Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: fs8i9tUEfUANPgkg+SNk1JeMRPBpN5LpwYEyP4y70vI=
Subject key identifier: 44:51:E0:E9:DA:A1:2A:C1:23:AB:74:89:B9:AD:E7:DF:4A:DA:B0:D2
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 019DA7C30538A68754B95AED670E4B656133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 18D1
Signing time: Sun 19 Apr 2026 22:01:09 +0000
Manifest this update: Sun 19 Apr 2026 22:01:09 +0000
Manifest next update: Mon 20 Apr 2026 22:01:09 +0000
Files and hashes: 1: GJIEMFvCXOGxwMSx43guQFRPh8M.roa (hash: oeNhpu1q2YVhaNJfdDI1KC0StxYU+WfFhgtlfHrXwlM=)
2: N7xp5A4irg8DKzqXWFOFM39t3u8.roa (hash: qInCZHWCOK/PbCu1c+rmFecdDUSwXaQ9cyfT/I5HPdo=)
3: hTMMYpMuqGPoG2J1CKhmES38yHA.roa (hash: rvTmRXH6/6D95X7iHQWTgs6oiDZA0aQ3QNoQMnR5ayw=)
4: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: ve4UkU7cYMqK5y3BbktC5U5u+B19NIh3PYYwq2Um/SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:c3:05:38:a6:87:54:b9:5a:ed:67:0e:4b:65:61:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Apr 19 22:01:09 2026 GMT
Not After : Apr 20 22:01:09 2026 GMT
Subject: CN=4451e0e9daa12ac123ab7489b9ade7df4adab0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:ee:59:49:88:c0:6d:19:14:30:a4:1c:74:
e5:28:e0:a3:d7:1b:2d:83:8b:4b:75:4d:2a:6d:0b:
ac:11:eb:65:e5:2a:95:6f:6f:0d:00:a1:8a:b3:fc:
e2:d8:ee:a1:b9:5f:c8:31:9d:62:7e:ea:a7:73:db:
f0:19:ba:36:5d:7f:76:6f:7a:74:95:10:6e:0e:15:
99:d0:29:02:1f:e8:01:9d:4f:4b:b1:87:cb:d0:3c:
8c:bf:69:20:c2:82:7d:36:45:a1:f2:f3:f3:d5:2a:
c4:f3:1d:5d:4d:bf:7d:98:8f:6b:92:70:22:1b:19:
8e:ae:d8:d4:6e:92:a7:ec:3c:16:c8:65:5d:c4:1c:
ba:c0:be:d7:a8:ea:6c:4d:32:f4:78:a8:f1:14:3e:
4d:8c:02:9d:89:f7:f5:2c:b2:c1:20:5a:f6:1b:41:
33:6c:d2:7f:14:2b:99:ab:f8:a9:4f:f7:5d:f5:a8:
7d:7f:d1:f3:68:e3:55:b6:94:ac:ed:fe:ea:5b:44:
67:82:a8:58:d9:6a:d4:32:0d:b4:da:18:5f:ad:2d:
9d:ff:1f:d6:9b:69:fc:f1:a3:aa:2a:19:a6:da:f5:
ef:09:f7:93:e0:44:16:e5:a3:11:40:ff:3c:3a:de:
30:3d:17:b4:c2:44:12:1c:eb:89:af:fb:32:f6:7f:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:E0:E9:DA:A1:2A:C1:23:AB:74:89:B9:AD:E7:DF:4A:DA:B0:D2
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a3:61:02:7b:a6:58:42:f6:e0:7f:77:c7:7e:e6:f8:d9:7a:
d9:0f:ce:ea:e1:b1:ed:1c:ce:dd:67:c7:ca:77:59:fc:ab:09:
d5:aa:3e:d0:90:b0:08:c6:89:e6:20:10:2b:c6:0a:17:cf:2d:
7c:2b:50:f0:a5:42:18:89:58:46:37:6f:23:9c:48:08:b3:5c:
9a:16:d6:5f:ff:71:d5:98:37:2e:50:6a:52:a5:0d:df:33:7c:
51:1a:41:7d:b9:4c:f1:69:73:bf:20:32:f0:d9:98:d9:79:a4:
06:51:40:47:3c:1d:18:f0:c4:77:aa:91:ee:8c:3a:da:e7:84:
36:db:47:52:48:64:94:4d:51:94:87:92:52:84:99:75:98:5a:
50:4c:98:93:9e:72:7b:20:44:47:7d:81:fa:6d:11:03:3c:7e:
eb:b9:e9:bf:ff:64:42:14:7b:fa:a6:ea:8b:c3:25:3c:aa:2f:
16:4e:09:17:67:f2:f4:b4:c6:31:65:dd:ec:fc:75:8e:6f:12:
b2:30:5d:6b:b8:96:97:52:85:88:b4:86:4d:3b:95:66:e6:8f:
48:2b:a5:e7:68:d8:17:1e:06:cc:b7:16:b3:8c:81:7e:d4:50:
8b:53:91:ac:67:47:c8:76:0f:df:40:2e:70:ec:12:23:bb:b2:
0c:77:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:27:31 2026 by rpki-client