Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: 7t2r/ImGjf6XMCYdOskIAPeVzg17mJGPnPHpeG3GQQg=
Subject key identifier: 1D:5A:D6:F3:46:E5:31:42:9D:43:AD:58:56:87:A5:3A:77:1E:14:26
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019DED4972C6920889ED438D6CC791B73CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 18EF
Signing time: Sun 03 May 2026 10:01:46 +0000
Manifest this update: Sun 03 May 2026 10:01:46 +0000
Manifest next update: Mon 04 May 2026 10:01:46 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: 9yUaeGDZJc9TrQQdP36TJTYjZry0/MgFirmOc1e6mmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:49:72:c6:92:08:89:ed:43:8d:6c:c7:91:b7:3c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: May 3 10:01:46 2026 GMT
Not After : May 4 10:01:46 2026 GMT
Subject: CN=1d5ad6f346e531429d43ad585687a53a771e1426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:08:26:56:33:3f:ba:f4:6f:d5:a7:fb:32:
21:27:3b:f2:e8:a0:72:0a:ff:2c:96:d9:e6:07:03:
6d:91:3d:80:ec:2a:39:2e:10:62:d9:08:68:1e:9d:
74:77:47:9c:00:70:ee:54:bb:1e:33:cf:c8:31:1c:
25:38:4d:4c:a1:a5:76:79:8c:0c:1b:ad:9d:f0:c2:
e0:4f:4a:cd:47:6f:e4:09:47:60:fd:4c:9c:ae:72:
0a:0e:3b:1f:ea:0a:73:bf:9b:4a:f0:b2:61:0d:74:
26:94:8e:d5:1f:94:6b:b4:33:de:d6:e3:09:b8:5a:
78:f7:8d:7b:20:44:cc:89:66:64:9c:d1:31:86:04:
19:da:f3:24:7a:7d:fe:cb:77:bd:62:a7:45:f2:f7:
1b:7f:c3:72:36:52:5f:bc:88:4b:fe:e2:7b:d3:00:
eb:1b:e8:76:13:88:4b:d2:f4:6a:ca:42:c1:17:33:
34:31:d8:09:a7:f0:36:8b:70:4c:90:ba:37:b2:de:
a5:c7:bb:81:90:47:eb:70:ea:f9:0f:36:97:ab:14:
67:5f:01:1a:a3:83:21:89:b3:46:d1:1b:d4:d5:aa:
b6:6a:5e:ee:b5:a0:f2:e9:ea:ae:dd:8e:8e:50:ff:
c1:4d:58:95:47:ed:b6:ac:d0:55:88:b0:4b:6b:e9:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5A:D6:F3:46:E5:31:42:9D:43:AD:58:56:87:A5:3A:77:1E:14:26
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:54:b0:39:83:b8:be:06:48:c5:bb:ba:cc:d7:cf:e9:c3:a4:
b5:21:d3:b6:71:78:5f:ce:1d:29:a7:fe:ed:69:ed:f9:84:2a:
00:cb:07:45:84:99:49:ef:8a:95:00:2d:18:7f:23:88:6e:f0:
21:88:a3:c3:7a:7f:02:c3:1a:be:aa:b5:7e:f2:ce:f7:d5:06:
80:26:12:28:ca:ea:74:76:f4:fb:79:56:4d:e7:35:bc:f7:e8:
2a:26:8c:9a:a2:a4:c1:59:ad:93:9d:af:d2:8a:59:92:22:df:
e5:c7:fd:9c:2f:dd:05:8b:f2:cb:56:b6:e8:48:91:70:df:64:
80:5b:7a:ea:25:80:d0:e7:11:18:14:56:70:bb:0d:71:ab:cc:
d9:1c:71:42:10:bc:26:57:ee:78:0b:14:d1:8a:76:58:5e:0f:
77:11:ef:d9:94:dd:89:8d:c3:02:d6:8c:a5:1d:76:7e:79:f8:
3b:32:e8:08:64:76:85:44:d8:c2:6c:9a:eb:4c:fd:af:f7:5d:
11:03:15:36:48:39:8a:c7:dc:7d:0e:20:83:6e:7c:63:22:d9:
f8:d6:ec:90:ba:2d:90:bf:e2:47:af:92:7a:6e:b6:b2:18:91:
e4:ac:b9:18:d1:8e:6e:80:02:e5:e5:49:a9:f0:2a:f1:7c:d1:
ca:64:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:07:49 2026 by rpki-client