Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: NzC32j8j4Xz3axZ4JM6+iepJog8DOTz7CviOioivXLA=
Subject key identifier: AD:4E:32:64:81:E2:E9:6C:80:47:5B:CA:52:FA:23:87:D1:B9:1F:A5
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 019D9A06CC7351A8B5A02ED42715A78EC7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 1355
Signing time: Fri 17 Apr 2026 06:00:29 +0000
Manifest this update: Fri 17 Apr 2026 06:00:29 +0000
Manifest next update: Sat 18 Apr 2026 06:00:29 +0000
Files and hashes: 1: FpVW71nyoW-_gJoXR54EYMZoVQE.roa (hash: gZatusuUvr/QTel7Hexm6oiz929ityXKMuJIjfNYW6U=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: PASi+8IVIzsYN7aRcoDsBxAgwrKgJs/MHws4vLVCksk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:cc:73:51:a8:b5:a0:2e:d4:27:15:a7:8e:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Apr 17 06:00:29 2026 GMT
Not After : Apr 18 06:00:29 2026 GMT
Subject: CN=ad4e326481e2e96c80475bca52fa2387d1b91fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:65:9f:82:22:b2:ad:7a:9b:99:15:a3:0c:
93:82:12:c6:05:87:4a:75:30:e3:46:ca:a2:ab:10:
be:d5:3a:0d:dc:ce:d0:3b:93:9d:8a:d8:1f:6f:d3:
2a:ac:96:5a:aa:d5:89:25:b2:0f:3d:bd:5e:3b:de:
6f:98:aa:5d:d7:9d:91:0c:de:2f:92:41:3c:f9:09:
b4:84:60:67:15:06:02:b2:d9:8e:aa:28:d3:58:71:
4a:33:ca:c3:32:65:70:b0:fc:7c:dd:9a:1e:ac:42:
ca:9f:e1:61:8b:d9:53:b7:eb:a5:96:c1:37:d1:19:
b9:41:e1:c6:f9:2c:ef:7f:37:e2:d1:ae:10:3c:db:
66:b8:1d:0f:90:5a:bc:22:76:74:cc:a9:1c:70:27:
2b:36:0a:31:a2:67:46:c0:f7:20:d6:8e:20:5c:96:
5c:fb:e2:a6:28:5c:36:79:0e:c8:a2:c1:bb:db:cc:
5d:a4:c9:b3:c6:27:73:e9:b4:d4:14:c8:ca:8e:8b:
1a:bc:ed:d2:b4:0d:b1:70:72:ab:14:da:63:b0:70:
1b:7c:a8:8b:ed:ab:4b:85:53:f0:71:dd:c1:98:63:
62:99:29:12:36:77:f5:ad:76:22:ae:34:c7:f2:95:
c5:57:e7:07:56:6b:9b:b1:d0:9e:3f:4a:84:4e:9c:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4E:32:64:81:E2:E9:6C:80:47:5B:CA:52:FA:23:87:D1:B9:1F:A5
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:09:0a:04:91:37:08:21:db:2a:1a:fc:57:9e:7b:d2:a6:9b:
58:7d:2a:66:b2:df:8b:df:ff:59:2d:5a:b7:1d:05:fa:bd:1a:
f2:68:40:21:5a:13:2a:e1:b2:c4:52:e9:df:d4:59:ef:1c:44:
78:c1:31:62:27:ce:45:f9:3c:fd:56:9e:97:36:9c:37:6d:5b:
5f:9d:10:14:55:44:13:f1:ee:9a:94:9d:0d:c8:37:e7:cd:f1:
5a:0d:a1:3a:a4:ec:7b:13:a5:83:de:da:3d:95:08:5d:39:f2:
63:45:68:32:33:df:65:7f:72:32:d6:43:32:e8:43:53:d2:3a:
15:ea:a8:3c:19:8f:c6:eb:86:66:ee:d1:d4:04:66:ef:e7:17:
67:94:a2:cc:68:bc:fe:63:9c:f7:38:4d:30:b3:cf:76:fc:de:
a4:3d:d3:f8:81:30:27:14:c3:99:c1:bc:78:3b:40:1d:d5:62:
78:59:f8:8b:4b:6b:da:1e:2a:b2:b3:2b:86:d7:f5:42:39:0c:
32:89:7f:e7:ef:08:67:9b:61:fe:7b:91:02:a1:e3:d0:93:7d:
a9:33:43:88:7b:64:78:74:8a:05:79:2f:04:ad:4e:4e:d0:8a:
5b:4d:a9:19:e4:1c:e1:d6:d3:c7:2f:c1:e1:77:74:ea:17:b5:
3d:17:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:46 2026 by rpki-client