Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: o187XlFgccLt0FGeem7VaQThjhZ5K6FqVxk9OCmG5kU=
Subject key identifier: F9:A9:63:3A:1B:8F:64:7D:DC:2E:82:6E:E2:28:67:B6:9E:FB:27:FE
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019D9B50FE60E44645DD372A98522CB4FD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 12:01:09 +0000
Manifest this update: Fri 17 Apr 2026 12:01:09 +0000
Manifest next update: Sat 18 Apr 2026 12:01:09 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: Go0pgybhjppRDMN7OMMTovIzCnM8KboshgJ/Fyrmnok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:fe:60:e4:46:45:dd:37:2a:98:52:2c:b4:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Apr 17 12:01:09 2026 GMT
Not After : Apr 18 12:01:09 2026 GMT
Subject: CN=f9a9633a1b8f647ddc2e826ee22867b69efb27fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:1d:cd:85:d2:f9:fc:5d:cd:9b:0c:9b:28:
f8:ed:d6:2b:56:6b:90:38:83:3e:61:60:1e:69:41:
2a:a8:e4:33:8d:e7:78:94:0a:bb:43:b5:2b:a1:92:
45:fd:07:b3:b0:85:22:05:fc:51:52:ce:05:37:4f:
d1:2b:c6:5f:91:38:7f:e5:3d:33:bd:29:6b:41:67:
22:92:17:cf:16:68:3d:7b:70:de:9f:b4:9b:91:f6:
6f:6c:53:e8:c6:cb:d1:59:f8:d4:09:da:c7:6c:4d:
a4:8d:a1:be:80:04:72:57:a8:21:ef:6a:62:78:8f:
76:c9:d7:43:1c:29:93:33:d9:60:24:ba:9d:a3:ae:
39:5e:4d:2c:1c:08:c8:b8:e1:92:13:94:a9:cb:6b:
cb:19:07:f3:79:65:a5:65:af:35:71:a7:59:88:ca:
1b:ab:53:c3:d6:ac:a2:3f:98:5b:62:93:24:d1:c5:
1a:37:b9:65:c7:2d:c5:ff:0b:fb:35:90:14:3e:d6:
f6:19:d0:47:94:f5:9c:b7:9c:d9:df:35:1f:ce:e5:
3b:64:18:51:0c:b1:ef:c8:ca:d3:98:e2:71:57:5d:
9d:1b:84:c3:df:d0:0e:bc:60:83:59:55:43:cc:ef:
c3:ab:90:3c:30:51:b7:91:29:4c:57:62:77:20:5a:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:63:3A:1B:8F:64:7D:DC:2E:82:6E:E2:28:67:B6:9E:FB:27:FE
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:ef:50:27:2b:44:e5:32:e4:34:49:a3:98:38:db:c2:18:
ef:c7:13:b3:f4:ef:15:6a:a7:8e:d7:5f:bb:c2:a5:0d:4c:71:
3f:dc:89:29:c3:6d:7e:36:bd:17:39:75:41:c1:b9:24:cc:0a:
fd:c3:8f:06:7f:9b:10:b9:d9:43:81:9f:91:6b:62:22:1d:ea:
26:2b:13:48:d5:78:d0:11:ec:7f:cb:1d:fb:9a:12:2f:dc:53:
40:ac:6e:5e:33:8a:bd:3c:d0:2f:9f:9d:fe:1e:58:96:58:fe:
fc:db:f0:81:42:85:39:c0:d3:0f:bd:f6:47:81:ef:8d:f6:2c:
e2:41:b1:bc:e6:73:b7:7a:e9:3d:28:f7:df:e5:a8:7e:d2:2d:
ed:a2:42:28:9e:6d:c3:a3:e0:05:ff:4b:37:ff:16:0b:6d:ff:
ea:2d:c9:fc:45:88:2f:2f:83:76:41:d0:f1:7d:e3:1c:f1:ad:
fb:0b:24:18:3a:0c:ff:9b:9d:c7:83:cf:e5:14:3d:8c:9d:cf:
66:97:71:14:ed:50:b2:67:9e:c9:03:7a:c8:0f:ec:9b:e0:31:
2c:11:5b:df:4e:9a:d3:c9:ca:c0:ec:e9:b9:af:60:20:bc:86:
89:a5:f4:01:77:28:ec:b0:b3:0c:43:02:a6:89:94:b2:cc:af:
bc:04:4d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:48 2026 by rpki-client