Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: fTcnmd2N6JSEVBkHpUKh1hhqsIwc+Fk522ZZsi/YAH8=
Subject key identifier: DB:2B:27:C2:D8:24:99:6C:2D:7D:C4:BB:2D:5D:B3:32:41:BA:3D:D7
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 019D9AABCA94F95DF2B99FCD0F9A13C83AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 13CA
Signing time: Fri 17 Apr 2026 09:00:42 +0000
Manifest this update: Fri 17 Apr 2026 09:00:42 +0000
Manifest next update: Sat 18 Apr 2026 09:00:42 +0000
Files and hashes: 1: qobIcfeU6nrdlOVqSH5eoEXWNc4.roa (hash: Ajh39YpvJBLhmSQ2jvIh5vojnzHR5G4xIOrDmEyjq6g=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: /BOK3m6ahsIclXZJbfo+S5xBgx1PEE7p28M7YcIpRas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ca:94:f9:5d:f2:b9:9f:cd:0f:9a:13:c8:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Apr 17 09:00:42 2026 GMT
Not After : Apr 18 09:00:42 2026 GMT
Subject: CN=db2b27c2d824996c2d7dc4bb2d5db33241ba3dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:b8:b9:bc:0b:43:a4:16:be:40:48:1a:00:
41:fa:3f:e9:ec:b2:1e:e5:1e:7d:ad:fa:60:88:ae:
87:4e:1f:f2:fc:14:6e:a9:36:85:45:c3:16:5c:80:
0b:f9:86:5c:aa:70:cf:bd:11:0d:8c:48:3f:1c:9f:
e5:be:a0:cc:5e:27:72:b5:23:03:8b:6e:35:5e:08:
0e:9a:8f:ec:ac:1f:88:c0:cb:c4:25:ac:ab:b0:10:
20:a2:fa:56:24:0d:dd:84:cb:a1:10:b7:ad:6c:4f:
e1:45:c7:ba:1b:64:3a:fb:32:ef:67:df:b8:70:f9:
fa:6d:ae:47:59:45:16:5a:23:73:ca:5c:5a:31:84:
56:e5:a1:70:8a:9c:22:34:86:bd:bb:16:fa:9f:9a:
e1:89:18:77:88:4a:1c:e0:9f:84:28:52:aa:09:6f:
6f:af:4f:3d:b2:5d:33:2f:10:da:0d:f5:a0:bc:68:
9b:ee:e2:c9:70:5a:a0:21:75:f4:73:23:b2:b5:41:
25:08:38:ff:cb:04:75:63:14:d3:05:3d:10:a0:c9:
11:a8:79:9c:c3:4d:8c:d4:9a:ec:d3:dc:73:01:e2:
d9:d7:0a:a1:38:57:06:3f:a0:23:b9:a7:63:b0:97:
75:fc:be:be:5e:84:17:80:86:27:0a:32:f0:6c:48:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2B:27:C2:D8:24:99:6C:2D:7D:C4:BB:2D:5D:B3:32:41:BA:3D:D7
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8b:4b:b9:0b:7d:f1:e9:3a:04:f3:45:c3:3f:8b:a2:50:a6:
55:c7:e8:be:83:d4:c5:c8:dc:f0:20:17:dd:be:8c:b6:25:04:
a7:bf:71:aa:d7:c5:91:bc:d6:c4:46:9d:e4:77:21:75:21:b8:
b2:51:5f:32:46:55:dd:5e:00:87:86:a9:d3:92:0c:f4:51:69:
16:6a:40:0d:2e:ae:6e:a1:5d:37:49:5b:96:2b:58:31:2a:15:
13:4e:c1:57:4a:a5:13:43:e0:6d:b4:0d:2d:94:2d:4c:f0:24:
86:13:06:14:6a:3b:c1:d3:9d:59:47:c0:48:b5:6b:cc:ce:93:
f5:00:4e:5e:42:8f:3c:e5:c5:af:19:91:4e:e2:dd:b1:b3:1a:
bb:bd:ef:23:e1:22:87:76:df:92:ad:55:e7:ee:94:73:2d:83:
15:1b:3d:18:0f:39:49:b9:02:b2:97:0e:b7:e7:c1:ca:07:74:
1b:dd:e1:a4:43:3e:fa:28:3d:9c:90:3c:56:23:b2:0b:44:3b:
bc:08:48:ec:70:be:50:1d:c5:51:8a:98:d9:ae:cf:c6:69:58:
73:a2:80:7f:9e:be:16:cd:f7:d4:4f:ba:d1:01:40:0a:f1:06:
bb:ee:c2:ca:51:b0:9c:1d:8c:f7:64:40:bd:86:ee:0d:55:e8:
62:7f:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:49 2026 by rpki-client