Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
File: VfrLmru0yp4IZiqT0ucy5wsGwvI.mft (raw, json)
Hash identifier: SMtQBdxaQ0s3jtso4XpNj3nax4YWjmZsIG0IwnCrWjs=
Subject key identifier: 82:17:F7:FA:95:10:7E:C4:92:88:27:AC:41:36:42:CC:78:22:CA:50
Authority key identifier: 55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
Certificate issuer: /CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Certificate serial: 019D98F4406428C1D5A473AC7ECF5CAD4124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:37 +0000
Manifest this update: Fri 17 Apr 2026 01:00:37 +0000
Manifest next update: Sat 18 Apr 2026 01:00:37 +0000
Files and hashes: 1: VfrLmru0yp4IZiqT0ucy5wsGwvI.crl (hash: cAtQB5hcFihRE0iZcFQ133RcZ0xjD/qi6FgvXH1p/YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:40:64:28:c1:d5:a4:73:ac:7e:cf:5c:ad:41:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55facb9abbb4ca9e08662a93d2e732e70b06c2f2
Validity
Not Before: Apr 17 01:00:37 2026 GMT
Not After : Apr 18 01:00:37 2026 GMT
Subject: CN=8217f7fa95107ec4928827ac413642cc7822ca50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:ec:8b:6f:f2:92:6d:33:e2:cc:a2:ae:c0:
d0:a4:d1:40:3b:46:a3:a5:25:80:8d:bd:05:33:b3:
19:e8:71:e0:8c:85:ec:dc:d6:1e:7e:56:ea:58:f2:
38:91:3a:5c:c1:fa:2b:b2:f1:43:f7:87:fc:dd:cc:
b8:15:38:ac:b3:ff:1d:4e:88:3f:75:2d:0d:2d:15:
5c:93:a6:69:e6:22:80:e5:c4:8c:ca:d4:91:7d:ec:
0d:61:9c:69:2a:39:c4:7c:88:48:0b:53:31:3c:58:
a5:10:9b:88:64:32:9c:b9:3b:b6:13:19:0b:46:18:
9e:10:25:ac:a0:6e:1a:2d:ad:5d:01:eb:65:89:51:
05:2b:ec:15:57:b4:f7:32:d9:c6:7d:97:95:95:71:
de:45:3c:a1:32:8d:23:fd:d8:7d:7f:1b:91:31:9b:
d7:9c:dc:23:18:72:6f:8e:5b:3b:10:b6:ef:aa:58:
6c:e5:87:4b:ef:8a:7d:c7:8b:a8:1b:85:c1:01:9a:
12:03:98:5b:b3:35:6a:24:5b:2d:2d:ae:0d:a8:4e:
db:bc:91:e2:0c:b9:39:89:bf:35:54:aa:ee:c8:52:
58:32:1f:40:d1:0a:89:65:a6:59:85:8d:d3:83:1d:
08:89:4b:51:1e:a6:d8:be:58:a1:04:c4:ab:56:9b:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:F7:FA:95:10:7E:C4:92:88:27:AC:41:36:42:CC:78:22:CA:50
X509v3 Authority Key Identifier:
keyid:55:FA:CB:9A:BB:B4:CA:9E:08:66:2A:93:D2:E7:32:E7:0B:06:C2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrLmru0yp4IZiqT0ucy5wsGwvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e23338-1f3f-4acd-a88c-2eccfce112dd/1/VfrLmru0yp4IZiqT0ucy5wsGwvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7b:a5:64:b1:7f:a7:99:f4:ab:84:c7:7e:92:93:26:a8:c5:
b8:52:68:a1:a8:82:3f:3b:bb:dc:71:b8:66:9a:4b:9a:a3:5e:
8b:2e:95:ab:bb:13:fa:70:48:fc:be:52:ca:62:f9:0b:4c:d8:
d0:08:54:60:dc:61:32:61:d9:3d:62:d2:fd:fd:81:4e:e6:c8:
76:89:6e:55:96:7b:2b:60:8a:bc:81:49:ff:42:d2:22:72:ec:
8d:f7:83:25:1d:7e:52:c2:ca:8e:fc:89:b6:b8:71:7f:da:9e:
94:83:f8:c1:b9:68:d7:ad:fb:6a:7f:dd:e4:ab:62:97:b4:2e:
54:4b:0e:c9:92:5d:68:15:09:02:d5:e2:de:94:44:c4:60:58:
4e:92:6f:33:64:f2:e7:10:2c:43:9d:91:6f:2f:75:9c:19:27:
64:40:59:d9:29:3e:44:0d:34:05:ee:5f:e4:1e:52:ad:18:4f:
41:2a:de:1a:8f:52:f3:bc:92:aa:f8:8a:2d:5f:ae:36:9a:05:
4c:5c:a4:9b:5e:24:f9:51:33:2a:70:e8:ef:ed:35:6d:38:5b:
17:aa:61:81:3c:22:20:1b:4e:9f:18:6c:f1:0c:0e:fd:7d:26:
5d:4c:b8:b5:a9:cb:96:a6:47:5f:aa:89:05:05:9b:a5:3e:43:
79:a3:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:13 2026 by rpki-client