Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier: J52fi2ADZ+/g2xIxGSYfQPQF9ECe1jCVsnPBHSL3vfU=
Subject key identifier: D2:B4:2A:93:D5:09:7B:D8:73:71:96:06:00:C5:35:AC:7A:99:04:91
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019D9C632EBB9D414854EAB48F3C5A82D0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number: 0C39
Signing time: Fri 17 Apr 2026 17:00:38 +0000
Manifest this update: Fri 17 Apr 2026 17:00:38 +0000
Manifest next update: Sat 18 Apr 2026 17:00:38 +0000
Files and hashes: 1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=)
2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=)
3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=)
4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: 8ppgg1lsLxo0wQH2vlDAt7wvvl7sGbu0lbvZdPt+LRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:2e:bb:9d:41:48:54:ea:b4:8f:3c:5a:82:d0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Apr 17 17:00:38 2026 GMT
Not After : Apr 18 17:00:38 2026 GMT
Subject: CN=d2b42a93d5097bd87371960600c535ac7a990491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:ef:fa:49:e5:05:0e:08:72:79:91:a3:17:
83:15:67:40:f4:49:7e:0b:fb:2d:ca:39:8d:d3:3c:
64:b7:3b:74:3e:f0:d7:c8:a4:d0:77:07:a2:e1:6b:
80:1e:ea:44:c5:b4:30:8e:d5:9d:27:81:22:d3:5a:
cb:60:1f:19:18:23:da:f5:3a:53:42:fd:de:e3:de:
b7:a9:60:0b:c3:11:02:e3:4e:0e:61:1e:7a:2b:7b:
3a:f0:5f:7f:c4:64:7b:48:f6:3d:fc:5f:0c:d4:26:
3c:09:35:a2:2a:67:01:b0:90:19:f5:a6:88:29:2d:
0e:d2:95:db:f0:19:96:d1:16:fd:fd:41:14:d5:17:
88:22:e9:34:5f:42:a2:0c:35:51:d7:9d:68:e5:70:
e8:47:5d:ee:37:12:9b:38:67:5c:e3:df:4a:92:9d:
f0:1a:c5:b5:7a:b3:70:86:64:16:6f:26:09:46:5e:
23:59:3b:5b:e0:68:da:c1:89:cc:0a:63:e1:54:c9:
96:18:03:db:e0:78:4d:27:86:23:9e:0c:52:15:18:
f3:67:c8:8d:b2:08:52:9a:d9:fb:b1:11:04:69:54:
11:bc:ef:8d:c2:31:af:8e:83:cc:47:a8:cc:2a:54:
96:9a:83:fb:d5:2c:fc:4b:3e:e8:79:d6:09:90:f7:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:2A:93:D5:09:7B:D8:73:71:96:06:00:C5:35:AC:7A:99:04:91
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b4:a7:83:d9:da:d8:83:5c:79:14:36:76:9c:d4:ce:c3:79:
82:71:79:1d:e2:3b:cd:5c:07:94:6c:36:09:84:30:ed:e7:5b:
44:c4:d2:05:3b:93:16:af:99:f0:8d:56:69:2c:06:ed:bd:ac:
c1:9b:50:fe:83:ca:04:03:d4:ac:e9:d2:fd:cf:f6:34:2c:28:
3b:c7:e8:bc:0f:64:5e:14:39:d0:7d:e7:2e:b7:56:02:70:a3:
22:39:e0:df:29:ce:4b:1a:7c:18:bc:8e:a0:8b:8a:68:f5:44:
bd:a8:5a:33:5f:e9:d0:72:54:48:ba:49:13:27:54:ed:7b:81:
b3:a1:4f:a9:4a:2d:52:90:20:4f:6f:79:59:c1:7f:a9:76:7f:
81:80:86:94:c4:68:fc:74:6b:23:39:3e:39:40:bb:d7:22:87:
03:ce:89:c9:fb:d0:e6:62:e2:ea:4e:a4:29:13:e7:e2:42:36:
1b:e3:26:e9:83:e7:d0:0e:1d:93:fe:92:95:08:9c:1a:9f:53:
a2:e2:05:2c:6b:c8:ee:98:16:45:fd:f1:2c:bf:21:97:18:f5:
a5:e4:88:0f:f5:a6:66:88:ff:7a:a1:ae:33:3a:60:8b:d4:e8:
3c:a6:42:18:91:b9:f1:f4:4d:df:f7:45:41:c3:ec:19:af:2d:
44:66:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:35:51 2026 by rpki-client