Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
File: VHd3rO-MSS5QEb3ewSmviuyXS3c.mft (raw, json)
Hash identifier: 2LEdRuOZNmu9TsnfIL0lMMxYkt3YWZonKp7r3dQcnz0=
Subject key identifier: 3A:EC:08:D8:5F:5B:15:1D:95:04:6D:AF:A7:9C:10:33:96:E5:87:09
Authority key identifier: 54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77
Certificate issuer: /CN=547777acef8c492e5011bddec129af8aec974b77
Certificate serial: 019DA48AA7DC1EEE891A62598B3E53BE57AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 07:00:43 +0000
Manifest this update: Sun 19 Apr 2026 07:00:43 +0000
Manifest next update: Mon 20 Apr 2026 07:00:43 +0000
Files and hashes: 1: H5HaxNWVOqxU799AVgPxEXn01qU.roa (hash: mWDQsDbJvuwqHmN/2vnE3qUbbfA/iapxxfRizly7drk=)
2: VHd3rO-MSS5QEb3ewSmviuyXS3c.crl (hash: BvLWImUKl3SJivV5vFAYnKd/C1AfL2DpJwq0ZJQtgvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:a7:dc:1e:ee:89:1a:62:59:8b:3e:53:be:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547777acef8c492e5011bddec129af8aec974b77
Validity
Not Before: Apr 19 07:00:43 2026 GMT
Not After : Apr 20 07:00:43 2026 GMT
Subject: CN=3aec08d85f5b151d95046dafa79c103396e58709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:67:74:f0:f8:f5:14:0e:7d:5c:0e:a7:58:
8c:49:9f:de:0a:4c:3f:27:ef:dd:bd:fe:f3:fa:a1:
d4:7a:27:af:5a:64:37:4c:28:f8:e8:30:cb:9d:01:
8e:ac:bf:60:97:62:9a:5a:3d:41:2c:43:79:ae:0f:
0e:69:0d:42:b1:52:9a:71:3e:95:4f:29:69:b5:d7:
5c:e8:55:70:6b:2f:11:0f:ec:27:5c:70:8b:41:51:
f6:74:eb:d6:7e:ef:7d:9e:b1:2c:e4:48:01:bd:6c:
6d:7a:34:cc:43:9b:ab:49:6c:e7:4d:38:d3:ef:66:
72:be:31:4c:73:81:3c:45:30:b6:fa:ec:19:9e:28:
a2:9e:d5:1f:03:8e:0f:af:ff:3c:62:a3:ef:79:49:
f0:61:9e:3a:29:a5:93:50:01:70:43:c4:e8:17:53:
cf:b7:74:46:b8:6c:c5:a4:b8:e1:ba:04:37:2b:37:
5d:25:34:f5:bc:74:5b:57:94:ce:f5:22:1c:cf:2b:
97:2a:8a:62:9b:73:70:c0:d2:c9:8b:ba:18:4a:55:
c2:77:e4:e6:4f:c6:89:5a:18:49:aa:87:da:7a:53:
1e:87:2f:4d:fe:c3:a4:a9:b6:81:8f:6a:b8:2f:85:
ac:70:0c:29:eb:9e:d4:70:51:c1:1e:9e:03:10:cf:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:08:D8:5F:5B:15:1D:95:04:6D:AF:A7:9C:10:33:96:E5:87:09
X509v3 Authority Key Identifier:
keyid:54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:78:90:30:8c:5e:82:98:b8:69:17:a4:fb:78:52:ab:62:fe:
67:9a:b2:76:73:d0:7e:3c:67:ed:37:17:15:ff:83:ac:f5:00:
78:0a:d1:49:09:72:ec:19:b7:06:2f:7f:ff:1d:81:e4:d3:7a:
ed:f9:29:9c:60:55:6f:b1:e9:ab:af:ce:0f:da:2f:29:00:c4:
1d:ae:f6:02:00:ac:a9:c1:22:01:34:40:a8:b8:82:c5:5b:5e:
fb:d4:5e:37:46:c7:2b:27:63:7b:0a:6b:90:06:27:e5:89:39:
ab:d7:98:b4:14:67:67:05:6e:a8:84:24:20:f7:26:58:75:c9:
ee:1d:89:cb:99:5c:8f:86:28:05:71:9f:1c:d7:0a:f7:f2:03:
4d:fb:f9:b4:ee:83:6e:52:b3:11:3c:2f:cd:e3:b4:e5:be:48:
35:57:4e:cd:9a:b1:48:9f:8f:8c:68:f5:69:f8:d5:df:f4:a9:
ef:75:e3:f9:80:9f:e6:76:82:aa:c6:fc:11:42:47:48:68:28:
7b:87:5d:d9:79:5c:cb:9c:0f:85:1f:70:eb:b7:85:41:22:12:
c2:de:a2:57:df:8d:17:f2:44:62:79:18:7e:5e:cb:ad:6d:66:
2e:3a:bd:92:06:92:90:15:3e:0d:0d:6a:5f:7b:7b:04:9a:7f:
ac:54:50:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:03:34 2026 by rpki-client