Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: JmuxnGoRa9IV8Ru93QsDJhxSX4R65aLXkn3sJ71zWC4=
Subject key identifier: 35:A1:0A:C9:B9:D7:E4:68:A4:4D:93:E2:3D:8B:75:96:66:A5:16:69
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019DD1645C6FF74339D087653565EDD47254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 18E2
Signing time: Tue 28 Apr 2026 00:01:48 +0000
Manifest this update: Tue 28 Apr 2026 00:01:48 +0000
Manifest next update: Wed 29 Apr 2026 00:01:48 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: R17OCbMmMg5+hvYbnP7q/quMdGRjOifAhaMSUNbsjgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:64:5c:6f:f7:43:39:d0:87:65:35:65:ed:d4:72:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Apr 28 00:01:48 2026 GMT
Not After : Apr 29 00:01:48 2026 GMT
Subject: CN=35a10ac9b9d7e468a44d93e23d8b759666a51669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:6b:c5:26:f8:d7:32:41:03:e1:69:af:39:
80:87:d7:21:3a:86:a4:b9:47:25:7e:53:e9:fd:bf:
8a:93:8c:09:4f:c2:b1:f0:31:80:68:27:e9:4b:07:
dd:0c:65:26:f0:26:ce:10:b8:1c:00:68:f2:12:38:
47:5a:4d:2e:a2:28:01:28:1f:6c:bd:3c:6d:af:71:
bf:88:41:e4:d8:7d:ca:14:65:ef:98:8c:2d:b1:1a:
6c:c3:8a:1a:03:ef:30:ee:07:7c:7f:ce:22:44:e8:
56:0c:0f:2b:7a:25:f8:9e:04:25:2b:79:d5:b0:3b:
2c:d2:fd:0b:50:08:3c:0c:d9:ed:1f:63:65:d4:8f:
c3:39:f0:ba:46:0b:3a:99:ae:69:41:7e:20:4f:ad:
05:df:f1:fd:3f:3b:ed:c7:79:f5:a6:5c:9a:5a:50:
54:6f:b4:f7:ab:66:78:34:51:89:4e:1f:1e:16:26:
ff:9e:e2:2a:9f:da:f2:79:4b:d2:6b:3d:93:9b:bb:
9b:e5:6e:bc:56:0a:0d:37:bc:e9:a8:c2:9c:f8:a0:
26:f2:ef:bc:0d:a0:d0:c9:79:df:51:65:2c:5c:53:
52:ef:a5:64:c4:b2:a3:aa:63:ac:fe:26:5e:59:ad:
e6:a9:35:ef:69:2a:cc:9a:f9:e0:2c:db:d2:28:14:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:0A:C9:B9:D7:E4:68:A4:4D:93:E2:3D:8B:75:96:66:A5:16:69
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:20:55:a4:61:28:cd:97:50:0d:b3:e8:fe:4e:d3:f6:f7:7a:
89:ef:32:de:b9:13:63:03:4b:64:9a:0f:1f:a9:fe:4b:de:20:
74:53:41:71:38:9e:ac:25:a9:f7:7c:55:d8:6e:ae:17:2c:92:
c4:db:06:9c:9d:c7:32:bb:b5:67:6f:d9:29:f0:c4:bd:8c:9b:
1d:f1:2f:82:a0:68:17:4d:10:57:0f:ee:2d:a1:29:59:0a:b4:
4c:82:60:13:c5:9c:dc:5e:05:70:49:a5:1b:3b:6d:91:60:34:
f4:d3:02:0a:ac:b1:c0:cf:dc:f2:c5:07:cf:be:0a:fe:68:18:
5d:52:54:1f:5b:dc:62:a9:f2:1f:f0:a8:49:92:4d:c6:13:79:
67:4f:4c:d6:ec:41:85:62:cd:7f:f2:82:c4:af:f0:12:ee:be:
34:78:01:e5:39:04:17:8b:8c:4c:88:20:43:3a:0b:a2:7f:48:
bc:d3:70:72:b3:f0:b7:00:7b:f8:ba:5c:bd:0e:ab:29:6c:65:
68:20:4d:66:78:27:49:0d:fc:6f:08:f9:38:d3:00:aa:ce:2b:
67:5f:85:65:06:a8:52:b7:dd:b5:ab:ac:48:41:5e:25:b8:2e:
e7:89:22:d8:f6:9b:4c:05:9b:ce:94:61:eb:f2:e4:68:e2:32:
fd:28:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 02:27:33 2026 by rpki-client