Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
File: 92_VaGdIVkFeseITQqrzI7N7ei4.mft (raw, json)
Hash identifier: WFRk065i3flXxpCUBTbPsg+en1S1FsUH3QgxLxDwUi8=
Subject key identifier: 72:AA:04:F1:DC:E7:9C:E6:71:B8:43:C0:64:3D:8B:47:B8:36:2C:A7
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Certificate issuer: /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial: 019D996234CDE8453B58CCFB0F1F0AEBD53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
Manifest number: 0A0F
Signing time: Fri 17 Apr 2026 03:00:43 +0000
Manifest this update: Fri 17 Apr 2026 03:00:43 +0000
Manifest next update: Sat 18 Apr 2026 03:00:43 +0000
Files and hashes: 1: 6CVNw0HuhfYE-VtYjj7hpSTWYM0.roa (hash: c2peJHLqAks7ODKSa9ozbh1moP7dEpQyilF1Kiyo7as=)
2: 92_VaGdIVkFeseITQqrzI7N7ei4.crl (hash: pWOg7fvtjcg7sJ67j9s/+BlhmMeLP2ri59Z5n8Paiqg=)
3: V-iqtypPqxyXIimSwNSMICX4_yc.roa (hash: 9qP4GMfzWZry9x0Ww/FVfCGvc27G3M28cDlCP2F//ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:34:cd:e8:45:3b:58:cc:fb:0f:1f:0a:eb:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Validity
Not Before: Apr 17 03:00:43 2026 GMT
Not After : Apr 18 03:00:43 2026 GMT
Subject: CN=72aa04f1dce79ce671b843c0643d8b47b8362ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:da:d3:25:44:27:e4:1f:18:1b:8a:ff:40:
b3:9c:fc:97:1c:bd:29:92:1f:de:2a:c2:4e:06:0a:
d6:02:34:f2:0b:ce:cb:c6:05:df:df:dd:f7:7b:7e:
76:e8:e0:53:11:c5:dd:af:bb:80:df:b7:26:27:ca:
63:8e:bf:3e:a5:9a:25:24:ed:4a:94:4d:cf:85:5a:
18:cb:1b:d5:4f:c0:c4:99:1b:47:f4:06:b6:02:0c:
4c:c6:0b:7c:19:d9:f4:be:58:7c:6f:bc:89:3f:55:
da:7c:e6:cd:1c:06:52:e1:b7:dd:25:db:ed:8a:6d:
86:03:c1:80:53:63:40:8c:8e:71:6d:31:75:c4:ed:
ac:f2:41:8a:8d:23:4a:22:77:cc:b5:f9:d3:d5:ce:
50:fb:6e:03:07:43:b1:b8:d6:99:12:7c:73:76:81:
db:49:d0:0e:d3:28:ec:2d:23:52:2a:b6:98:e6:9e:
77:42:22:45:60:ec:9e:4d:cd:41:40:92:e1:50:6a:
03:7f:a2:d7:cc:be:f4:77:4b:ba:22:11:0c:53:d7:
06:d1:f8:cf:9c:67:c6:51:2f:50:0e:97:b1:82:b0:
a2:a0:8e:06:93:d1:95:c0:47:01:22:63:0c:22:79:
a5:f1:54:bc:46:92:8f:26:e7:56:ee:da:35:f7:dd:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AA:04:F1:DC:E7:9C:E6:71:B8:43:C0:64:3D:8B:47:B8:36:2C:A7
X509v3 Authority Key Identifier:
keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4d:54:c1:25:bd:23:35:58:9d:8e:f4:8b:a1:56:fe:65:e9:
04:fc:a5:41:7b:d4:55:b7:a0:0c:04:4b:bf:2e:94:b8:13:53:
32:6a:a2:e4:3b:97:ea:7b:4b:99:23:5b:22:fc:b3:85:d7:8c:
c7:24:47:e4:11:f5:a8:c4:52:7b:b9:fe:24:9f:c1:10:03:49:
c3:18:ad:e9:a7:e2:23:b9:84:18:34:ea:01:b1:d7:2f:23:3b:
37:3a:83:5a:e5:2d:0a:1e:fe:30:94:2a:d8:d5:64:48:72:2c:
44:52:cb:a4:64:46:ba:79:91:16:bb:e1:ff:ab:5e:bf:9d:5c:
b1:10:d2:59:19:c3:5b:32:08:88:bd:cd:ae:2e:c2:1b:13:57:
99:c8:83:09:a5:76:2a:8c:cb:19:12:11:20:f8:e6:63:93:6e:
1c:7f:09:c8:c1:a7:95:83:3b:2f:94:88:23:5b:55:a7:8f:ed:
23:7f:df:23:4b:b4:9c:eb:62:32:ff:97:88:da:74:0f:b3:e6:
7f:b2:9d:b2:92:7d:63:d9:5f:e9:af:9e:7d:ea:94:17:86:6a:
6b:96:a8:ed:a4:d2:ad:a8:d6:a9:b2:f4:29:91:40:08:62:06:
d6:11:79:d8:a7:a0:9b:00:97:d8:8f:7a:17:13:ab:9b:34:b8:
b3:2f:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:46 2026 by rpki-client