Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: b/usfZdvHdu86LNTh35MZ4MhEdoLxd2n8Ui/pjGgR78=
Subject key identifier: 52:01:F5:F0:CF:97:DB:D4:75:FE:D0:AE:C2:C0:52:38:1B:30:FF:5C
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 019D9A070CC4A57FF397C5CF09D6C7FB730F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:46 +0000
Manifest this update: Fri 17 Apr 2026 06:00:46 +0000
Manifest next update: Sat 18 Apr 2026 06:00:46 +0000
Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: kqq0aWmU1EIekfvDeVcBU6YoaphfztM/vBSlVl2Y+pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0c:c4:a5:7f:f3:97:c5:cf:09:d6:c7:fb:73:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: Apr 17 06:00:46 2026 GMT
Not After : Apr 18 06:00:46 2026 GMT
Subject: CN=5201f5f0cf97dbd475fed0aec2c052381b30ff5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:0a:b9:e2:55:01:b0:9b:43:28:a0:b8:1d:
7a:60:f3:d7:26:f7:98:1d:2b:e7:44:ac:bf:75:6f:
7a:1a:97:20:fa:54:15:8e:cd:c2:9e:8f:b5:cf:6f:
c4:1f:44:67:90:9d:c0:1c:61:c4:55:84:d4:bc:e6:
d3:be:d8:2e:20:d2:bf:9e:eb:ea:2d:8a:53:6c:86:
ef:7d:7d:bb:bb:a3:9b:5f:e1:81:da:48:d5:94:8b:
b0:41:61:84:60:f5:de:0c:46:3f:e6:28:46:99:1b:
2a:bb:a5:81:ba:92:ad:e1:02:d0:e1:97:88:9f:14:
58:58:a8:58:85:6e:e5:65:4a:1f:18:b7:54:4a:3c:
06:1c:fd:df:1a:61:fb:7d:1f:74:ff:4a:4b:48:2d:
6b:67:62:0e:5b:08:ad:61:7d:0b:9d:2a:37:e5:4c:
91:ee:cb:9a:8a:dc:39:92:d6:ee:b5:dd:cc:a4:7c:
7e:20:8c:4d:7a:9a:8f:ff:d2:9d:29:de:ab:dc:be:
86:2e:64:9c:c8:5d:de:87:e2:5b:51:b8:e3:83:95:
5f:e3:ba:b9:f0:24:e7:46:b0:84:76:e9:82:d7:e1:
1a:95:93:99:98:fb:cd:c7:7a:e8:00:df:22:a3:c3:
97:bc:62:75:57:7c:99:5d:eb:16:57:53:c8:55:26:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:F5:F0:CF:97:DB:D4:75:FE:D0:AE:C2:C0:52:38:1B:30:FF:5C
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:de:fc:c0:20:03:0d:c6:ed:07:b8:3e:76:8d:7d:db:1c:05:
c8:63:d1:16:b8:ad:3d:6c:6e:a7:fb:db:91:a3:c4:65:e8:b3:
b9:ed:3e:d9:27:d8:50:6c:1c:c5:8a:87:8e:c8:b9:76:e9:8b:
e3:54:41:f7:11:8d:1e:46:7a:11:83:7a:6d:b5:8c:c8:7f:4a:
6f:d1:f2:82:26:64:28:78:4e:e7:90:8b:15:4d:b4:61:8c:ec:
90:39:c7:63:ad:2d:77:39:32:94:d1:55:21:10:c2:55:ae:01:
e5:d8:f5:3f:e7:f9:99:cc:58:73:2d:1e:6f:28:43:1b:ba:3d:
68:45:9c:a2:2c:8d:68:c4:59:1f:1c:10:7a:4c:36:e6:a3:24:
3b:30:31:ac:2b:40:41:00:ec:68:e9:00:3c:e9:20:7f:65:55:
5f:dd:b8:66:04:c7:b6:ad:85:81:06:da:6b:e9:c7:ca:23:3c:
da:ff:4a:4a:78:db:af:be:af:20:1b:a0:0f:14:b0:99:b3:59:
e3:5c:df:53:c0:35:4c:5c:c4:b5:29:aa:47:6d:b1:9f:40:b2:
3c:fc:f5:72:1c:9d:c1:5f:e0:eb:60:b4:18:56:30:ae:c2:1b:
a6:98:a0:6a:32:d9:97:69:fc:0f:0a:75:3f:4d:96:c6:5b:82:
dd:7f:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:47 2026 by rpki-client