Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File: vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier: wlEzniMm8A/fC5J4GxipaH3CbQIK+MPKlpxbTsr5svY=
Subject key identifier: 1F:35:DC:B1:D1:C2:D5:A5:33:D7:97:3D:68:62:99:EE:28:59:2C:CF
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 019DA8D5272BF597440FB7BB1CBAE4CE3044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number: 18CC
Signing time: Mon 20 Apr 2026 03:00:34 +0000
Manifest this update: Mon 20 Apr 2026 03:00:34 +0000
Manifest next update: Tue 21 Apr 2026 03:00:34 +0000
Files and hashes: 1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: 5GyhqFP4OJAtKB0pXy6u3W+gSslAWm1HSQUuSGX8KZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:d5:27:2b:f5:97:44:0f:b7:bb:1c:ba:e4:ce:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Apr 20 03:00:34 2026 GMT
Not After : Apr 21 03:00:34 2026 GMT
Subject: CN=1f35dcb1d1c2d5a533d7973d686299ee28592ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:33:7b:7b:9f:63:88:2a:de:f0:cb:52:10:
d8:b5:33:cc:82:3b:75:df:72:0d:3d:cd:81:03:2b:
ff:6e:f9:af:a8:cd:68:14:ff:16:42:14:82:23:72:
6d:90:6a:50:96:b8:6f:39:42:1c:74:93:f4:58:18:
7f:b3:a6:d5:36:a1:7f:67:f6:12:14:fb:5e:67:59:
9e:ee:6d:30:91:c9:b1:c9:d4:7b:2c:da:ae:b7:ee:
20:6e:d2:2d:d3:ff:e2:e3:5e:8b:63:82:00:91:05:
7a:f2:72:af:4f:8c:5e:cd:ac:84:78:18:87:fe:5e:
a2:5f:20:35:d6:b8:6b:56:6d:87:b9:4d:f5:0b:dc:
fb:5a:d0:7e:bd:0e:92:64:1a:ef:95:08:fc:e2:03:
07:c4:c1:6e:5d:c3:99:b6:63:04:1e:b5:0e:32:e2:
cf:be:62:00:a3:05:34:5c:b9:21:8c:93:da:60:3f:
f3:3f:75:5c:7c:8c:b7:7b:1b:ab:c9:98:a9:27:6b:
7f:eb:98:e2:d1:ac:a0:ca:c9:26:61:48:32:bf:d7:
16:29:e2:04:90:89:a9:0c:df:c7:8c:c6:1e:35:dd:
c6:fa:bd:98:5b:be:00:25:75:b9:97:3b:97:cf:07:
8d:90:7c:9c:a7:c3:54:83:6a:1f:3f:9c:53:30:88:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:DC:B1:D1:C2:D5:A5:33:D7:97:3D:68:62:99:EE:28:59:2C:CF
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f9:ce:fd:8a:13:74:a9:10:59:bc:1b:4a:e4:ee:aa:42:be:
48:f2:ba:49:9d:9f:c6:ea:4f:d5:ef:22:6b:85:a3:79:09:a8:
ef:80:62:48:f2:34:20:c2:90:78:4e:33:52:19:39:22:f9:e4:
47:6e:74:d4:15:20:a3:18:e9:cf:4f:48:2e:40:73:81:b2:76:
78:83:86:d9:11:8f:98:5b:82:79:2b:63:2f:4d:8b:13:20:d7:
a9:18:b8:b0:b2:1a:8a:d5:77:aa:ff:49:72:fa:85:18:3c:b7:
a2:a8:9d:ce:88:31:e7:ad:39:3e:52:78:9e:03:d9:ed:37:bb:
7d:44:6a:da:74:c0:dd:c4:5e:02:2f:1e:e2:e5:da:c3:17:c8:
f2:d0:fb:c5:0d:4d:32:37:80:43:cc:1c:de:58:e4:ca:1e:2e:
50:94:b6:91:c8:e1:0b:4b:1e:e3:02:cd:d8:9c:a8:06:1a:91:
e1:84:3d:1f:97:ca:b6:3c:3f:b0:82:69:41:6a:dd:54:15:b9:
fc:8d:d9:31:89:ad:47:9b:d0:09:53:eb:5f:ed:ec:71:b7:c5:
90:e6:08:8a:0f:3d:8a:a9:9c:4d:4f:ae:50:69:ca:33:c9:11:
7f:0d:67:4f:35:95:fb:11:10:18:17:1f:6e:6b:e1:00:42:04:
2b:c8:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:34:28 2026 by rpki-client