Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: 9V67mPgJpo0FAAUe5+maXtynLLvtau49RzUxfAndwUw=
Subject key identifier: 79:06:81:A5:46:1A:B8:9D:3A:76:48:1C:48:D9:0D:6E:18:3F:A3:78
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 019DCE6319D9AE80178F16DC5D55353427C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 0392
Signing time: Mon 27 Apr 2026 10:01:34 +0000
Manifest this update: Mon 27 Apr 2026 10:01:34 +0000
Manifest next update: Tue 28 Apr 2026 10:01:34 +0000
Files and hashes: 1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: wQTT/shTk7pSNHqo027bNNl5y+Uj5qPdWJr05rTb8Qw=)
2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:19:d9:ae:80:17:8f:16:dc:5d:55:35:34:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Apr 27 10:01:34 2026 GMT
Not After : Apr 28 10:01:34 2026 GMT
Subject: CN=790681a5461ab89d3a76481c48d90d6e183fa378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:f6:c8:e8:ab:05:47:8f:4a:41:87:22:98:
97:92:ba:c5:dd:c4:cb:d8:9f:1b:37:65:92:1f:f8:
ca:d8:f0:cc:d6:9e:51:16:07:ca:0b:0f:61:1b:05:
74:49:77:ea:02:d1:dc:e7:30:54:41:04:0f:14:f4:
c2:e2:be:f9:65:7b:a2:0c:a5:75:a5:53:3b:40:2d:
b5:19:ef:55:6f:70:5d:cb:c2:d9:fb:0d:00:f3:fa:
e1:49:8c:60:d3:15:ec:7a:b4:44:5c:a8:53:bb:91:
66:6c:5b:7d:70:49:f1:7f:67:bb:12:19:5d:9d:eb:
8a:bf:19:69:1b:4d:d2:e8:eb:c0:f8:2d:98:01:93:
c8:e7:2a:81:38:c1:a9:48:27:66:fd:05:0f:80:fc:
1a:c7:07:8c:ca:8d:49:ec:7e:f5:18:bb:64:06:93:
54:d6:8a:b9:e7:fd:cb:61:69:e8:83:83:f8:ca:ca:
1d:02:2b:f3:f7:29:7c:fa:f5:ab:e2:bf:c0:c4:38:
c4:09:60:6e:eb:61:c4:c6:72:3c:df:db:e1:73:81:
89:4e:67:92:6a:78:30:e5:11:1f:e8:04:aa:8b:3e:
4c:2b:cc:52:3d:01:38:b9:e4:be:34:a4:83:58:a1:
47:32:c4:ad:8a:3a:4b:b2:8d:05:91:a1:64:b8:dd:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:06:81:A5:46:1A:B8:9D:3A:76:48:1C:48:D9:0D:6E:18:3F:A3:78
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8e:37:01:23:3a:21:93:a3:49:f5:5c:01:f1:62:f2:2d:68:
00:e4:07:1c:6c:db:16:22:cc:30:73:04:e7:3c:56:79:10:af:
7f:b0:c4:ef:10:f1:0b:59:cb:17:e2:06:53:76:ef:65:ce:a1:
e2:85:8c:63:16:63:56:40:6f:99:45:9d:09:b1:47:fe:ac:56:
02:42:02:6f:38:6d:d2:65:f9:47:11:5b:5f:73:84:93:3e:7e:
29:32:4c:e3:cf:ac:e2:81:63:ac:b4:f9:3a:c8:16:a3:78:56:
4e:bc:e9:f2:c1:16:91:47:76:be:98:c2:54:4f:5a:4a:bf:b7:
e2:f3:cd:37:6c:31:d9:76:50:b2:dc:5e:6a:f8:48:46:28:65:
4e:53:9c:fd:0f:5b:08:44:80:10:2d:51:4a:3b:4b:d4:5c:fe:
5f:36:69:16:27:fe:d1:05:98:26:04:bb:7b:53:40:29:2d:2e:
b0:5a:59:12:32:4e:0f:07:d5:9e:70:db:8c:88:34:49:4b:02:
a4:e5:df:bb:d7:d5:bf:34:c0:f3:25:da:48:03:73:e2:c1:82:
99:b3:ef:85:24:0c:3d:b4:da:95:d0:00:c1:db:23:d9:4d:0b:
a2:18:0b:19:02:0f:78:d6:79:a4:0f:71:8e:87:93:ff:c4:18:
e6:27:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:06 2026 by rpki-client