Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: EQKjxU3PfWlcEPUh/+LyOVLJJoY2/vOwzZIqhZ9LOrw=
Subject key identifier: CF:1F:97:C8:32:FD:D9:51:A6:00:F4:C5:30:EF:6E:71:D1:08:43:F5
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 019D9A748460D4158AC0EF7CB1E59309D32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 052B
Signing time: Fri 17 Apr 2026 08:00:20 +0000
Manifest this update: Fri 17 Apr 2026 08:00:20 +0000
Manifest next update: Sat 18 Apr 2026 08:00:20 +0000
Files and hashes: 1: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: dIlcjJpVnTg7QjEp12W5dY0OkBBA6DC813CvmLydS78=)
2: ZHhc0L728ye9C_PaxE7QKIWysf0.roa (hash: IYrJXv7Z8+WyubB49OSinWGa68suJopradNDMs9g9yQ=)
3: mUqS4S5SL9Pvq3yISShuWCb9ZtE.roa (hash: uUcTOLjK+7qjGVmB7WyFwvHdMHjyRZf2FkbrhsEB5pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:84:60:d4:15:8a:c0:ef:7c:b1:e5:93:09:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Apr 17 08:00:20 2026 GMT
Not After : Apr 18 08:00:20 2026 GMT
Subject: CN=cf1f97c832fdd951a600f4c530ef6e71d10843f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:db:3e:fa:11:09:f6:8a:be:d7:0a:7d:85:
94:2a:c3:80:17:ef:f5:13:22:82:30:92:9f:d1:fa:
a0:27:83:d4:65:61:7e:76:d7:68:39:af:32:da:23:
7d:fa:d1:ae:b2:70:89:72:84:2b:3f:eb:6a:73:ed:
26:5e:e6:13:db:61:ea:e6:09:88:90:65:be:da:12:
03:b5:f8:4b:a3:92:c3:29:89:a4:b5:59:94:c6:46:
9c:85:ea:dc:d4:9f:52:a7:fe:f4:bd:f3:5c:9b:31:
9d:76:7f:6b:ca:98:ed:ab:57:8f:cc:c1:16:ad:2c:
71:5c:62:d6:0d:44:9f:3c:b6:7a:77:92:8a:8b:8d:
bc:ca:c4:86:48:4d:05:b7:36:98:d9:c7:09:bc:95:
1b:8c:b2:49:f7:61:9c:a6:64:84:38:32:a7:32:c7:
cf:a4:92:8e:7b:84:7b:36:de:7f:b3:a8:bc:c0:34:
8b:f3:37:49:66:ef:f9:32:ff:3d:38:94:1c:8b:a8:
68:0d:ad:e0:3e:9f:90:07:fb:a9:1c:13:a5:eb:86:
d6:5f:96:9c:84:f5:34:57:bc:b0:6e:1a:0d:6e:14:
2e:37:25:70:8e:c6:50:34:8d:0f:0e:57:36:06:99:
8a:3c:51:6d:08:30:35:23:e7:c9:d7:c0:90:cc:00:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1F:97:C8:32:FD:D9:51:A6:00:F4:C5:30:EF:6E:71:D1:08:43:F5
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:94:40:08:39:5c:a2:0d:c4:73:a0:fe:4b:87:19:d0:77:ab:
93:fa:f2:46:14:35:33:45:f3:4f:88:25:7d:f4:31:2b:40:96:
5a:1c:ad:a5:2c:70:f6:56:87:af:a2:90:71:6a:3b:c2:05:cf:
68:00:f1:3b:63:e6:e0:35:99:a3:43:ce:2f:5e:a7:dd:d4:79:
a3:f6:29:a7:97:ab:17:7f:46:33:12:72:1c:51:2c:54:1f:78:
d1:92:57:06:61:d3:e7:6b:c3:24:c4:60:82:49:df:24:29:43:
ac:40:d0:df:4e:8c:36:d4:c0:c5:61:f7:d5:fd:18:55:d5:82:
10:bc:e6:43:ea:db:d6:0c:58:a9:19:11:42:25:8f:68:2f:dd:
fa:a4:91:ea:0d:82:9f:7a:a5:b8:f7:48:34:fd:04:2e:f3:8b:
0e:07:0b:15:b3:4b:d0:45:1e:0d:c8:f5:14:6d:11:a9:eb:e6:
37:ca:28:d6:57:2e:61:75:7b:bc:75:9a:71:85:84:54:c7:54:
46:e7:df:77:75:f6:34:0f:b2:10:54:36:de:f8:7d:a6:9e:db:
19:e7:75:35:4f:b9:47:b4:3c:8f:9d:03:33:d2:ac:80:97:86:
ee:f4:4f:27:42:33:17:b4:ff:12:b1:be:e8:00:21:1f:37:82:
88:21:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:30 2026 by rpki-client