Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier: vIG0WzErzQO3dlFxvIdGz8+OYrQfhFI7YoqAtuXbtm0=
Subject key identifier: 4C:85:03:69:A6:76:2F:A7:EB:D8:F9:77:35:47:26:EC:FE:D8:D3:63
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 019DA378D4B65D87BD22F86303D92714C821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:38 +0000
Manifest this update: Sun 19 Apr 2026 02:01:38 +0000
Manifest next update: Mon 20 Apr 2026 02:01:38 +0000
Files and hashes: 1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: cYQ4IdxdO6VlGkIKvudcSRQKtG5QXSBuIP187yTIUGE=)
2: z0QAGClogihB3W-zAzL6xgls6ko.roa (hash: fuMklyfUot+dHjODiv8mp7OwICNiKJEa1iwTJOTMA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:d4:b6:5d:87:bd:22:f8:63:03:d9:27:14:c8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Apr 19 02:01:38 2026 GMT
Not After : Apr 20 02:01:38 2026 GMT
Subject: CN=4c850369a6762fa7ebd8f977354726ecfed8d363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:25:11:db:76:bc:7b:72:1a:68:6f:ef:f2:
69:76:9d:22:2f:a8:51:5c:c4:45:2d:52:c8:68:50:
14:b3:af:7a:d0:1e:2d:2c:4e:98:95:81:ca:da:53:
ea:6d:c7:f4:04:9f:ef:eb:cd:45:cc:e2:f0:f9:a0:
90:e9:d9:57:fd:57:54:dd:92:de:bd:d7:8c:87:de:
90:c1:d2:81:74:a0:5a:66:68:44:fc:64:16:c3:27:
f2:84:9c:37:4f:e3:81:51:82:b5:84:48:81:01:73:
f7:a1:77:9d:4b:a9:b5:36:be:ea:ae:25:2c:90:0f:
43:a9:a4:10:a9:35:47:28:91:69:1e:ba:9f:ea:95:
e3:90:b1:8d:61:92:4d:25:07:0f:d5:52:78:33:34:
54:2c:5f:98:e4:1c:b7:4d:89:17:9e:70:73:f5:37:
8e:06:90:de:a4:f0:8d:b1:60:f6:8a:90:4e:5f:38:
c2:4b:1a:32:d4:85:bf:85:fe:c8:f0:83:2e:17:dd:
2f:c0:09:30:e7:76:6a:e7:36:69:6f:fd:80:97:86:
ae:a0:b2:11:d9:04:5d:65:64:ff:9f:aa:42:e0:05:
f9:39:c0:05:16:e8:d3:c9:39:dd:fd:bf:3f:4e:fa:
c7:16:47:a4:1f:c2:50:20:f9:1f:6f:68:eb:1e:73:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:03:69:A6:76:2F:A7:EB:D8:F9:77:35:47:26:EC:FE:D8:D3:63
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:05:c7:3e:04:c3:b0:e9:c9:a3:2e:cd:bf:43:3b:a1:31:3e:
94:88:2e:05:78:56:66:7d:7b:af:68:0d:b6:cd:62:a9:99:00:
07:46:09:c2:5b:3a:10:c9:68:e7:ce:18:49:1d:67:e9:fa:fa:
21:b0:a0:85:76:b5:17:82:55:5a:4b:e7:61:44:ca:d7:8c:a8:
85:1b:2f:a0:2e:e9:05:2a:85:0f:cb:15:d4:00:88:96:2d:20:
5b:dc:d5:4b:c2:e5:7c:96:82:51:c6:09:9d:a7:ea:d1:bf:53:
42:1e:93:42:a0:21:3f:d3:3c:9b:54:14:b2:94:01:92:4e:33:
49:9c:56:0a:7c:00:9a:e5:a9:6b:0e:1f:a5:fa:47:36:c6:01:
73:a7:f7:f3:73:c0:7f:35:1e:b6:b0:6a:f3:69:b2:bf:aa:59:
e5:7f:46:a4:e3:f8:4a:27:c8:84:f0:24:40:de:f1:34:51:7f:
29:d0:34:0e:73:dd:64:3e:d0:28:6b:92:ad:33:fd:ed:37:76:
a5:c4:a3:70:52:85:cc:52:1b:5d:01:08:c0:00:d3:24:35:6d:
dc:9c:89:d3:90:d2:2e:4f:63:94:6f:2b:e3:aa:3b:39:65:72:
71:3c:9e:c1:a2:49:49:48:89:fb:24:c9:ca:26:6d:d4:81:b0:
6d:2c:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:51 2026 by rpki-client