Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File: VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier: P7ZFbc+iHOMUDNuF/iFnjTSijhFIuSvP8mjgaOYBFMI=
Subject key identifier: 3E:FA:88:51:06:1C:6D:0F:BB:71:DF:D3:47:23:BB:46:92:38:16:4C
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer: /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial: 019DCD865D5163CAE4C3FFA35C2B5A41513B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 06:00:27 +0000
Manifest this update: Mon 27 Apr 2026 06:00:27 +0000
Manifest next update: Tue 28 Apr 2026 06:00:27 +0000
Files and hashes: 1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: Jakiolkg7KFn0TO/zmfvkOIjSs4gaXztHtR0DF+b/8k=)
2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:5d:51:63:ca:e4:c3:ff:a3:5c:2b:5a:41:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Validity
Not Before: Apr 27 06:00:27 2026 GMT
Not After : Apr 28 06:00:27 2026 GMT
Subject: CN=3efa8851061c6d0fbb71dfd34723bb469238164c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:fb:b1:c5:a3:b8:dd:33:db:3b:0e:17:b2:
61:4a:7b:d6:1c:f6:04:ba:8f:c2:9a:ae:3c:9c:24:
83:82:09:b5:c4:a7:8f:5e:83:24:64:90:83:6f:5b:
ea:c6:c3:c1:a9:57:27:c4:e1:aa:d1:93:ef:4d:49:
27:1b:b4:98:9c:ed:b8:40:1a:e8:0d:3b:a6:cd:0c:
dd:68:8d:b2:8e:94:69:cd:54:48:86:fe:70:2e:e6:
91:fb:28:93:d1:c6:e6:9d:34:b4:6c:ab:db:aa:6c:
d3:6f:9b:7c:80:6d:01:de:7c:51:86:9b:40:90:ba:
7a:29:34:ae:d5:31:a2:18:c0:0d:60:3d:53:b3:54:
9c:bc:b3:49:d7:3e:1a:e4:e4:7a:d3:a8:40:23:02:
f8:41:59:6a:00:6e:c4:15:78:f2:a0:48:0b:40:a5:
26:75:6b:b7:85:bd:15:37:cd:47:fb:74:ac:e2:82:
0d:16:65:53:7f:47:54:aa:f8:2f:41:da:5f:9c:64:
28:4f:5f:9b:99:0c:ec:2a:7b:b9:33:4b:66:48:97:
d1:1a:cb:00:8c:8d:9c:3f:06:8e:8d:e4:2c:68:82:
6b:15:72:8e:ec:0b:ce:e4:45:b7:cd:0a:c5:9f:d0:
e1:41:48:3f:d3:a0:9c:8c:e9:ba:39:02:7e:1a:82:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FA:88:51:06:1C:6D:0F:BB:71:DF:D3:47:23:BB:46:92:38:16:4C
X509v3 Authority Key Identifier:
keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:f8:e9:87:8f:be:11:63:22:f7:7a:da:6a:69:41:62:a0:
ac:5a:06:20:ae:30:3b:d8:3f:11:ef:14:b0:99:c2:7e:a2:b3:
57:7c:43:02:87:8c:ac:74:a3:15:c6:6d:b5:e4:f9:56:70:ac:
60:75:92:c3:02:ee:8d:5d:b1:1c:3a:a0:ca:35:03:20:e7:4a:
fb:b3:20:bf:7a:e9:ba:7a:47:9c:19:02:63:bf:10:28:c2:85:
8d:a0:04:f8:b2:dc:cf:d7:d2:bf:fb:13:aa:d9:0a:be:d8:03:
54:c7:99:8d:0d:c5:2e:84:f9:c4:08:ce:ad:26:f0:29:be:41:
28:85:1c:46:43:ee:ca:64:fb:50:ce:82:f0:b2:17:b0:73:9d:
56:55:e0:1b:dc:19:79:84:98:80:b1:df:20:49:76:dd:e0:48:
75:7b:64:19:c4:02:7e:3d:0d:4f:a5:68:2c:1f:92:3d:0b:0a:
a5:49:a4:91:85:af:15:3c:4b:e7:3c:fb:7f:60:ff:38:5e:33:
db:ca:6d:7f:97:0d:04:ac:10:0e:dd:e2:23:32:2b:68:7c:51:
14:88:64:45:ff:bb:27:83:97:5f:90:8a:cd:a7:6c:86:e9:55:
e9:e3:f8:66:55:7b:a2:93:55:03:b3:53:1d:80:e5:80:b5:f9:
4f:72:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:38 2026 by rpki-client