Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: nl0d3cgZQxqugXZxHnwYyHKEm4f4wdSCShTZd57V/80=
Subject key identifier: 6C:61:16:AA:BA:10:83:26:8A:D6:5D:79:7E:A0:F7:CA:8F:8B:78:4C
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019DAF7CE7DD562BC450EE527E955CA744A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 18CF
Signing time: Tue 21 Apr 2026 10:01:31 +0000
Manifest this update: Tue 21 Apr 2026 10:01:31 +0000
Manifest next update: Wed 22 Apr 2026 10:01:31 +0000
Files and hashes: 1: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (hash: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8=)
2: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (hash: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY=)
3: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: TLjnESe0/g5XdAdJHUZXLhSB7pKgNp3U5zvW7ggqezI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:7c:e7:dd:56:2b:c4:50:ee:52:7e:95:5c:a7:44:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Apr 21 10:01:31 2026 GMT
Not After : Apr 22 10:01:31 2026 GMT
Subject: CN=6c6116aaba1083268ad65d797ea0f7ca8f8b784c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:e9:2a:e0:58:9a:f5:ec:46:94:41:b3:86:
e9:cf:9d:a0:a2:d8:04:88:dd:b3:3d:e4:b1:44:46:
78:f4:4c:8a:e3:b3:38:0b:2d:ef:99:f8:d4:09:02:
f0:0c:63:1d:22:58:5c:27:35:07:b9:18:53:68:b3:
88:be:5b:46:1d:ca:57:2a:c9:bd:28:87:96:25:70:
21:3f:af:58:b3:fa:b5:cf:4a:f8:21:b1:f7:4e:09:
da:91:52:37:22:32:ea:5e:10:74:4f:77:98:c6:91:
ad:90:7a:1a:99:a2:a5:b1:1b:66:c3:17:23:ad:55:
a5:01:fc:b4:64:28:ff:48:77:28:18:0b:00:07:9d:
8e:5c:6a:a4:e3:a0:89:70:e6:c5:7e:e4:45:13:ac:
23:51:73:2f:34:7c:83:e3:09:2f:29:be:43:0c:e2:
42:8e:fe:4a:e2:e7:35:a7:99:ea:c2:53:f6:f3:89:
a9:9d:26:a9:14:28:a0:e1:93:bf:84:26:77:82:97:
b2:ee:1b:df:8a:ad:21:b3:10:13:81:51:94:f7:52:
5b:7c:69:88:4a:11:67:1a:35:1e:34:e2:6b:34:b8:
95:34:30:15:8e:76:56:62:8d:85:7b:61:14:2b:e7:
30:bc:cf:3e:43:1e:6c:93:47:54:af:bc:e9:0a:d5:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:16:AA:BA:10:83:26:8A:D6:5D:79:7E:A0:F7:CA:8F:8B:78:4C
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:17:23:db:f3:b1:7f:8d:df:b5:38:2e:e5:ce:5f:ca:c8:6c:
56:15:0f:15:4b:c5:8a:ea:04:c0:b5:b1:39:38:e5:d7:6e:65:
22:00:bb:64:b3:a2:04:7f:af:ae:49:32:28:6d:8c:f8:6a:d7:
96:50:ea:64:8e:dc:6a:3c:ba:fe:ef:73:4e:5b:2c:44:4f:3b:
a5:d8:e3:52:9a:2a:c4:32:31:fc:d0:bb:6f:5d:eb:74:ee:35:
c0:e4:b0:96:05:01:88:3a:a6:d7:c2:14:84:48:2c:8f:04:3d:
90:b6:d2:9f:f6:d8:e2:4b:55:dc:35:ec:a7:db:28:41:e2:bc:
3a:8e:29:42:c5:fa:57:b1:57:5a:2a:67:3a:bf:28:a6:f5:b2:
97:79:64:ce:67:44:14:5d:2d:8d:3a:76:d4:e0:c6:a7:34:52:
4a:df:3e:0c:6b:00:13:e3:16:8a:cd:50:21:57:79:b1:71:7b:
62:d8:fa:cb:49:b9:8c:9d:db:53:3a:d7:ec:9a:c6:b9:c3:3a:
dc:22:d2:83:f4:4a:aa:42:77:6f:99:3e:40:74:81:a6:bc:3b:
17:4d:1e:37:4c:8b:4a:92:83:8f:56:10:a4:09:43:2f:5b:9a:
3b:a6:3d:b7:9b:a5:cf:dd:28:74:32:ee:0e:80:c6:58:74:bc:
fe:73:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:14:49 2026 by rpki-client