Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: yeFYq9dubkNbarjQs/izW+dCwdNL+6ghbFez/2svghY=
Subject key identifier: 61:29:FD:76:21:83:90:07:86:FE:21:1E:17:AC:EB:40:14:86:A8:30
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019D9C2D54393CBDC8574843527CB119570A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0EA4
Signing time: Fri 17 Apr 2026 16:01:49 +0000
Manifest this update: Fri 17 Apr 2026 16:01:49 +0000
Manifest next update: Sat 18 Apr 2026 16:01:49 +0000
Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
2: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=)
3: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
4: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
5: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=)
6: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: 4tdL6F6sHreW0jXdyEOgXP0FAFKseuDGva+P6H97Ex4=)
7: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
8: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
9: zFeGQFAvAw6aATxlal8JSV3VnqA.roa (hash: 097ilzQL9LW0Bc1l2A3VV39iVVLt++EbcMo7JQEiFFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:54:39:3c:bd:c8:57:48:43:52:7c:b1:19:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Apr 17 16:01:49 2026 GMT
Not After : Apr 18 16:01:49 2026 GMT
Subject: CN=6129fd762183900786fe211e17aceb401486a830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:de:e4:8a:cf:29:c0:bf:d8:10:8d:12:c9:
dd:c4:f1:88:71:65:65:a5:7c:02:90:17:85:60:25:
8b:b8:04:e4:6b:79:83:4f:f7:26:55:af:14:14:b8:
1f:e5:25:d8:08:b8:46:0d:31:1b:f3:69:2e:51:f9:
20:6d:84:6b:0d:bc:98:a5:21:b0:a8:86:42:ce:ac:
ce:c4:b4:dd:9d:8a:6a:1f:fd:93:78:8a:71:fa:2d:
18:a6:e5:5b:9c:b7:51:2b:fc:6d:00:1e:df:09:fd:
16:a1:99:b0:9f:8f:bf:5b:ff:b5:ac:86:ee:90:f2:
99:4f:a6:18:57:7b:5b:d9:51:85:87:5e:2a:3c:53:
06:df:95:ec:d4:36:92:ee:b4:68:35:6b:0d:6b:d6:
92:29:03:7c:0a:3d:0b:16:bc:59:ca:40:c0:8c:80:
d5:c2:5e:97:bb:66:02:bd:95:98:9f:cc:c4:40:87:
4b:2c:4f:c7:a8:26:cf:45:a2:07:0c:bc:47:fc:b8:
06:d3:3c:0c:81:08:47:82:64:0a:4e:53:93:bf:70:
f8:f6:4c:80:70:35:d0:a5:36:b0:b5:f4:73:e6:fe:
31:7c:24:37:b8:13:7a:ab:8a:b9:f7:c0:41:6c:b0:
c8:96:3f:c1:fb:3a:ab:39:35:22:02:5c:4b:93:32:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:FD:76:21:83:90:07:86:FE:21:1E:17:AC:EB:40:14:86:A8:30
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f1:35:89:06:25:4b:0d:4a:b7:fb:55:ae:4c:f4:93:f3:2c:
2a:8d:6a:11:3c:53:32:8b:2d:f3:94:7a:84:2d:19:03:20:22:
3e:6a:24:81:45:b6:52:7c:b2:0d:b0:47:d7:92:af:d6:b7:78:
e8:21:71:fd:5e:94:3e:4b:96:d2:a0:f1:41:8d:71:f0:4c:1e:
63:a9:53:3c:7e:0d:31:30:02:a7:84:71:c8:fd:7e:f8:16:a9:
55:c0:76:d1:48:09:a8:aa:93:b9:58:f7:d8:6a:7a:00:af:b4:
5f:16:44:b1:3b:10:d5:b1:5d:7c:0a:b6:51:d9:e9:d0:5d:7f:
5d:f4:ae:15:84:a8:52:ff:31:57:1e:8e:f1:87:ce:c1:54:4b:
4a:fb:48:3c:26:8d:db:af:42:06:b5:db:dd:15:02:c6:9d:12:
46:e7:28:4e:02:28:98:a4:e9:9a:52:db:70:04:0c:34:d1:6f:
4e:aa:06:06:4e:6b:49:cc:a8:37:8d:93:49:02:77:19:75:3e:
e1:84:fe:f7:08:1f:04:d3:45:f3:bd:b5:ed:9f:d9:eb:b9:53:
5c:df:22:20:31:46:c8:7e:34:e4:43:4c:3a:dd:80:cc:11:e3:
79:53:28:9f:76:74:ed:c2:ec:a9:d8:ad:02:ed:9a:71:8a:5c:
24:04:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:34 2026 by rpki-client