Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: 9WzoWohikm1LzJD+LlocZqGjTdhO/fF4njKKBDjxFaI=
Subject key identifier: 53:D0:B5:68:2D:CA:88:BA:F3:49:67:86:90:B0:79:31:3A:53:83:C7
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019D9A7548BA95B2F24CCEA1298B0908F9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 08:01:10 +0000
Manifest this update: Fri 17 Apr 2026 08:01:10 +0000
Manifest next update: Sat 18 Apr 2026 08:01:10 +0000
Files and hashes: 1: V8PCFPrTValkKCiDtwNotmUAoXc.roa (hash: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: N3KoPpS2DtggWW/BqqbBh1zy7wYOCBAh55ISECpFTrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:48:ba:95:b2:f2:4c:ce:a1:29:8b:09:08:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Apr 17 08:01:10 2026 GMT
Not After : Apr 18 08:01:10 2026 GMT
Subject: CN=53d0b5682dca88baf349678690b079313a5383c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:e3:4a:c6:02:4b:6d:e4:d0:dc:b2:a5:78:
0c:6e:0d:49:1c:b4:cc:00:db:a4:8e:d2:4c:0a:e2:
38:ee:04:e5:76:65:86:af:dc:66:c0:fe:f9:37:67:
0a:37:47:6e:c5:89:67:4c:e2:31:07:94:82:b5:5d:
ad:82:6f:ab:16:93:ef:46:39:b7:41:56:0d:6b:d6:
f3:85:0d:7c:fe:26:65:c7:ef:9c:3e:0a:24:44:3c:
b5:05:d4:28:cc:3a:0a:8d:73:7f:2e:c3:6a:ec:e1:
f1:0a:72:57:21:b9:e7:14:95:94:03:72:72:b5:e4:
ee:9f:b2:92:11:30:84:cb:65:7d:57:02:b4:2b:1f:
97:d7:1f:43:f5:57:43:97:d0:66:a0:ca:7c:4f:5b:
a8:81:26:85:f9:41:7c:f7:8f:a7:52:f1:83:f6:69:
9f:81:d9:ca:23:cc:c0:3e:c8:50:22:a8:90:00:18:
a8:60:c9:8f:29:85:93:48:7f:b4:4b:c4:6a:4b:f8:
b9:5e:a0:87:ab:01:79:c3:12:36:af:54:6b:01:36:
0c:96:29:fb:65:5b:ef:6d:f5:81:25:03:97:3f:e1:
50:73:ac:32:e3:70:78:4b:c7:9b:2f:ee:62:63:fa:
e8:59:80:5e:9a:11:dc:73:2c:9c:bb:c7:d7:77:bb:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:B5:68:2D:CA:88:BA:F3:49:67:86:90:B0:79:31:3A:53:83:C7
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a6:2f:fb:b7:42:d3:61:7e:2b:5b:b8:a1:34:fd:16:48:50:
74:4a:9f:f5:1c:b9:f5:61:60:8e:d1:f7:ac:a3:e9:76:43:c7:
ab:a4:b0:4a:1f:d6:9e:f9:09:aa:b6:cc:0f:47:8a:f9:19:13:
95:d3:56:63:7e:b6:8d:59:c5:95:ff:f4:43:c1:90:5e:ac:de:
9d:a0:5a:d3:1e:a7:e5:5b:8d:68:ac:4d:87:5c:06:16:ad:39:
e9:be:4c:96:b5:83:f3:92:f7:eb:9a:b8:16:56:e0:e1:89:a7:
22:d8:9b:87:db:3c:43:a3:0f:1c:a3:96:22:fa:c2:c7:64:f8:
50:73:dd:5a:a8:b7:f9:59:ea:da:f5:63:55:e5:8b:88:aa:3c:
b8:de:6a:72:a1:28:c0:17:fa:83:99:55:7e:ca:5f:97:73:e4:
e5:e6:54:90:5e:11:ae:3c:16:10:d4:3d:27:30:05:a5:2f:96:
64:60:49:9e:ed:7b:50:52:4e:02:fd:a5:6b:d5:17:19:35:8a:
e4:43:04:42:43:56:40:bf:be:a4:fd:67:0a:2d:d0:69:a2:a7:
38:0b:6e:51:8c:14:b8:66:5a:ec:e9:71:65:28:4e:45:06:fa:
39:d1:84:a8:02:5f:3b:d5:91:bb:8e:50:42:47:c6:7e:cb:35:
b1:17:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:17 2026 by rpki-client