Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: xpVB+q8ZDDzsRoDXHw1tYWowhmtt4juT++ME6bCrBLk=
Subject key identifier: 36:F3:BB:BF:99:C2:6E:39:92:A2:0B:E7:55:0C:27:FB:28:26:B3:8F
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 019DA30A5249C35044C09CA9FC6E54356E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 00:00:55 +0000
Manifest this update: Sun 19 Apr 2026 00:00:55 +0000
Manifest next update: Mon 20 Apr 2026 00:00:55 +0000
Files and hashes: 1: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: FiMNh2AISOcC7lYB5W55vcxaMYl3MiaduTLMHv7+8gQ=)
2: Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa (hash: nLLJAITVfYEFMYRyN3x5RMOELDek19fGEta6GIsZ1vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:52:49:c3:50:44:c0:9c:a9:fc:6e:54:35:6e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Apr 19 00:00:55 2026 GMT
Not After : Apr 20 00:00:55 2026 GMT
Subject: CN=36f3bbbf99c26e3992a20be7550c27fb2826b38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:6a:e0:d6:c9:a1:d1:c0:23:4d:2d:02:f7:
37:b0:2f:88:ec:40:a0:7c:ba:d8:d0:6f:a4:b2:11:
18:22:75:d9:f9:92:17:cf:8c:dc:b2:b5:e6:0f:ed:
6f:fe:b0:ab:5c:26:f9:5e:75:30:81:d4:54:fd:39:
59:db:05:01:fa:0f:35:15:26:b2:9d:cb:4f:e9:07:
35:49:86:62:68:df:52:69:a3:98:bf:cb:27:4a:a5:
11:5b:9f:62:09:92:69:bd:8f:84:30:11:2e:6c:43:
65:96:e4:00:18:1b:90:63:eb:76:49:45:26:dd:a5:
8f:7c:3d:12:a4:21:95:5f:4f:e3:39:cc:7e:1f:92:
9b:09:0c:9c:b9:75:8c:b0:65:b6:74:d6:b6:b9:d1:
b8:a4:af:d6:76:5b:a2:95:54:97:74:b0:46:9a:93:
4f:c7:6e:71:18:d9:ff:75:71:7f:c9:24:8b:d1:00:
31:4b:fc:fa:dc:ee:f9:66:43:01:50:9b:43:b8:ef:
0e:2d:b7:cf:ae:20:78:5f:a7:52:be:2d:78:65:8a:
b7:1a:90:69:ef:14:2f:6c:3d:95:57:c6:90:8f:33:
50:b1:bf:66:02:59:6c:8d:f6:a8:70:c7:3f:5d:ae:
b3:02:f8:f9:07:68:c6:fa:d9:75:be:c8:8d:8e:3f:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F3:BB:BF:99:C2:6E:39:92:A2:0B:E7:55:0C:27:FB:28:26:B3:8F
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:2a:af:21:f8:0a:b6:c6:a6:1c:20:87:39:21:36:84:e5:e3:
78:c9:b9:9d:6c:d4:64:76:dd:0b:55:bb:73:d7:b3:bc:91:54:
b7:57:0b:05:88:55:e3:e3:ee:07:3b:d3:fe:63:f0:f3:40:fe:
cf:26:cd:61:6f:c8:a5:70:0f:76:9d:44:4b:b0:36:9b:b3:3e:
90:6b:d3:92:6a:23:35:50:14:8e:a1:14:84:fe:68:34:58:ec:
87:8f:90:98:74:be:91:dc:ac:ac:65:7c:44:80:9f:3c:f2:45:
4d:d6:a5:3b:e3:3a:23:8d:76:be:44:71:3a:51:fa:63:1e:00:
8e:a5:2f:d2:c3:25:ca:01:d1:8f:77:5a:4a:1f:8d:84:ad:33:
56:46:eb:21:b7:e9:e8:ec:d7:2b:08:b4:ef:d0:b0:e7:40:73:
6e:a7:12:14:c4:b9:fa:6e:d6:12:90:64:03:c1:62:df:28:6e:
01:40:61:17:10:17:ad:fc:ba:22:77:f9:03:99:1f:3c:cf:bd:
ea:f0:8e:4b:71:c5:90:36:86:f1:b6:68:3b:3e:e9:1b:7b:2e:
f1:10:10:11:f0:2c:c1:3f:13:1e:45:fb:cc:60:41:e1:96:39:
ec:33:1c:57:b9:f4:de:43:31:e6:01:b0:33:e8:28:69:49:11:
56:14:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:03:01 2026 by rpki-client