Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: YFqGUFPxo3d7SxUfJhtQjad12UFHeR7eLieoFFdaBMo=
Subject key identifier: 4C:40:47:ED:E1:C9:F4:98:F8:04:BB:44:13:E9:D2:2B:18:C4:49:2B
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019D98BD91448F42BBA5FC748D1614373E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 08F2
Signing time: Fri 17 Apr 2026 00:00:53 +0000
Manifest this update: Fri 17 Apr 2026 00:00:53 +0000
Manifest next update: Sat 18 Apr 2026 00:00:53 +0000
Files and hashes: 1: MZeI3fx7Rs6vgWADfZ3b9x-IPrw.roa (hash: 88TFwnxWocrDYKNiW9RVsE1t/Ul4aE3DSPX0lbd55Bc=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: 9mIdqbJSnGmPcn5g+LoIHHJz66xukPX5ZQHhDA3vPbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:91:44:8f:42:bb:a5:fc:74:8d:16:14:37:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Apr 17 00:00:53 2026 GMT
Not After : Apr 18 00:00:53 2026 GMT
Subject: CN=4c4047ede1c9f498f804bb4413e9d22b18c4492b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:c4:b7:8c:e1:63:44:bb:ad:c8:2d:00:6f:
56:b9:a5:bb:b8:16:06:1d:07:9d:cf:b7:90:33:63:
40:ba:1e:fc:88:f4:e5:d3:e6:ce:e9:1b:39:90:55:
0d:2d:f5:35:56:50:6d:5f:78:ff:d4:5f:75:1e:d2:
d7:02:1a:f9:f6:d4:65:81:2c:65:33:fe:6c:f3:36:
31:d9:fc:91:82:a6:fa:60:3f:04:a4:e1:41:d7:22:
df:88:dc:c7:45:db:d3:d3:b2:f4:c4:3f:cc:28:d8:
77:a5:b8:54:48:59:c2:09:2b:e8:55:45:e9:ba:75:
79:cf:58:9f:d8:57:66:a2:d1:e0:ee:d8:96:37:fb:
d6:05:4b:4b:f7:99:68:ae:42:67:c7:52:13:0a:7e:
57:e9:37:65:60:2e:a2:6c:dc:6d:1e:e7:f6:d3:0a:
a0:29:c3:6b:0e:44:d5:f6:f0:45:5f:6a:c0:5c:85:
f5:99:63:58:92:68:64:a2:11:e8:14:41:a9:c0:c1:
20:fa:82:0e:42:f0:0f:c1:21:30:fa:b9:eb:4c:52:
2f:e2:b9:90:85:20:9c:78:32:b8:3a:ee:ef:c3:af:
8f:98:5f:a1:50:9e:df:fe:ef:34:9d:46:93:f2:c2:
5b:b9:da:27:7b:1c:78:f2:95:d5:9d:86:10:15:97:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:40:47:ED:E1:C9:F4:98:F8:04:BB:44:13:E9:D2:2B:18:C4:49:2B
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cc:d7:e3:b1:af:5d:c2:f0:ed:b6:c8:65:bf:2f:1a:e0:b5:
93:b0:b8:35:d0:0b:f8:4f:28:9c:29:ec:0b:71:81:93:fc:b3:
00:d6:d7:7f:7c:d6:60:2f:2c:92:9f:f1:84:fb:ce:0d:80:53:
4e:68:c0:e0:6b:71:9d:a4:08:05:24:9f:f7:87:47:28:a4:db:
0c:92:4b:63:7e:24:2f:21:f3:55:8b:b7:52:ed:e5:f6:20:9b:
7e:c7:ff:e3:f6:d2:3d:29:1e:0a:36:1e:5b:20:66:2f:14:ca:
76:6f:e8:17:4b:c4:ac:de:eb:c8:a8:12:89:dc:d6:4f:0a:fc:
2a:ea:23:24:85:d3:4e:01:84:09:91:0a:58:72:15:e1:3b:a8:
c3:a8:78:98:ba:58:0d:8e:8c:d3:7b:ce:8a:79:e3:f1:e4:4f:
a2:fc:cb:29:01:2f:3f:8d:2a:4f:55:99:d5:1d:2c:5f:84:ac:
1d:14:25:42:07:69:44:b6:54:79:2f:3f:ee:32:45:1e:16:5b:
0b:63:f3:88:74:99:a5:fe:e0:d8:a6:2b:6d:4a:42:eb:cb:b0:
25:10:51:93:9e:ac:ed:d2:8a:cc:b3:5d:a9:41:8c:4d:01:39:
b7:6b:c6:93:78:1f:ef:20:80:c7:b3:3d:46:bb:6b:e9:6b:87:
7b:74:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:56 2026 by rpki-client