Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File: 2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier: SXCcro3LW5TqqegJzIbdzduAQJRVKHdSB0IfI93CAw8=
Subject key identifier: C2:61:D0:CC:15:66:B6:D3:FF:BC:E2:99:B6:56:5C:D4:57:B9:7D:B7
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer: /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial: 019D996290BF42958984E90C52A947FD03B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number: 04A6
Signing time: Fri 17 Apr 2026 03:01:06 +0000
Manifest this update: Fri 17 Apr 2026 03:01:06 +0000
Manifest next update: Sat 18 Apr 2026 03:01:06 +0000
Files and hashes: 1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: DNwAL0ML2cNfu2/aLcgtXclB12QRMNyG69VLgCEai4s=)
2: oPgMAi_-EmiOlppJM0s65xmeflo.roa (hash: AY2dJHoY3JrtcePk6obcHFCfyE5blcFF6JMAQBSwLWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:90:bf:42:95:89:84:e9:0c:52:a9:47:fd:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
Validity
Not Before: Apr 17 03:01:06 2026 GMT
Not After : Apr 18 03:01:06 2026 GMT
Subject: CN=c261d0cc1566b6d3ffbce299b6565cd457b97db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:4d:3e:2b:08:39:43:1a:9a:01:fb:c0:f8:
83:af:4d:1d:fc:ad:74:34:dc:ca:bd:31:f9:db:98:
39:60:db:a6:06:35:6d:33:7c:80:74:e3:e4:0a:71:
fd:7f:a3:41:4a:d5:76:8c:ff:05:4e:0f:23:2b:00:
dc:1e:99:86:0e:91:76:cc:0d:ee:1a:bb:30:f5:6e:
58:7e:57:d5:31:bc:df:75:1d:11:66:53:92:2c:22:
3e:47:f3:81:59:18:9c:00:cc:d5:15:7c:73:fe:ed:
78:0d:be:dc:5c:50:63:cb:55:b6:79:79:b0:35:a7:
4a:ea:92:cf:00:2d:39:97:6a:c8:60:c5:31:4a:b9:
d6:4a:9d:7a:38:75:ac:7a:2f:ad:63:c3:8e:94:01:
0e:0a:5b:f6:82:67:99:18:ae:b9:fa:09:b2:4e:75:
f5:96:fd:44:73:e4:40:ea:a7:05:c0:2a:86:c6:2a:
b1:6d:52:49:1c:63:b5:c5:8f:da:b1:73:25:4c:a7:
28:26:67:6d:37:ee:d3:97:6a:9a:ff:58:fa:da:56:
04:4a:f9:00:59:17:10:b7:41:1a:ec:19:60:e1:aa:
fb:59:dc:65:d6:12:cc:7e:cc:2b:0f:e3:5f:08:26:
94:59:56:f8:91:76:eb:3a:cf:3f:4f:c8:5c:1c:8e:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:D0:CC:15:66:B6:D3:FF:BC:E2:99:B6:56:5C:D4:57:B9:7D:B7
X509v3 Authority Key Identifier:
keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:ac:bf:c6:8c:1a:0f:d0:38:4a:c4:06:a3:00:7a:ee:78:
63:0c:37:34:60:0c:94:9a:1c:1d:16:93:8f:86:ab:08:cd:f4:
41:48:c3:c0:43:6a:6f:58:7c:af:d3:70:22:dc:8e:e2:64:24:
75:3a:6b:10:6b:c6:07:3c:8a:36:06:11:42:9c:eb:fd:de:ea:
b1:c9:7e:d2:80:be:6c:6f:0b:6c:30:f1:81:31:f6:85:97:f3:
be:57:27:fd:f7:72:89:71:08:b4:95:dd:9d:b4:95:57:b9:83:
bf:df:e2:4f:c0:ff:55:92:0b:fc:29:79:29:a7:6e:0a:ce:07:
b9:21:7f:86:69:8a:d1:e8:70:b2:39:fc:fb:56:ac:c4:15:2b:
8e:4c:af:7c:52:c7:08:6d:6b:0e:12:10:8b:d2:af:ab:49:14:
59:b4:d1:5d:4a:09:24:63:d8:4c:ab:5b:89:0c:c4:67:24:6f:
60:5d:48:73:d0:8b:79:64:48:e1:aa:5f:08:f4:97:f8:32:bd:
16:81:bf:d5:fd:c8:23:82:fd:4b:c4:57:ac:36:21:8b:0d:16:
ce:01:ff:58:bd:47:17:d0:cf:e9:2e:03:87:c5:6c:0f:6e:b1:
de:1d:5d:25:fc:4f:34:90:5b:5f:5d:63:2d:1a:d0:f3:70:a1:
73:fd:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:24 2026 by rpki-client