Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier: ljNZs+YzijYfuyhizHrErjIBvMZZsw9kEiIAxq7wbtU=
Subject key identifier: 02:52:AA:FD:16:A4:FC:86:C9:34:90:55:8D:DE:94:DE:47:DD:5C:24
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 019E31BC40BD325A4CD84B3D28C0989F6A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number: 18A1
Signing time: Sat 16 May 2026 17:01:21 +0000
Manifest this update: Sat 16 May 2026 17:01:21 +0000
Manifest next update: Sun 17 May 2026 17:01:21 +0000
Files and hashes: 1: 5DvFWn8hN7piazN1T8HIXkNFc8w.roa (hash: XsihtnWpKZygkLBke+BN9JF5neJLF/Mp9MsWC2DKCb8=)
2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: GvYeFTtJDKczKcD1EixM+d7dwABAMMCrCjdGL1zhI1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:40:bd:32:5a:4c:d8:4b:3d:28:c0:98:9f:6a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: May 16 17:01:21 2026 GMT
Not After : May 17 17:01:21 2026 GMT
Subject: CN=0252aafd16a4fc86c93490558dde94de47dd5c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:7b:00:55:3d:75:86:1e:b2:ad:40:04:5c:
05:f8:3f:1b:28:57:dc:12:65:7d:e9:3b:0b:a0:de:
97:38:0e:84:ad:ee:7c:5a:1c:0f:3b:d1:91:1f:7e:
4a:1c:0b:bb:3c:07:9e:cc:9b:c4:b0:09:4c:ca:04:
f9:ed:f0:a1:c5:fb:6a:f0:61:48:b0:ce:7c:b6:9b:
be:0d:fc:26:14:1b:65:e2:f6:01:ca:7e:44:54:29:
c7:3b:7d:cd:8e:a7:d1:f2:9c:bb:94:79:55:08:9c:
12:1e:53:04:35:ad:b1:d1:4f:f2:ac:38:1a:01:b8:
e1:a2:aa:b7:9b:20:de:a3:02:47:c8:34:80:2a:bc:
da:18:dc:e0:64:37:8e:17:14:11:ab:bc:b0:9d:21:
d2:5f:f7:71:73:35:d4:3a:75:29:66:9a:17:65:9d:
ba:01:c7:73:d2:86:8a:48:03:2d:72:55:d1:e5:05:
2f:01:16:31:22:1f:f1:e9:9a:e6:97:46:e1:6e:08:
64:0d:f9:60:50:d5:03:36:1d:95:5a:e1:82:c7:fa:
0b:b7:c0:9d:e3:97:13:82:61:da:fb:57:35:30:51:
02:f9:4f:22:e9:ae:b9:05:78:9c:38:53:db:c8:12:
af:90:ec:8d:e3:1b:0e:bd:11:83:5f:e2:b7:ce:f6:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:52:AA:FD:16:A4:FC:86:C9:34:90:55:8D:DE:94:DE:47:DD:5C:24
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f0:a8:4e:a5:23:a9:16:79:df:32:c1:b3:30:51:d2:41:db:
48:41:be:0a:ae:1b:89:a8:8f:21:00:03:04:a0:b0:7d:fe:e6:
1d:a3:a3:e8:0f:b2:3a:38:27:1a:d5:ce:0a:a0:82:99:20:ff:
71:53:27:a5:09:24:67:fb:a5:6f:97:c4:4f:72:e3:3e:db:b6:
05:90:1c:eb:b1:e3:29:1f:b7:c9:88:9b:14:ab:ac:8f:a1:0b:
65:66:90:4a:88:b8:d1:04:0b:a7:cf:a3:95:20:75:03:1c:65:
0c:41:03:8a:5b:05:4a:07:1c:50:ce:36:19:37:1b:b2:16:c2:
74:ba:8d:e7:ab:03:1f:a1:b6:95:bb:90:23:fd:4f:e1:c1:ff:
8d:46:11:44:b7:55:cb:b3:8d:fb:e1:21:30:13:8f:20:70:fb:
ad:3e:a3:f2:29:63:46:78:ca:e4:1a:b9:15:7f:e0:84:3e:89:
aa:c0:07:2d:7c:20:8d:d1:0d:7c:06:95:4b:e8:b4:86:61:38:
27:8f:94:4e:3b:85:98:8e:3e:0f:2d:f1:28:3d:2a:d0:84:b4:
60:9c:d1:c0:63:33:da:54:58:49:a7:61:28:ff:63:b2:ee:cd:
c4:7e:70:03:f7:b3:23:c1:6c:cd:f9:7b:00:a7:83:fc:b8:50:
b9:77:84:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xvEC9MlpM2Es9KMCYn2qfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjhjMWRhZDkxYTQxMDFjNzE1M2MwZjZkMDE1NjIzOGFk
NzQ2YmIwHhcNMjYwNTE2MTcwMTIxWhcNMjYwNTE3MTcwMTIxWjAzMTEwLwYDVQQD
EygwMjUyYWFmZDE2YTRmYzg2YzkzNDkwNTU4ZGRlOTRkZTQ3ZGQ1YzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQp7AFU9dYYesq1ABFwF+D8bKFfc
EmV96TsLoN6XOA6Ere58WhwPO9GRH35KHAu7PAeezJvEsAlMygT57fChxftq8GFI
sM58tpu+DfwmFBtl4vYByn5EVCnHO33NjqfR8py7lHlVCJwSHlMENa2x0U/yrDga
Abjhoqq3myDeowJHyDSAKrzaGNzgZDeOFxQRq7ywnSHSX/dxczXUOnUpZpoXZZ26
Acdz0oaKSAMtclXR5QUvARYxIh/x6Zrml0bhbghkDflgUNUDNh2VWuGCx/oLt8Cd
45cTgmHa+1c1MFEC+U8i6a65BXicOFPbyBKvkOyN4xsOvRGDX+K3zvbUfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJSqv0WpPyGyTSQVY3elN5H3VwkMB8GA1UdIwQY
MBaAFL1owdrZGkEBxxU8D20BViOK10a7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2Qt
MTM2OWNlZjdhNGNhLzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2QtMTM2OWNlZjdhNGNh
LzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/CoTqUj
qRZ53zLBszBR0kHbSEG+Cq4biaiPIQADBKCwff7mHaOj6A+yOjgnGtXOCqCCmSD/
cVMnpQkkZ/ulb5fET3LjPtu2BZAc67HjKR+3yYibFKusj6ELZWaQSoi40QQLp8+j
lSB1AxxlDEEDilsFSgccUM42GTcbshbCdLqN56sDH6G2lbuQI/1P4cH/jUYRRLdV
y7ON++EhMBOPIHD7rT6j8iljRnjK5Bq5FX/ghD6JqsAHLXwgjdENfAaVS+i0hmE4
J4+UTjuFmI4+Dy3xKD0q0IS0YJzRwGMz2lRYSadhKP9jsu7NxH5wA/ezI8Fszfl7
AKeD/LhQuXeETQ==
-----END CERTIFICATE-----
Generated at Sat May 16 21:12:53 2026 by rpki-client