Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: TpQhOHq4e3zGFaBlY/fC1UtNNDe+Lcc/x/EoZIUnhkE=
Subject key identifier: 39:1F:8F:DA:58:18:91:EA:84:53:96:6C:4E:B6:41:87:C8:84:EF:79
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019D9AAC26BF22B8ABB567D3BD4177DDD397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:01:06 +0000
Manifest this update: Fri 17 Apr 2026 09:01:06 +0000
Manifest next update: Sat 18 Apr 2026 09:01:06 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: 42M3WH3oy8GnPBC/l6ZI2L2/qPk30zY4ryFUxuThmvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:26:bf:22:b8:ab:b5:67:d3:bd:41:77:dd:d3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Apr 17 09:01:06 2026 GMT
Not After : Apr 18 09:01:06 2026 GMT
Subject: CN=391f8fda581891ea8453966c4eb64187c884ef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:94:83:01:b9:f1:24:16:05:e1:5f:7d:28:
fd:5e:a5:c4:00:41:2c:bb:6a:77:f3:28:0d:e9:d9:
60:86:58:2e:c8:c5:d0:f7:ee:cc:7b:c4:2e:cb:1f:
32:35:a4:5e:1d:dc:70:5f:e5:91:9c:fd:36:96:f2:
73:27:22:87:fc:cd:90:03:d2:d9:74:b5:84:7f:5f:
80:00:6e:77:64:41:fc:0c:ef:aa:6a:f1:0d:74:1b:
1c:d1:3b:b2:af:c1:e5:9d:71:06:32:52:65:01:52:
ff:a3:81:07:9a:e3:45:01:03:ff:f5:f7:07:35:eb:
18:3f:70:2f:4a:a2:24:92:fc:d3:5b:98:54:88:65:
cc:b9:3a:90:e5:37:3f:5f:79:98:e1:32:ca:08:11:
43:43:b6:65:47:0b:96:67:6b:63:b7:f6:f0:2d:de:
02:b5:09:fd:af:4c:b3:8a:94:43:5d:59:bb:40:16:
ac:62:06:4c:5d:1d:f2:97:6e:2d:91:bb:6f:41:ad:
14:71:4c:2b:df:05:ec:f1:52:14:3d:94:44:18:fd:
0d:19:53:e2:de:e8:78:be:92:e2:8b:36:5e:e3:d5:
e2:03:07:e7:12:7b:ab:08:3d:6a:47:40:89:ac:65:
f2:91:ec:b7:7f:65:31:97:57:3f:d8:23:72:ca:12:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:8F:DA:58:18:91:EA:84:53:96:6C:4E:B6:41:87:C8:84:EF:79
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d2:f2:5d:57:0d:08:9b:62:b6:f9:43:31:b2:4c:18:88:4f:
69:42:23:53:c9:9f:dc:a1:a1:9f:95:5d:1e:88:66:01:79:77:
6d:96:0c:48:0e:34:fa:79:68:91:9d:ff:b9:2d:88:6b:cc:44:
d0:8b:00:d3:41:6e:09:25:b3:0b:6a:d0:55:2d:47:a8:ac:8a:
8f:b7:e5:18:07:da:bc:ac:14:0a:d9:97:53:84:be:05:fe:a0:
f0:61:ec:7d:37:d1:49:24:67:ae:a7:b8:f3:76:a3:cf:0f:6e:
63:74:3d:cc:5b:6c:0b:58:f3:36:e1:13:e1:39:ad:f7:18:63:
eb:f7:f6:46:a2:17:eb:c7:d9:48:03:ae:13:30:16:65:41:87:
62:ce:bb:16:c6:33:e4:3e:7c:1b:21:fc:6d:98:2e:be:21:14:
6e:90:3d:41:23:14:87:ef:40:39:5e:db:72:a7:1c:77:39:ec:
a2:9a:d9:e5:20:c1:52:1a:b4:ca:75:f1:c6:c5:7e:d3:80:5a:
3f:ad:33:66:67:9a:27:cb:8f:f1:59:f0:fb:75:15:35:3a:72:
26:69:12:ba:68:a4:4c:75:b5:52:94:b9:36:a1:10:23:91:23:
4c:b7:f2:03:f4:90:5e:ff:ad:b4:78:c1:d6:57:d4:33:f8:67:
5e:8c:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:51 2026 by rpki-client