Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File: VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier: iqztYW/UzBwmIItD5xDSiQcdXgHxebGGALZMHWDtdUQ=
Subject key identifier: 45:82:27:85:70:C7:B3:D1:6C:61:6A:AA:37:B9:C3:7D:DB:7C:CC:A9
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial: 019DA3E64D991F0481AEEABCFEC31E3A08D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number: 0DC3
Signing time: Sun 19 Apr 2026 04:01:12 +0000
Manifest this update: Sun 19 Apr 2026 04:01:12 +0000
Manifest next update: Mon 20 Apr 2026 04:01:12 +0000
Files and hashes: 1: CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa (hash: kcWbbVv8ASdYvi8EuyOv3tMh0xXxdFL5jH6YworqpiU=)
2: OCwZn3M2fA5Hq8kNmQdHXm6169A.roa (hash: hYYgtO03EJt7YSnRsoX8WPt38DBVQ4OQ4v1UuaWwBlg=)
3: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: 11S0Cyu5FKqoM6KH3wa0vct1OzlC7SHlypQd3BpllpA=)
4: qK3CTioRHIZv8tRs19l4YH3NK7Q.roa (hash: mYr/W0vsn5NqGep9nH2w5E2ZZ+X10OK8JIo9QGjsoSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:4d:99:1f:04:81:ae:ea:bc:fe:c3:1e:3a:08:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Validity
Not Before: Apr 19 04:01:12 2026 GMT
Not After : Apr 20 04:01:12 2026 GMT
Subject: CN=4582278570c7b3d16c616aaa37b9c37ddb7ccca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:da:12:22:79:82:51:fd:51:55:24:3f:f1:
69:a7:12:b8:c3:ef:ad:4e:2c:f1:c7:05:33:1f:52:
bc:bd:14:5b:31:12:a2:45:99:37:13:91:41:71:c9:
2a:4e:e8:f3:f8:7a:99:6c:d6:b9:a6:46:ef:b5:04:
67:a3:f0:f8:f3:c9:d4:48:9c:65:56:e5:b3:0c:7d:
6b:bc:dc:4b:7f:1d:cd:f7:29:c8:b0:29:8f:ac:4c:
8f:cf:11:66:1c:72:b9:af:35:b8:6b:ac:42:3f:2e:
ac:72:76:c3:ce:9e:b5:20:2d:1e:9a:16:19:57:cb:
1f:c9:51:db:20:9e:b2:a0:56:7d:0e:b4:73:68:ed:
2a:27:63:bb:74:4e:cc:09:8f:17:b0:de:0e:c3:0a:
e0:03:60:fc:8b:c3:f1:2f:a7:b1:86:35:09:6b:31:
e3:e5:97:6f:45:dc:30:b9:0c:ea:fe:3b:df:07:f8:
27:37:bd:8f:3b:5c:08:5e:ec:f3:fb:3f:0a:10:3f:
c2:f1:a3:d8:bb:e1:37:b2:1b:18:1d:27:8b:2c:62:
cb:27:a6:8a:c9:89:54:94:77:46:3d:bb:60:f1:a3:
00:aa:12:b6:9a:e4:b3:cb:a5:9e:28:4a:0d:72:35:
c3:6f:e6:8f:1e:e7:a2:af:0c:3f:13:52:fc:90:7a:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:27:85:70:C7:B3:D1:6C:61:6A:AA:37:B9:C3:7D:DB:7C:CC:A9
X509v3 Authority Key Identifier:
keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5a:5a:1d:2c:e7:30:ab:a5:30:33:a3:e1:9c:c5:d8:91:69:
fb:12:bd:6c:52:4f:04:8f:1b:33:2b:30:a2:09:f0:af:ac:f4:
c5:ec:a4:51:66:9f:1d:eb:c3:34:27:91:87:1b:88:30:da:75:
58:58:61:67:d3:93:3e:c9:df:0e:52:aa:48:0f:48:b9:b5:49:
76:c9:a5:c3:9d:e2:cf:6b:76:61:25:91:69:02:7f:ea:ef:88:
e7:85:56:5b:4b:6e:6b:da:1b:85:cc:a0:eb:2e:b9:03:5f:2b:
50:21:e7:bc:d7:be:33:1b:b4:03:fa:6e:6a:5c:59:86:1b:dd:
84:b8:ab:25:c2:85:83:04:0a:aa:59:51:dd:20:ef:90:71:f5:
a1:79:6b:22:2d:31:1d:9d:5d:bf:82:ff:82:48:06:11:ee:1d:
e5:97:6f:cb:87:8c:8f:3e:9d:8b:e5:90:75:e7:9b:51:60:16:
26:0e:c6:89:f4:5b:80:73:2a:e5:e8:f8:33:4f:37:f1:f3:c5:
42:5f:bb:cc:9e:00:75:70:48:2d:29:48:3e:0b:13:4b:c6:af:
fa:42:c2:77:54:8c:97:51:0e:dc:19:1d:82:fd:2c:bf:70:81:
8d:42:47:9e:a8:65:73:10:fb:9b:51:6a:6b:9c:a7:3f:d5:5d:
94:d1:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:39:34 2026 by rpki-client