Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: keY6OlMg3iMxM7tnwshEIDP7Bq4Nb2bydQWPuqrCe8Y=
Subject key identifier: 34:79:B9:04:E3:15:95:56:0A:37:0F:60:E6:D8:F9:4F:43:6C:B8:B4
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 019DA83052D8633A0BC7FF0D0264A79CA1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 18CB
Signing time: Mon 20 Apr 2026 00:00:32 +0000
Manifest this update: Mon 20 Apr 2026 00:00:32 +0000
Manifest next update: Tue 21 Apr 2026 00:00:32 +0000
Files and hashes: 1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: FjrDHtakayLoeFc3p/wOHKa9bhEgiF+fdDh+YvjOfLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:52:d8:63:3a:0b:c7:ff:0d:02:64:a7:9c:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Apr 20 00:00:32 2026 GMT
Not After : Apr 21 00:00:32 2026 GMT
Subject: CN=3479b904e31595560a370f60e6d8f94f436cb8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:bb:4f:69:23:56:7d:1c:37:6f:4a:8a:1e:
d8:a0:66:c7:e0:62:54:74:45:1c:2c:16:f7:7e:e5:
d1:ea:c1:34:33:ce:98:7d:7e:65:42:d8:0d:33:08:
36:08:04:9d:67:2f:4b:68:45:66:b3:5f:94:c3:e6:
9c:44:68:d1:43:58:d8:57:35:5d:c8:43:7b:ff:86:
c3:16:3d:09:a8:05:98:f6:f0:9d:c2:ba:71:6d:ca:
74:1b:07:db:6d:3a:fb:72:5c:e6:01:13:71:51:e3:
5d:bf:a5:10:1f:0a:aa:a1:98:c4:b5:1e:ad:ed:a6:
be:3f:82:73:3f:cd:e2:d2:8c:4d:67:77:61:80:8d:
f6:c9:d2:1b:40:a5:d7:d5:23:72:a2:8b:2e:a1:e3:
f7:35:e8:3b:07:24:ab:f1:5d:8d:ab:89:38:f6:a8:
3a:94:24:ed:13:73:ef:c0:7d:02:1e:b5:b8:66:3c:
ae:85:63:65:0b:a3:65:4d:cb:3f:e7:d8:ef:3f:a9:
2e:74:9b:ee:1b:41:7f:bd:cb:19:a2:4c:8d:0b:8c:
c1:d1:e7:ed:1c:b4:91:99:c5:15:e6:f0:ca:85:44:
0c:32:dc:a7:80:4e:f9:ad:e4:99:97:7a:67:42:0b:
57:67:86:d0:fa:34:0e:5e:6b:04:24:a2:41:35:eb:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:79:B9:04:E3:15:95:56:0A:37:0F:60:E6:D8:F9:4F:43:6C:B8:B4
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7a:4a:28:be:2e:c0:50:f9:8d:dd:f5:ce:7a:10:1f:0a:2b:
5e:2e:cf:67:31:7b:cd:dc:28:3c:ac:7a:b8:30:c2:06:f9:0a:
03:9b:cc:02:93:22:82:fc:18:b6:33:f6:9d:61:26:40:f7:a4:
a5:4d:6e:e6:3d:ad:22:fa:52:ac:cc:62:c6:cb:01:c3:01:7c:
1d:e5:32:7b:42:7c:a3:38:62:8f:73:50:9a:85:59:a6:5e:2d:
f6:13:8f:39:7c:46:15:43:b2:5c:45:4f:3c:35:7d:9b:02:47:
49:86:ea:c7:54:d8:ab:d9:4a:de:f2:53:6c:40:c6:f5:be:e3:
4d:96:49:66:44:63:b6:cd:c4:d4:7b:42:2d:bd:ae:05:0b:92:
a5:b5:e3:1d:4e:e1:ac:b1:a0:2a:9b:b0:30:06:66:60:26:e7:
41:3d:85:41:17:6e:d2:4a:f2:84:29:4f:2d:9c:39:47:65:00:
e9:55:77:44:28:6a:8a:fb:8d:a9:cb:62:4f:9d:97:ef:27:89:
ed:08:d3:42:cb:42:4e:90:18:51:75:41:b2:c4:28:f1:ed:1c:
15:7c:b7:3f:c1:11:00:29:39:fd:47:c0:1d:b0:47:ef:9e:76:
43:59:33:0c:d5:24:cb:00:f1:09:ad:44:69:9c:88:71:be:28:
c2:a1:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:29:46 2026 by rpki-client