Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: lwDu9BhcFZLEUKtIoPMetMJyV+ze6tXoTjfrZpkSkzw=
Subject key identifier: 05:DC:5A:DF:F8:54:3D:57:24:95:73:3B:2C:39:56:3A:FE:D8:A5:92
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 019DCF7583D165CDC530575082ECF05682F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 15:01:18 +0000
Manifest this update: Mon 27 Apr 2026 15:01:18 +0000
Manifest next update: Tue 28 Apr 2026 15:01:18 +0000
Files and hashes: 1: jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa (hash: AEoYWv6ZL0b6nATDt55iE0kgXS9whL4s6zBc29DhB/I=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: wqV4fXEiR4EbhJHp4wsDGN0eX4qIcKdb5MkjWlSsrTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:83:d1:65:cd:c5:30:57:50:82:ec:f0:56:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Apr 27 15:01:18 2026 GMT
Not After : Apr 28 15:01:18 2026 GMT
Subject: CN=05dc5adff8543d572495733b2c39563afed8a592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:6e:fb:4b:8b:15:f6:80:7e:64:da:8b:16:
2c:97:15:a4:91:c9:5f:ef:c1:4c:25:f1:8a:5c:b0:
11:c1:ef:33:e5:b2:04:5c:32:08:2e:68:a6:ba:e9:
d2:05:31:06:69:31:97:f0:55:1f:a5:0e:4a:d3:04:
72:1b:3b:b1:13:c1:bf:11:3b:0c:01:25:60:6b:c3:
66:4c:e4:cb:20:1d:1e:ee:3d:8b:54:d5:d5:29:ae:
5a:ae:e8:3e:e5:7d:11:2a:7f:b8:b5:9b:0c:18:b2:
8c:ee:a2:c8:f5:e9:9e:aa:92:29:54:d0:99:1c:9c:
9e:cc:73:08:0c:e5:e8:a4:70:fc:3a:97:ce:35:29:
6e:8d:dc:9e:38:3f:6c:4b:9c:52:da:37:eb:a4:bf:
1a:1e:e8:83:bd:d1:87:a6:61:ff:2c:ad:ee:08:95:
b2:3d:78:a6:48:fd:a7:b6:e2:6d:a4:a5:0d:a1:b3:
e0:0a:de:fa:41:e3:65:f2:7d:61:0a:d5:d6:15:cb:
56:a8:44:e9:43:38:47:4a:75:69:2a:be:d6:ce:06:
64:f9:47:25:54:68:f8:27:59:85:5d:92:91:f6:6d:
29:b4:26:82:6a:d9:e6:e7:3a:cf:2a:41:49:cc:41:
75:9d:d1:24:0e:81:72:c8:81:3e:97:f0:0c:48:42:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:5A:DF:F8:54:3D:57:24:95:73:3B:2C:39:56:3A:FE:D8:A5:92
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:ee:07:0f:eb:40:61:2a:84:88:1a:5f:9e:9c:68:38:18:
bf:5d:a3:5c:bb:84:7d:c6:66:20:aa:18:95:55:a3:66:8f:ee:
4c:eb:5a:81:d2:f7:fc:85:f2:13:2b:ca:35:eb:32:c0:9b:37:
e2:16:2e:39:80:87:a0:6a:0e:f1:46:98:a8:9d:6e:06:28:ff:
08:eb:e0:8c:e6:8b:e6:11:23:3a:54:17:5d:57:9f:0c:0a:74:
e1:03:2d:3a:51:af:d7:a0:a3:3f:b6:67:e7:60:8b:fd:25:b7:
54:91:c1:39:35:f5:a3:87:54:f3:49:4c:01:ec:e3:78:7e:40:
e1:15:da:13:91:40:9d:ce:59:1d:c6:d2:50:fc:19:a1:0b:28:
39:fa:47:14:f7:93:03:09:11:2d:61:c1:70:77:8a:39:d0:e9:
8d:23:7c:c4:2b:79:d6:7a:c5:4e:6b:bc:2b:ec:d6:e8:06:d6:
28:15:42:b6:68:b6:25:4b:26:8d:91:46:38:94:44:d1:8b:a9:
a6:7f:51:b7:59:25:f5:e4:86:ea:6c:3e:2f:c5:39:fe:2c:9b:
a4:bd:1a:e3:e9:e3:44:28:a3:87:e1:15:89:b7:e5:bd:e9:14:
40:b6:39:99:11:08:72:01:cd:49:2d:71:6c:02:e5:12:ca:37:
1f:2b:42:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdYPRZc3FMFdQguzwVoL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWM4YzczMmFhNDNlZjBiMzliZDM0ZDE0MGZkZDNhNzNh
ZWRiNzkwHhcNMjYwNDI3MTUwMTE4WhcNMjYwNDI4MTUwMTE4WjAzMTEwLwYDVQQD
EygwNWRjNWFkZmY4NTQzZDU3MjQ5NTczM2IyYzM5NTYzYWZlZDhhNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1u+0uLFfaAfmTaixYslxWkkclf
78FMJfGKXLARwe8z5bIEXDIILmimuunSBTEGaTGX8FUfpQ5K0wRyGzuxE8G/ETsM
ASVga8NmTOTLIB0e7j2LVNXVKa5arug+5X0RKn+4tZsMGLKM7qLI9emeqpIpVNCZ
HJyezHMIDOXopHD8OpfONSlujdyeOD9sS5xS2jfrpL8aHuiDvdGHpmH/LK3uCJWy
PXimSP2ntuJtpKUNobPgCt76QeNl8n1hCtXWFctWqETpQzhHSnVpKr7WzgZk+Ucl
VGj4J1mFXZKR9m0ptCaCatnm5zrPKkFJzEF1ndEkDoFyyIE+l/AMSEKmAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXcWt/4VD1XJJVzOyw5Vjr+2KWSMB8GA1UdIwQY
MBaAFLzsjHMqpD7ws5vTTRQP3Tpzrtt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYt
YzQwYzBkYmUxZGUwLzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYtYzQwYzBkYmUxZGUw
LzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/vuBw/r
QGEqhIgaX56caDgYv12jXLuEfcZmIKoYlVWjZo/uTOtagdL3/IXyEyvKNesywJs3
4hYuOYCHoGoO8UaYqJ1uBij/COvgjOaL5hEjOlQXXVefDAp04QMtOlGv16CjP7Zn
52CL/SW3VJHBOTX1o4dU80lMAezjeH5A4RXaE5FAnc5ZHcbSUPwZoQsoOfpHFPeT
AwkRLWHBcHeKOdDpjSN8xCt51nrFTmu8K+zW6AbWKBVCtmi2JUsmjZFGOJRE0Yup
pn9Rt1kl9eSG6mw+L8U5/iybpL0a4+njRCijh+EVibflvekUQLY5mREIcgHNSS1x
bALlEso3HytClw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:48 2026 by rpki-client