Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: OFGkjHkBZdATpsXUAqya2AtzH9ekAEMlfnyMYKdAm9E=
Subject key identifier: D0:A5:3D:82:C4:45:00:43:DA:93:1B:95:44:11:F8:8E:20:42:84:C9
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019D9850C82EEF8C16F80147A5F06760ACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:02:04 +0000
Manifest this update: Thu 16 Apr 2026 22:02:04 +0000
Manifest next update: Fri 17 Apr 2026 22:02:04 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: GrXl+3g4L7Elk8h7PsduLnp990CY03X1RysRQsQKp10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:c8:2e:ef:8c:16:f8:01:47:a5:f0:67:60:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Apr 16 22:02:04 2026 GMT
Not After : Apr 17 22:02:04 2026 GMT
Subject: CN=d0a53d82c4450043da931b954411f88e204284c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:83:5f:d3:98:11:23:54:01:c3:f4:75:18:
d1:20:b1:3d:de:72:2a:73:0c:0c:89:a9:1b:2f:e5:
b9:8d:6a:39:b5:37:da:40:d7:bf:2a:e6:2f:fa:5c:
ba:9d:1e:dd:2b:1b:31:7b:e6:b8:a3:14:1d:8a:05:
14:8e:18:ce:21:86:31:f9:65:22:aa:c8:35:00:2c:
d4:4e:5a:32:f3:a7:11:a2:e5:45:71:f4:03:6e:87:
0e:bf:96:3b:ef:f1:aa:e1:00:10:fd:f1:54:ed:48:
4f:b7:de:fd:96:dd:53:7c:27:6f:89:70:4b:f2:3e:
4e:c6:06:f9:3c:e0:cd:1f:f3:d0:d5:60:f5:9e:0d:
c6:cb:50:dd:68:eb:2e:72:02:53:0f:bc:3d:99:0c:
fb:45:c1:81:8c:26:d1:44:bc:f0:30:c2:66:5a:bd:
dc:a5:ce:32:f8:9d:fe:f6:2d:b3:45:50:4c:a4:a3:
30:16:08:ba:77:c1:34:22:9b:05:bd:5c:33:e8:55:
01:98:b4:a6:a4:2b:dc:4b:a3:63:d3:71:77:b8:5a:
d5:01:07:f2:43:3b:23:0f:c4:1d:bc:ea:3f:5e:91:
f1:37:00:0c:20:82:4d:1e:4d:30:f1:70:62:ee:6f:
a3:92:e4:28:36:3d:ca:59:d1:cc:2b:29:d5:54:f8:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:3D:82:C4:45:00:43:DA:93:1B:95:44:11:F8:8E:20:42:84:C9
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c3:c2:48:a1:69:7a:f8:b1:3b:f3:e0:78:c3:08:ac:26:48:
58:49:e4:d1:cb:8c:67:2b:da:4b:10:c4:32:ba:18:87:f1:1c:
92:07:c5:d6:d1:de:4f:43:10:18:46:e8:59:9b:f1:bf:90:4a:
39:26:77:8a:72:22:2f:47:c9:ca:b1:39:5b:12:91:d4:d3:5f:
fb:80:94:e7:65:06:9f:67:7b:9d:3d:78:29:26:2d:f7:66:9b:
28:11:bf:96:fb:1c:f4:74:cc:b3:c5:39:61:de:f0:38:cd:62:
7f:5a:e7:06:22:9c:b4:ae:ab:60:f0:60:31:f9:07:af:80:7e:
86:db:12:24:b6:98:2e:1b:71:fd:e1:0b:b3:c8:a8:49:54:1b:
c6:aa:9b:7c:62:d5:b6:46:6d:66:c6:64:6c:1b:3d:55:47:25:
74:06:87:e3:bd:05:77:ab:1c:61:2e:5d:2b:aa:c3:0c:d2:99:
d5:99:d1:3a:e0:6b:fa:5e:85:8d:20:aa:bc:2f:23:c3:20:ee:
bc:37:9d:ca:cf:32:50:93:a7:36:17:1f:9f:72:7b:22:f1:b1:
28:fc:d8:57:e6:d8:9a:fd:8a:32:4a:f1:87:29:be:a6:e4:ac:
9d:d0:05:ed:2f:b5:97:88:e8:a6:4b:50:9e:8f:d5:00:27:ff:
ab:c2:39:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUMgu74wW+AFHpfBnYKztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTBhOTQ5OTc2NzJhOTIwYTI5MGNjYmZkMDQ5MTI2Zjcw
NzVjOTkwHhcNMjYwNDE2MjIwMjA0WhcNMjYwNDE3MjIwMjA0WjAzMTEwLwYDVQQD
EyhkMGE1M2Q4MmM0NDUwMDQzZGE5MzFiOTU0NDExZjg4ZTIwNDI4NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdiDX9OYESNUAcP0dRjRILE93nIq
cwwMiakbL+W5jWo5tTfaQNe/KuYv+ly6nR7dKxsxe+a4oxQdigUUjhjOIYYx+WUi
qsg1ACzUTloy86cRouVFcfQDbocOv5Y77/Gq4QAQ/fFU7UhPt979lt1TfCdviXBL
8j5Oxgb5PODNH/PQ1WD1ng3Gy1DdaOsucgJTD7w9mQz7RcGBjCbRRLzwMMJmWr3c
pc4y+J3+9i2zRVBMpKMwFgi6d8E0IpsFvVwz6FUBmLSmpCvcS6Nj03F3uFrVAQfy
QzsjD8QdvOo/XpHxNwAMIIJNHk0w8XBi7m+jkuQoNj3KWdHMKynVVPgH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNClPYLERQBD2pMblUQR+I4gQoTJMB8GA1UdIwQY
MBaAFL7gqUmXZyqSCikMy/0EkSb3B1yZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTIt
M2E2MDYzY2ZlYTk1LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTItM2E2MDYzY2ZlYTk1
LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMPCSKFp
evixO/PgeMMIrCZIWEnk0cuMZyvaSxDEMroYh/EckgfF1tHeT0MQGEboWZvxv5BK
OSZ3inIiL0fJyrE5WxKR1NNf+4CU52UGn2d7nT14KSYt92abKBG/lvsc9HTMs8U5
Yd7wOM1if1rnBiKctK6rYPBgMfkHr4B+htsSJLaYLhtx/eELs8ioSVQbxqqbfGLV
tkZtZsZkbBs9VUcldAaH470Fd6scYS5dK6rDDNKZ1ZnROuBr+l6FjSCqvC8jwyDu
vDedys8yUJOnNhcfn3J7IvGxKPzYV+bYmv2KMkrxhym+puSsndAF7S+1l4jopktQ
no/VACf/q8I5mw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:08:50 2026 by rpki-client