Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: 3F/iKu1geA+/06M5GAoYh8eYe6y8hXnRFl/Fjp7uZpA=
Subject key identifier: 45:A5:5D:65:8C:1D:EA:4E:2A:4A:3B:58:E1:D6:F6:8C:48:84:28:67
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019DB21022BA90F70EBFED3FEDA16831F303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 18D1
Signing time: Tue 21 Apr 2026 22:01:34 +0000
Manifest this update: Tue 21 Apr 2026 22:01:34 +0000
Manifest next update: Wed 22 Apr 2026 22:01:34 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: v8LFOHvCz03PYAwXKkgZsvgdA9jzG2fZ+JIExL2tBwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:10:22:ba:90:f7:0e:bf:ed:3f:ed:a1:68:31:f3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Apr 21 22:01:34 2026 GMT
Not After : Apr 22 22:01:34 2026 GMT
Subject: CN=45a55d658c1dea4e2a4a3b58e1d6f68c48842867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:2b:a7:99:9d:d6:69:95:f7:43:05:df:4f:
de:b7:f3:2f:bf:bd:f8:e6:45:89:b4:1d:aa:b7:25:
28:a5:21:c1:12:97:5f:33:06:a6:86:33:6b:56:76:
cd:30:71:18:92:c5:94:b7:c0:c2:46:76:3a:47:03:
fb:0b:9e:73:23:0e:97:af:89:5e:33:de:fd:e3:b0:
84:cb:a1:36:c3:5a:57:89:d8:43:b8:a0:50:84:74:
34:cb:9a:dc:3e:0a:d1:bf:cb:3d:2a:22:42:b9:03:
7e:81:fa:ce:8c:f2:eb:a4:0f:fd:7f:56:74:e5:13:
44:35:40:09:46:fc:d2:86:f2:49:5d:cf:3b:f5:d3:
66:8e:29:51:b3:91:6b:83:e9:81:0e:ea:96:b9:3a:
6e:dd:e8:12:06:d6:73:77:58:96:bd:09:29:0e:4e:
cf:1c:ec:8f:87:b3:92:ab:29:00:07:eb:1f:55:dc:
47:43:42:e1:e9:31:4c:6e:ec:cf:de:25:f3:6f:94:
5a:92:60:cc:4a:7d:e3:6e:8c:a6:c3:45:07:3a:42:
db:7b:7f:f3:6f:47:32:90:b2:32:25:0f:ef:2c:7f:
5a:0c:60:a3:e7:3f:78:6a:f6:3b:55:60:96:23:bc:
52:be:d2:bc:02:b2:0c:38:da:0c:b7:77:be:b1:48:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A5:5D:65:8C:1D:EA:4E:2A:4A:3B:58:E1:D6:F6:8C:48:84:28:67
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:29:32:51:41:8c:62:f4:39:3e:03:d7:a7:71:93:24:41:39:
21:0b:d6:f0:51:21:37:44:a7:ed:03:4a:5d:b8:22:c8:2b:83:
86:b6:9c:c6:2e:e4:4d:d2:0c:63:d4:7a:7d:dd:a4:0b:9f:eb:
6a:68:fd:74:f9:6e:b6:b7:f4:0b:55:2c:e0:07:1f:a1:53:d2:
81:21:92:5f:4f:c7:f3:0d:70:40:83:04:e7:eb:50:a3:d4:31:
de:2d:9d:33:c7:94:a7:26:11:d8:7e:ab:42:a9:ac:18:1e:ed:
07:31:77:8a:28:86:82:63:63:06:46:5e:a4:31:a4:49:6d:bb:
38:34:1a:4b:8e:14:bf:f6:62:7b:b2:c8:65:a2:37:43:af:86:
c5:3f:09:81:0d:4c:3c:15:d9:d3:6b:e2:c7:a2:36:33:d4:da:
e8:09:ff:c3:71:df:e5:10:8b:14:1c:0b:a3:5e:1c:21:f3:67:
1d:42:78:e4:d9:bb:c6:7e:48:5a:0c:83:25:e6:05:61:d6:37:
dc:a8:72:1b:f7:51:46:b5:12:8b:90:04:b0:5e:a6:58:8a:5f:
92:89:e4:d6:56:35:9d:59:58:09:bb:1f:d6:83:0d:ff:27:cd:
6e:d5:ac:92:a4:08:91:90:54:0a:02:0f:30:5a:dc:f8:a8:2c:
12:57:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:23 2026 by rpki-client