Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier: DnvJYmUSMIi0kQKZANFbpwQUVfHWWnMOcUDxSVwWC1M=
Subject key identifier: 2F:3E:7A:E6:CE:37:F1:69:76:7D:56:8F:D6:B2:FE:F2:A6:FF:71:67
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial: 019DCF3DFCC4DD3992EC9D35F0873A83DBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number: 03CB
Signing time: Mon 27 Apr 2026 14:00:39 +0000
Manifest this update: Mon 27 Apr 2026 14:00:39 +0000
Manifest next update: Tue 28 Apr 2026 14:00:39 +0000
Files and hashes: 1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: veJSnC0DQLr9Yu4bHljibhwIaoEMfR8+pyTIo+t8IFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:fc:c4:dd:39:92:ec:9d:35:f0:87:3a:83:db:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Validity
Not Before: Apr 27 14:00:39 2026 GMT
Not After : Apr 28 14:00:39 2026 GMT
Subject: CN=2f3e7ae6ce37f169767d568fd6b2fef2a6ff7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:26:63:d4:bc:bd:b5:77:d3:94:f6:5a:a0:
6f:b1:03:11:ca:76:89:97:2c:15:54:e1:7e:a9:6e:
4f:a6:5e:26:9e:d3:c8:5a:58:73:67:64:6a:24:74:
e5:12:c4:57:3d:6d:ac:49:de:94:0e:84:59:dd:86:
e5:65:ee:cd:38:3c:67:b1:06:56:c1:a2:71:39:0a:
82:11:88:a0:4c:f3:fb:4f:8e:2f:af:5e:48:4b:b1:
7e:b6:91:c8:39:91:e2:54:73:08:d7:0b:3c:c2:b6:
bf:84:ca:cd:f5:c3:89:12:22:bd:77:56:7c:c2:06:
b6:22:31:47:2a:53:6d:e6:fe:aa:e3:1e:e5:82:ab:
93:53:ad:0b:65:be:50:7a:8c:f9:fd:b5:15:aa:52:
ab:f2:0c:63:df:99:53:7b:60:52:07:5a:d5:58:ce:
49:fe:38:e0:be:f9:e1:d8:a9:8b:72:5d:71:43:06:
32:a2:9f:11:4a:15:fd:f4:3a:ff:33:bd:4f:07:4f:
f3:cf:a8:59:5e:43:9c:70:f1:a8:da:6d:39:a8:07:
8a:63:c7:85:a6:65:98:84:27:06:fe:a1:3c:63:4e:
b3:9b:22:47:8c:61:36:96:ab:0a:60:63:58:d1:5d:
43:b4:e1:bb:73:b3:99:92:ef:f9:0a:62:46:cf:29:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:7A:E6:CE:37:F1:69:76:7D:56:8F:D6:B2:FE:F2:A6:FF:71:67
X509v3 Authority Key Identifier:
keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:23:ac:5c:05:b5:ca:85:b9:b6:72:de:99:7f:38:37:9b:40:
19:5c:56:23:b0:f9:6f:72:a0:3c:54:93:f4:05:5b:49:70:29:
94:a6:9f:e0:95:27:89:20:5a:bc:93:26:59:2c:11:2c:73:36:
41:c4:02:06:26:9f:49:68:44:84:1d:90:f5:2d:47:f2:a8:aa:
9d:d8:3e:24:80:b3:46:db:d6:7d:a2:33:a5:d8:1b:04:0a:ef:
8f:47:ba:5b:1f:bb:a0:a9:41:5a:d1:5c:2a:e6:38:a5:9b:6f:
a7:fb:12:87:6e:91:b9:c1:61:35:e7:d3:b1:d6:0b:cc:b3:82:
3f:8c:36:f6:e3:68:09:b9:a4:70:d3:a6:7f:4d:96:62:da:e9:
ce:e3:a9:ab:65:d3:2c:58:3e:11:7b:cc:c4:c2:f3:c0:d2:c2:
63:bb:0a:e1:97:ec:d3:10:38:ce:66:44:7f:3e:2b:da:12:d0:
63:1a:90:3d:af:1c:05:59:bc:57:f5:8d:c7:1f:54:5c:98:3c:
fd:21:9f:47:82:01:e6:4f:e4:92:a6:01:9c:d9:60:4e:3c:29:
17:78:bd:20:32:5c:ef:bc:7b:b7:82:ba:16:d8:f9:aa:7f:b0:
c7:54:ea:77:43:92:7e:1f:8c:12:94:2f:14:0f:57:b6:7e:a8:
58:d4:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:17 2026 by rpki-client