Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier: RZBX0ebR87qdNQ5NRGpwAGnrayUJvLUzvclP2seOmAc=
Subject key identifier: 10:0A:E7:21:88:C0:1A:43:74:24:A8:78:32:E9:E5:A2:60:DF:69:00
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer: /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial: 019D9A751C006B900931DF6A95DE9BD28F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:58 +0000
Manifest this update: Fri 17 Apr 2026 08:00:58 +0000
Manifest next update: Sat 18 Apr 2026 08:00:58 +0000
Files and hashes: 1: CnLU5sdd9_xh2OEtCZx6z-2dgTY.roa (hash: n31FwsvZCRP5aWFMhgbGP9qd5w+wCRJhNJerptRYayU=)
2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: HgoSvQYRD7PcKLBvbw0wOxKuYZbY6qA3QMN0ghXYDmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1c:00:6b:90:09:31:df:6a:95:de:9b:d2:8f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Validity
Not Before: Apr 17 08:00:58 2026 GMT
Not After : Apr 18 08:00:58 2026 GMT
Subject: CN=100ae72188c01a437424a87832e9e5a260df6900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:60:a8:6e:bf:07:5f:fd:4a:41:ff:1d:2a:
94:40:b8:86:3a:c4:57:de:af:22:54:08:df:10:3a:
aa:a3:c4:39:ae:d0:52:bd:51:9b:1a:52:d1:21:d8:
8b:c9:90:53:c2:24:6d:99:15:e1:2b:a2:c5:eb:2d:
52:33:75:1a:8e:cc:ef:53:59:3c:73:55:47:ce:24:
3e:63:2f:10:66:55:4f:fb:28:7d:66:ce:b3:9d:ba:
36:67:3c:4b:7a:cf:e9:ca:14:14:96:40:7b:1d:bc:
ac:6c:ef:87:1e:5f:9f:88:a9:ad:9f:4f:3b:93:5e:
8d:db:d7:27:ac:40:b3:ad:41:1e:71:65:ed:c9:01:
26:72:ec:0c:74:8d:63:8d:4c:73:5e:04:68:d2:89:
4b:de:ea:6f:a7:58:5c:9d:7c:a7:5f:c7:01:f6:4f:
87:21:92:4d:17:da:fc:c0:42:9f:d9:03:4e:a2:c4:
41:79:6f:fd:46:61:fe:b2:06:2e:0b:3e:c7:d4:e1:
9f:8c:8e:aa:6f:61:50:c2:cd:cc:57:e8:bd:71:da:
16:84:2a:29:8c:6c:88:ac:0f:99:16:74:e4:cf:71:
61:51:4b:d3:37:67:a0:d7:20:ea:e1:d4:a9:00:7f:
f1:ff:1a:69:55:05:53:8c:5c:42:17:ef:2a:0c:e5:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0A:E7:21:88:C0:1A:43:74:24:A8:78:32:E9:E5:A2:60:DF:69:00
X509v3 Authority Key Identifier:
keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2d:d1:c9:d2:61:2b:a1:73:fb:21:a9:d7:8c:2c:6d:b0:0f:
88:87:d3:5c:ba:09:7b:d4:97:a9:51:00:35:18:46:26:d7:6e:
e9:88:9a:8c:e0:ce:a5:4c:02:d2:52:04:ce:4a:1c:78:2c:05:
7f:d2:c6:bf:46:54:a4:58:a3:bf:61:91:1a:21:39:d9:2d:cb:
6d:f0:4d:66:1f:05:ab:23:02:47:0d:9d:49:21:0c:24:c1:56:
fd:b2:17:38:c6:2c:8c:76:0b:4d:90:1e:c1:c0:6f:c7:f8:39:
84:16:9a:ee:f2:49:57:f3:1e:45:4d:d2:1e:78:62:79:81:ff:
dc:d9:9c:6d:26:1c:11:2d:b9:af:45:9a:1b:dd:bc:94:5d:ea:
89:32:21:18:4c:e8:90:b7:55:26:e6:af:e1:a1:c1:46:e8:dd:
9d:07:41:1b:0a:7c:eb:68:08:ff:47:2d:bd:54:3e:52:b8:34:
51:22:49:ee:03:2c:30:7f:2d:b6:1b:6d:3a:0c:7a:b7:2d:51:
bb:e2:62:3b:26:e7:15:97:32:6a:82:28:e0:ff:ba:ee:db:d4:
f2:81:4d:75:da:5f:f6:8d:74:68:2b:01:68:ef:18:ca:b0:50:
3f:b8:6b:bf:3c:4a:d7:1a:5f:28:8b:be:7d:55:32:b3:f6:b4:
ae:d1:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:46 2026 by rpki-client