
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: PZLsX4CPIWui0zVg88kO3iwRSN/yLP+jh8qdMRuQM6A=
Subject key identifier: 92:F0:FA:12:16:85:5F:8B:68:7A:42:6F:DF:9C:7C:47:1E:38:95:27
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 019D999963633EACA05FC916389EEFFF696A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 0842
Signing time: Fri 17 Apr 2026 04:00:59 +0000
Manifest this update: Fri 17 Apr 2026 04:00:59 +0000
Manifest next update: Sat 18 Apr 2026 04:00:59 +0000
Files and hashes: 1: Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa (hash: EGFj0yiGNTXuSH8wwtjUjE+9yF5opQRMwl047u2UKFM=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: T3D7Q57U6gc40VZWMyWh90ZOkujRo/ea9ODc70+bXYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:63:63:3e:ac:a0:5f:c9:16:38:9e:ef:ff:69:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Apr 17 04:00:59 2026 GMT
Not After : Apr 18 04:00:59 2026 GMT
Subject: CN=92f0fa1216855f8b687a426fdf9c7c471e389527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:88:16:f2:e1:0b:10:72:5d:cd:d2:c0:89:
0b:4a:b1:5f:e7:d7:ca:b0:56:25:68:f4:27:10:44:
ec:3f:c2:68:53:45:0b:25:9e:13:48:32:fa:29:62:
e5:61:42:c6:3c:76:3a:54:05:89:0d:1a:dd:70:fe:
c3:dc:65:b9:9b:b6:d8:d9:69:de:ee:34:bb:e0:15:
d5:6e:88:8e:73:6d:84:1a:fd:bc:80:64:05:0d:78:
9c:b4:e9:2d:b0:d3:46:cb:e5:be:1e:16:05:08:d4:
45:9d:86:76:0e:1f:52:74:18:36:e6:80:e0:ba:3b:
99:db:59:5b:72:90:a1:b1:2b:6d:82:99:3e:a2:67:
04:d7:bb:bd:06:d7:c9:d3:ea:de:e1:7e:a2:3a:c1:
6e:2d:fc:e2:bd:a7:b2:55:3b:7a:34:d3:35:2a:da:
71:f1:1f:49:09:8a:a5:6c:95:bf:e4:80:15:4a:89:
c6:a3:42:d8:79:9d:1c:30:8d:21:1b:ec:d5:4d:d0:
d0:d4:fc:7b:dc:51:3d:05:44:d8:37:19:90:e4:4a:
39:d3:bd:3f:8b:45:7a:dd:af:98:68:11:57:26:8f:
b4:e6:62:4c:d2:f1:d5:93:75:35:76:79:ff:2c:fd:
ab:ee:16:d4:ca:bf:c7:6f:08:b7:1b:75:75:60:47:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:FA:12:16:85:5F:8B:68:7A:42:6F:DF:9C:7C:47:1E:38:95:27
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ca:18:50:04:4d:ff:d7:99:11:bf:55:d9:77:e2:b7:73:27:
f8:ab:3e:3f:1b:c6:7b:a4:89:b8:f1:25:1a:ed:6b:6e:d3:76:
ca:9d:78:2d:95:dd:ce:25:a8:bb:d2:63:4e:97:53:fa:8a:2a:
38:da:c0:d0:5f:fc:a2:ce:4d:40:fb:c9:83:12:99:5d:60:02:
a4:50:8a:9d:bc:6e:7d:f9:e5:a6:86:57:04:62:ea:0c:87:fd:
08:5a:1e:a2:48:65:8f:dd:81:6e:18:a4:77:a5:15:dd:d5:44:
9d:57:4d:c5:91:f2:a3:c2:fc:9f:67:54:5e:20:77:48:74:eb:
58:10:53:d4:cd:4c:62:4a:e2:ba:25:e9:83:5c:55:c6:d3:0f:
40:bf:63:be:9e:95:18:ef:80:fa:f8:61:27:73:ac:3f:f5:6b:
7d:2a:e1:c9:73:66:e1:1b:63:e9:5b:dd:f4:ce:22:da:55:6a:
8a:cf:20:01:b3:ed:67:1a:18:07:69:6b:4d:fc:90:7b:c2:2d:
28:89:81:b7:6a:5a:51:12:3f:d8:4d:cf:60:0a:40:33:85:b5:
0b:89:14:36:90:09:06:ef:3c:46:f0:44:c0:b4:b0:12:6a:4e:
3c:79:84:51:6d:32:03:9f:e0:11:1b:21:48:e7:47:c1:01:13:
7c:e3:e0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:47 2026 by rpki-client