Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: 6lfiAVNwJywr5jHXPrjlkQrV+0sdT+vW14cqX+BOsHA=
Subject key identifier: 25:22:00:3F:0C:25:D8:4E:16:92:73:1B:0B:CF:E8:57:D5:B0:F3:21
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019D999997EBB53617997C5C0F4873A020DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: hBfOWNz8aB-uKsUJCSf2XACnmmc.roa (hash: 5Y5YLQETtQumGJBT9gG5Cwrp98Yqiy17fOUfKzajf7c=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: x3tOObZptoE1AmWdXUoFpr0NgIYQe9XFk8FU+zu56oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:97:eb:b5:36:17:99:7c:5c:0f:48:73:a0:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=2522003f0c25d84e1692731b0bcfe857d5b0f321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:40:f1:5b:ce:58:03:2a:d3:62:aa:76:56:
e1:ee:a6:c3:fc:ef:04:cf:58:6a:89:80:50:25:b8:
58:79:95:b6:fa:00:d2:0b:27:12:76:ea:5e:bf:9a:
ac:2f:ce:d2:62:27:27:96:eb:73:7b:b2:a0:64:e1:
8a:6e:76:3d:01:46:a6:96:3c:23:49:20:8b:a6:ca:
f7:5c:2a:7b:b6:ee:8b:90:f6:60:0c:45:46:72:41:
de:d6:78:75:00:8e:40:5d:36:49:67:73:7e:db:3d:
33:6f:e0:51:cd:7b:ba:1b:b9:66:ee:b0:72:d0:40:
36:62:3d:a1:73:3b:1b:f7:5b:a3:ac:20:70:a3:b5:
1a:69:b4:60:77:cd:5d:47:b6:05:76:e0:1d:81:76:
e8:2d:d7:99:b1:fd:87:d3:60:7c:2d:a8:dc:12:3b:
ca:09:98:2d:d6:1e:5e:40:7f:96:c8:68:58:14:07:
dc:e8:65:98:7b:61:15:97:f3:d7:d9:9e:d1:71:dd:
97:04:36:52:b7:43:86:65:79:de:c4:3b:85:06:24:
f0:44:f9:77:80:35:29:17:fb:73:b2:c4:6b:18:c0:
e3:b7:88:4b:d0:3f:dd:60:04:6b:c9:cf:de:e1:8b:
76:57:51:63:91:a1:3a:43:a3:cb:48:58:e0:c4:5b:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:00:3F:0C:25:D8:4E:16:92:73:1B:0B:CF:E8:57:D5:B0:F3:21
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:36:c9:2b:95:4a:b5:65:fc:82:e6:2c:40:1f:e4:47:31:f6:
b8:70:da:19:85:19:58:97:49:e8:0c:65:9c:10:30:b6:75:6a:
73:22:2a:ee:7d:2d:8f:fd:7b:0e:bb:2c:45:5a:ef:65:e4:f0:
7a:ac:3f:35:4e:25:5d:25:c3:e5:57:c8:42:1d:06:9e:45:b8:
e9:bb:6e:02:fc:66:fd:87:ed:f7:9d:84:85:0e:14:d2:b7:cf:
5d:b9:a3:f6:44:b2:ca:c2:9e:0c:fd:36:b9:b3:ff:0f:94:b9:
43:67:de:32:e4:b9:a8:74:29:ce:46:32:bb:67:e3:19:b9:da:
e4:03:ac:16:6b:40:45:81:a1:60:23:e3:1b:36:ad:b5:47:4b:
80:d6:88:ea:b8:1f:5c:df:e1:cf:13:34:97:42:fa:ba:fb:3c:
69:0f:a0:16:78:72:c7:cf:d1:e5:f0:d0:35:1d:84:81:4c:bf:
92:28:76:aa:5e:59:7f:1b:21:89:31:48:e0:3c:90:e3:d1:2e:
a9:55:00:7f:41:8e:2e:da:bb:2d:1c:db:a1:8f:cb:c9:93:79:
be:1f:59:00:b5:e6:d1:22:8b:61:59:c9:1d:2a:09:3d:45:ff:
7a:46:0f:9b:3c:2f:df:15:d5:d6:5d:cc:92:5e:39:70:99:bc:
b3:a4:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:03 2026 by rpki-client