
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
File: vNEARPy4HlrmDz7NW9zf5tk0PJI.mft (raw, json)
Hash identifier: z26/f1wzeTmTMeks+oXK1q9zOyR41HkEvBrx1iTeNr0=
Subject key identifier: 14:B1:F7:52:7A:AB:25:2D:B8:D4:53:28:21:D6:AF:C2:23:10:0F:51
Authority key identifier: BC:D1:00:44:FC:B8:1E:5A:E6:0F:3E:CD:5B:DC:DF:E6:D9:34:3C:92
Certificate issuer: /CN=bcd10044fcb81e5ae60f3ecd5bdcdfe6d9343c92
Certificate serial: 019D9D07CA076D29F739687308B7A63CC72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
Manifest number: 50
Signing time: Fri 17 Apr 2026 20:00:26 +0000
Manifest this update: Fri 17 Apr 2026 20:00:26 +0000
Manifest next update: Sat 18 Apr 2026 20:00:26 +0000
Files and hashes: 1: vNEARPy4HlrmDz7NW9zf5tk0PJI.crl (hash: AAf9AJuGYT3NciB2UrF241dUXs3ALxi6McHG5w3U9wU=)
2: wd-GsSjA11cGHqEt72xSa1ygzuQ.roa (hash: WJGZJAHF4Jb+ZVAsXjgsRqPOhUgESLsq9HtVoR+KgWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:ca:07:6d:29:f7:39:68:73:08:b7:a6:3c:c7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd10044fcb81e5ae60f3ecd5bdcdfe6d9343c92
Validity
Not Before: Apr 17 20:00:26 2026 GMT
Not After : Apr 18 20:00:26 2026 GMT
Subject: CN=14b1f7527aab252db8d4532821d6afc223100f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:98:22:54:5d:9f:9b:fe:f9:cf:32:a9:d7:
b9:a4:07:81:73:69:f6:46:0c:9a:3a:ae:fa:c2:76:
7d:1c:7b:5b:a2:7d:fa:8f:87:ec:85:76:a5:bb:cb:
92:02:b4:07:cf:3c:db:ef:4c:96:4f:f1:36:10:51:
49:e2:4d:58:fc:4e:00:7c:5e:a4:32:bc:5c:37:dc:
d6:c5:8d:93:b9:b8:28:6c:fc:e7:55:98:26:a7:ea:
c0:72:8d:cf:59:e7:83:31:09:6a:64:30:1a:c4:1e:
20:d1:a1:f0:a4:bc:bd:7b:6f:ed:fc:cc:f1:d5:d1:
31:0e:e3:71:66:42:ca:c2:aa:ba:a9:fd:5b:f0:c0:
61:ae:b5:4d:63:1f:1b:3b:48:35:50:18:2c:ab:1d:
fc:78:d5:2c:7e:61:ca:05:2c:20:2d:79:9e:11:5e:
0c:9e:e5:7f:25:38:f0:b4:f5:da:04:a8:67:13:e9:
a5:d8:a1:ec:95:ad:cb:66:14:33:72:f5:81:dc:ed:
8a:c5:e0:05:bf:6f:ca:13:fe:68:4e:3f:6a:82:7b:
cd:3a:58:e6:f9:d5:0c:b9:74:58:db:c5:ec:62:9c:
cf:5f:03:fd:c8:0c:db:ba:13:e9:d3:52:78:13:c3:
42:0e:6e:5d:b0:c2:50:d4:54:7f:a0:35:12:28:21:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:F7:52:7A:AB:25:2D:B8:D4:53:28:21:D6:AF:C2:23:10:0F:51
X509v3 Authority Key Identifier:
keyid:BC:D1:00:44:FC:B8:1E:5A:E6:0F:3E:CD:5B:DC:DF:E6:D9:34:3C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:56:f5:29:64:1c:f9:4d:2f:69:f5:bc:7a:0f:e6:59:c3:ec:
39:3a:27:3f:c9:cf:28:5a:ee:07:d4:04:74:76:e8:b1:47:ad:
de:40:14:47:29:0e:8e:ea:4f:f0:cd:b7:a7:e3:e8:51:3d:19:
2f:cb:8a:57:b0:ea:c7:c6:60:a0:98:4c:70:01:8b:b3:57:a7:
70:4e:10:aa:f4:90:b8:06:58:4f:9e:54:8f:b7:01:f8:b3:a1:
8d:b9:fd:05:5d:74:5d:64:da:85:07:3a:a4:85:0b:84:a2:a9:
d5:d9:c7:88:c0:7b:ce:66:8e:14:f2:32:c2:6e:6e:47:ea:13:
f8:42:55:69:42:9b:a1:29:74:c9:68:68:0f:60:6e:c3:d9:0b:
c4:8d:63:b9:69:5a:ff:2b:e7:bf:12:68:8b:11:d9:bd:3d:82:
87:45:47:ef:45:8e:74:a1:ad:46:30:e7:1e:dd:2e:d7:28:06:
50:15:19:f4:ae:44:93:fa:bb:0f:72:97:5d:91:13:c2:f7:c3:
e0:18:a7:0d:e6:7e:a1:5d:08:89:0b:ef:f7:d8:25:73:b5:b6:
5d:c3:bd:d1:03:10:e9:32:c6:dc:54:27:7a:4e:c9:3a:56:3d:
8d:d1:b8:6c:85:96:76:9a:9d:d4:df:83:b1:f8:26:46:17:df:
60:c1:63:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:06 2026 by rpki-client