQMFFpQ/7wE=)
2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: ezFP9mj32zOFB876+h+L9oy2YPZX+zoXTOf3B/POnG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:30:76:31:86:13:da:75:cd:d0:b5:7f:b3:a0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Validity
Not Before: Apr 17 07:01:00 2026 GMT
Not After : Apr 18 07:01:00 2026 GMT
Subject: CN=4c9a41925a8694f3de43ca1dc73308bbb5fe904a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:a0:31:95:d8:5f:6b:63:2b:67:73:e0:85:
ec:1d:b2:69:48:9b:dd:b8:43:79:2a:98:e8:6b:25:
0e:f8:92:ae:40:18:30:5d:f0:7f:fc:d3:8b:84:7b:
18:f2:bb:4f:c5:70:ff:e7:b9:ed:d9:7e:b9:48:76:
e0:01:be:1e:28:ee:45:f1:7c:d5:11:2f:ad:c8:46:
8f:4c:ae:96:07:8a:3c:34:b6:7a:dd:ed:08:f2:52:
9a:ed:f6:0f:99:cf:6e:cc:c7:33:e4:38:3b:a7:40:
f6:fa:08:5c:fc:a7:40:80:1e:2a:9c:1a:d2:b3:37:
ec:fd:2c:55:b2:2e:b8:2c:06:7b:dd:ff:05:5b:29:
c6:df:9e:2c:67:b6:08:a2:f6:9d:08:1b:2c:ea:34:
23:e3:6d:5b:e4:fe:88:f8:03:3d:ee:17:ef:21:d8:
6b:e4:20:d7:8b:25:3b:8d:a3:d4:a8:f7:64:6c:ad:
98:7d:34:51:47:41:6a:3f:7b:5d:d0:f2:33:ab:ee:
e6:44:06:c8:ec:25:b8:fd:67:3b:78:48:18:6e:4e:
4a:5c:76:58:2d:ef:5e:2f:f3:73:49:ac:c1:0e:a6:
c3:fb:c6:e4:44:d5:e7:aa:a1:79:3f:f3:ea:62:63:
b6:a8:7b:8d:6f:bc:18:10:2f:a3:64:ef:b6:96:83:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:41:92:5A:86:94:F3:DE:43:CA:1D:C7:33:08:BB:B5:FE:90:4A
X509v3 Authority Key Identifier:
keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:b2:3f:cb:a4:eb:71:e2:b6:59:27:0e:ef:52:a5:df:c3:
c7:07:bd:1e:48:2e:03:11:28:53:4b:7d:a7:c0:cb:40:11:fc:
0b:5b:09:4e:a2:d1:fe:81:fd:63:2c:c8:c2:54:e1:f1:dd:22:
19:45:a7:b2:26:37:2c:80:1e:a2:5f:e4:f0:3b:4e:13:13:e5:
ad:ca:77:f1:2d:cd:a7:46:3f:03:92:5d:e5:c9:6f:0d:76:3a:
f0:31:cd:3e:a1:09:79:54:56:62:0f:68:42:fc:b2:66:a9:10:
8b:b3:86:93:73:5d:c1:8b:33:23:4a:13:79:b8:07:eb:8b:d2:
53:47:d0:90:df:c5:52:cd:75:1c:38:1c:51:b3:d5:09:8b:97:
d5:35:09:17:34:3f:48:c0:31:4e:43:c3:a4:65:3e:dc:03:1a:
c7:c7:eb:07:c8:70:af:16:8c:a9:6a:7d:d2:dd:6d:1a:ba:19:
cb:76:a7:de:25:77:0b:3b:68:b3:3c:53:fc:87:05:5a:3a:20:
d4:54:3e:b8:22:ae:4f:75:90:af:61:3b:56:d4:d1:3f:94:31:
3b:8c:44:65:6e:02:1e:08:40:b1:46:2c:82:18:a1:55:ae:56:
10:e2:68:7e:57:29:b8:9c:c1:65:98:19:ac:bb:df:a9:37:1e:
d2:38:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:15 2026 by rpki-client