Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: nOnHkUUyFCH5w9XByjOcpnSR+hUKYHxcbtvybNZ4sFI=
Subject key identifier: 8A:98:39:85:74:D3:E2:3F:46:8E:1D:D8:06:03:89:5D:FC:8A:20:0F
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 019D9AABB1CD0F8FB4B346B2C8E1E64C7F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: GMFbMXRu6EBkQ9myYXVyJDahzbg.roa (hash: +dgTRqdqVNlrN9h5FoD/gUpBUreTgCju2UOGfnCCQFM=)
2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: 9KA+hF/xmY4cjtvSVIfwlnIpVoo8T8A1kwaIU20M9zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b1:cd:0f:8f:b4:b3:46:b2:c8:e1:e6:4c:7f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=8a98398574d3e23f468e1dd80603895dfc8a200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:66:44:09:a3:ff:10:52:f5:17:de:2c:d4:
58:c4:7d:c8:82:a3:46:41:96:16:a9:3b:55:88:39:
09:b9:55:69:ad:55:71:b3:aa:07:3b:9e:00:1d:88:
f7:68:6e:39:ae:2b:27:b9:68:a1:ac:6c:49:11:70:
9a:fc:1c:17:32:20:65:72:30:6e:13:39:2a:f0:f9:
3f:76:f0:ac:68:1a:02:91:95:a9:0c:54:ea:ac:ca:
be:d6:eb:ce:18:14:3c:da:d4:30:9f:fe:0d:ae:0b:
2a:a5:57:f3:23:c0:5a:a7:18:2b:10:1e:db:d7:fd:
f1:a9:78:6b:d3:2a:23:d8:39:ec:0a:45:6e:eb:b8:
7a:d1:d7:5d:dd:f4:97:4f:35:32:99:b6:82:1e:63:
d0:11:04:38:62:cf:91:e5:f4:34:fb:66:63:73:fb:
98:84:c5:d2:14:f0:b2:91:be:23:20:f9:d2:7e:9d:
ca:03:93:15:2d:d0:84:a2:93:fa:69:a1:81:cd:f6:
52:d9:1d:77:3f:de:b4:fd:03:44:92:03:09:2e:52:
bc:4d:9a:e5:62:81:75:9e:77:69:b4:e0:47:26:5b:
41:d5:d9:2a:a4:62:31:10:60:79:f1:91:dc:e5:56:
a7:06:ba:f4:9e:64:45:7d:10:5c:29:7a:b7:83:64:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:39:85:74:D3:E2:3F:46:8E:1D:D8:06:03:89:5D:FC:8A:20:0F
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:9b:85:22:d6:07:ab:01:63:d8:4f:54:20:4a:15:1c:6c:
4e:51:b8:30:f0:f1:66:49:bd:18:c4:99:a9:d5:a5:68:e2:35:
d2:0b:d1:9a:bd:ec:ca:8d:e2:f1:71:62:db:ad:93:42:c0:9d:
6d:f9:9f:9f:aa:06:7a:9b:87:e3:14:8c:ff:84:7b:48:20:6a:
04:20:59:d1:7d:d4:5b:82:56:7c:84:34:bc:24:33:59:c2:59:
41:a9:5d:9e:09:4f:ce:80:70:8c:14:60:ae:39:ee:b8:b6:6c:
04:54:6a:18:05:b3:46:31:79:28:e9:c8:fd:14:66:1b:9b:6d:
e2:95:1d:7a:1c:f1:94:58:24:e6:c6:e3:e3:c4:c3:c0:cf:08:
f0:13:90:ed:2f:09:48:9e:32:88:33:2d:52:f4:7c:3d:d6:a0:
5c:d8:9d:5e:28:14:6b:3e:82:16:d9:a9:44:f2:7c:83:45:31:
5b:4b:ba:da:65:91:4c:36:e4:b1:54:f8:d8:86:c8:18:83:13:
f3:9f:19:4b:cb:88:8f:93:2b:f1:15:4b:fb:b2:07:2d:2e:2d:
5d:57:08:0d:c0:71:4d:7a:78:6c:dc:89:01:4c:de:b9:23:32:
80:af:e7:0b:8b:45:fd:12:fa:8d:a1:fa:28:02:17:b9:af:9e:
3a:15:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:26 2026 by rpki-client