Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
File: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft (raw, json)
Hash identifier: fc38irJtekUO9YO1O7DdflurwrgjHj4uDyv7RU36KQQ=
Subject key identifier: 3D:50:C3:50:B3:2F:75:A0:0E:54:2D:5E:FF:55:D9:71:8E:AA:F7:59
Authority key identifier: FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
Certificate issuer: /CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Certificate serial: 019D9998CBA1E958AE3AC6B63BF69D8959E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
Manifest number: 72
Signing time: Fri 17 Apr 2026 04:00:20 +0000
Manifest this update: Fri 17 Apr 2026 04:00:20 +0000
Manifest next update: Sat 18 Apr 2026 04:00:20 +0000
Files and hashes: 1: _fyeIxDaafsDWMkS2A3N58AtJkU.roa (hash: H0SeTPFO1ojjf24io8wfPyjJHZQNS+KrdvYRVXD+DL4=)
2: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl (hash: MvEgLqi/uNy2UQAilYjllwg7QZyL2+EPkYNVXRG7Fjs=)
3: lmvQRZHoT7SrToyMEi92PYv4lr8.roa (hash: 54xRyjzzMSSYWcjiwt5uthywu9zHlEe922Syj7kTVbI=)
4: uCsQuS-4rVdPYPXfgacBtl1GxKU.roa (hash: mSrfH4b/LZzb55AU3CME/vQpiQIKZvFXbFgXnOdMHJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:cb:a1:e9:58:ae:3a:c6:b6:3b:f6:9d:89:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Validity
Not Before: Apr 17 04:00:20 2026 GMT
Not After : Apr 18 04:00:20 2026 GMT
Subject: CN=3d50c350b32f75a00e542d5eff55d9718eaaf759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:30:31:76:23:0e:39:be:a7:68:8f:78:62:
eb:e5:31:b7:49:fd:13:29:b2:e4:ae:c5:04:05:64:
71:38:15:81:b9:fe:90:d8:6e:a5:cc:9d:89:06:b8:
e0:67:9d:6d:e0:31:29:be:81:15:9e:6b:c2:4a:7b:
4a:87:79:b2:81:76:fe:cf:35:c5:fd:20:00:46:e3:
75:c6:a2:20:7c:9a:77:10:83:36:d8:55:2d:e9:da:
6f:eb:d5:26:21:25:f8:c4:29:a2:27:fb:fe:6c:21:
bd:49:d2:02:4a:4a:bd:00:4c:52:55:9e:ff:4d:f6:
96:49:1b:07:58:71:a3:98:2c:5d:7b:dc:77:bb:04:
3a:ff:72:97:75:b3:89:41:7f:2e:b2:1d:92:80:6f:
c5:64:a5:cb:56:3d:b8:c8:e9:6a:4d:62:e2:c6:32:
97:d3:4f:af:22:e6:a6:9f:73:67:c7:3e:90:49:e9:
7e:0a:2f:f5:f8:5e:51:1d:18:95:19:8c:80:c0:8e:
1e:bb:d9:17:b4:53:89:f7:9a:1b:fb:ad:03:c2:ee:
44:f3:11:8d:45:8c:c2:d4:9c:21:ee:e5:66:40:e4:
87:69:e0:b1:ba:b1:c1:87:37:f4:2b:65:be:b2:70:
36:7d:3d:43:d4:5e:c5:87:ad:51:3d:c6:57:18:a8:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:C3:50:B3:2F:75:A0:0E:54:2D:5E:FF:55:D9:71:8E:AA:F7:59
X509v3 Authority Key Identifier:
keyid:FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bd:92:b8:15:e5:ab:27:20:60:f4:f2:33:12:df:2e:ec:4d:
ef:cb:f9:9b:bf:95:a1:84:fe:9d:e7:ac:21:53:86:73:18:37:
aa:ae:93:50:45:23:99:33:bd:cc:19:66:3a:34:be:81:b9:2b:
d2:ed:e6:d7:84:31:61:a1:f4:55:06:5b:75:f9:fc:ed:3d:44:
dc:42:e1:97:10:5b:02:a8:c4:7a:26:d0:12:f7:72:9b:19:be:
02:ff:a8:19:ab:68:25:fe:e1:3e:14:be:df:db:b6:37:ae:5f:
bb:07:c0:05:01:93:6a:c0:c4:4e:5d:f1:df:93:ee:05:51:90:
fd:00:de:c5:b3:5d:00:16:ca:38:2d:b1:a4:44:21:21:f3:8b:
80:5c:4d:2d:99:6c:b9:01:de:7a:3a:76:5c:c3:a1:e7:80:2d:
78:86:83:b4:b6:ba:74:34:22:a6:e3:ec:2d:c1:b7:34:c6:01:
4b:a2:a1:e8:58:6d:52:bb:4d:36:e1:70:6b:fb:51:c0:13:74:
86:54:b2:d3:24:17:9d:9c:0c:6e:6f:85:47:b3:a5:3a:98:94:
8a:ce:42:a7:7f:93:ee:f9:40:6b:09:91:29:23:51:b2:6d:2c:
e8:24:30:cd:ae:e5:30:ed:2d:c9:04:e3:31:9e:7f:2e:54:57:
b9:e2:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:47 2026 by rpki-client