Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier: cOa4YhcidWNsBi4gNWppjJbMjEVaWVA18HIDwBtTxbI=
Subject key identifier: 25:82:93:E7:3A:3A:C9:AF:27:8F:73:7B:8E:DA:1E:43:38:D3:7B:2B
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 019DB1D844235E2C45BB6E11A841F2C9EEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number: 18D6
Signing time: Tue 21 Apr 2026 21:00:33 +0000
Manifest this update: Tue 21 Apr 2026 21:00:33 +0000
Manifest next update: Wed 22 Apr 2026 21:00:33 +0000
Files and hashes: 1: 1lthQpNbdjvBjBvjx6o7dCcl_Lo.roa (hash: 09BW9AeuTKZNn0ro2yAFDYjo+0iZf6CKLrMs3cH5rIY=)
2: 6aiY7xcGMBhwSg811tAap0q5YOE.roa (hash: 5uK3tyYvucJWaPpSSYb7UKyYwuwhu+iE+thzsmoLCeU=)
3: RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa (hash: XjBkKwPLZL3Yi2tKr0y72A6eYen+buTvuweq1X1GG4Y=)
4: UzRHQuzUI0Ss5Pz4cItdnmMHCLw.asa (hash: 3AMssHCd/Ax3dExijoPFYSMky22OYdzCGjVn4xJGhIA=)
5: dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa (hash: NGvNDCH8JOp3+J18djkqIKrsn9XAQSXC2Ct+Fov8XNs=)
6: gahY2AwMV2dT0-Rml8PSy5NNRwU.roa (hash: YqOJQ01+Og7TwNTW8gpVjpEoYoqEByjHecFHs9UvJNo=)
7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: pqFys4WDog2wKTwul1ru19vl2IpPFyoVHu0rrXF39LM=)
8: xuh6sRkHSsQPLZas7QrHkiH1T2k.roa (hash: /cp/uJIEUnczl8mvWtL8aIuZWLWYTpcWWurRsAFLXiA=)
9: ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa (hash: DK9+AlzaJPs7Bge4vOR9auQX8qnNw3cNCE94Ti0BdaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:d8:44:23:5e:2c:45:bb:6e:11:a8:41:f2:c9:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Apr 21 21:00:33 2026 GMT
Not After : Apr 22 21:00:33 2026 GMT
Subject: CN=258293e73a3ac9af278f737b8eda1e4338d37b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:02:85:07:83:f0:b5:73:d5:7b:cf:33:d7:35:
57:d8:bc:c3:9a:ba:31:10:7e:bd:0e:49:0b:4e:1b:
de:56:f4:80:8e:7b:11:80:45:09:db:18:1c:32:d5:
36:16:58:71:d3:1f:25:ac:67:2f:37:3d:23:32:e0:
0e:8c:e7:2e:67:0c:01:f5:ff:48:62:37:33:6a:a6:
7d:de:38:c9:e4:5a:ea:a8:f4:88:b8:09:83:0b:e8:
dc:3c:80:c2:ca:09:d0:77:6d:11:56:a6:d2:e8:89:
bf:7e:f8:df:46:5a:ce:84:3d:61:de:a3:08:d9:e4:
72:be:c2:4c:0e:e2:7d:69:4f:f5:05:d8:ca:b9:7f:
87:3b:8e:c1:b1:bf:b7:1c:c1:c3:d3:1c:61:07:90:
4a:38:11:aa:23:e1:53:59:46:2f:d9:a2:45:0b:ef:
76:0d:05:b6:58:77:0e:c3:bd:a5:3e:8f:9f:ee:62:
d1:9d:a0:5f:bc:73:7e:3a:c6:32:d2:b5:9b:a4:e7:
be:19:42:28:79:e2:41:5a:50:f6:33:20:93:61:c1:
d7:9c:5d:3d:d9:37:73:e8:8b:40:80:db:70:87:1a:
93:24:07:a2:6d:06:5e:0f:b2:fd:ee:ee:8d:cd:34:
f8:1d:8e:41:0d:20:16:97:3d:86:34:ee:62:ea:e1:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:93:E7:3A:3A:C9:AF:27:8F:73:7B:8E:DA:1E:43:38:D3:7B:2B
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:8f:5e:e4:10:e2:01:bc:60:21:cf:00:e1:9e:06:0a:16:
13:bf:70:b9:f4:d9:7a:76:33:be:b0:db:54:9d:62:a7:d5:0f:
fa:3b:38:dd:b3:ba:cc:96:43:43:25:6c:db:f0:4f:cc:55:0c:
5d:3c:60:a4:42:9a:cf:b5:c5:39:b6:3f:2d:74:fb:29:29:d8:
36:e8:85:38:ca:8f:ea:3a:f3:c6:29:a2:9d:63:12:7c:4c:8d:
11:47:b5:4d:5f:69:77:78:f5:d6:57:f3:ed:04:84:22:be:35:
34:bc:a3:8e:38:ef:64:f4:be:17:46:d3:04:dc:4a:8f:8d:d8:
ea:33:72:4f:40:91:37:62:50:12:44:a2:b8:eb:34:1f:1d:bb:
25:b2:b4:d0:61:9d:cd:ea:e0:4c:cc:7f:80:d9:5d:9c:5a:4e:
58:ea:f8:bc:d7:8a:10:dc:52:ef:8f:a3:2d:0b:96:2d:6c:38:
9b:d4:41:02:40:b2:e6:d8:3b:0a:2d:b3:5d:b0:fe:7b:4f:27:
0d:7a:38:fa:ff:1a:37:1b:d2:69:86:5b:ca:d8:19:11:88:9c:
54:9f:c5:5d:b4:05:f9:e6:0e:0f:79:23:5b:30:11:1f:d1:99:
12:43:49:8f:52:25:b7:80:e4:85:8a:35:4f:3e:46:ca:dd:87:
49:77:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:45:24 2026 by rpki-client