Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: Tbi7nlqaTjfK5aqqWLgAQdVpybZM1bEasyzGU6h9Mjo=
Subject key identifier: D0:4F:D4:5E:26:F7:C7:94:47:65:B5:AD:0B:61:D8:D4:01:F7:4A:B4
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019E2091CC17E199A49AEDBA8F33946E4A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 09:01:26 +0000
Manifest this update: Wed 13 May 2026 09:01:26 +0000
Manifest next update: Thu 14 May 2026 09:01:26 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: dFsFrQocxWiVQepKMGzkRIn//mXecjx4IW+DxuYeU98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:cc:17:e1:99:a4:9a:ed:ba:8f:33:94:6e:4a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: May 13 09:01:26 2026 GMT
Not After : May 14 09:01:26 2026 GMT
Subject: CN=d04fd45e26f7c7944765b5ad0b61d8d401f74ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:b2:b5:b2:51:92:1f:63:92:9e:f6:fd:cb:
e1:86:e2:a9:9d:8f:56:64:50:da:cd:a0:a8:84:b7:
e8:df:a7:90:2f:53:06:ec:5e:6a:3b:4f:42:f1:7b:
ed:d4:5a:f7:d2:7c:5d:ff:cc:f4:67:15:64:2a:f0:
3b:b2:b3:8d:73:62:1c:89:5f:63:50:ad:5e:58:14:
63:0b:7a:62:55:97:eb:49:94:5b:3a:4f:35:45:81:
e9:3b:39:0d:11:12:c0:1f:50:ef:4b:32:f8:81:f9:
4d:71:98:c0:7c:a2:b9:cc:c3:24:c1:73:29:75:c7:
f5:8a:ef:7a:67:29:17:0e:39:d7:5a:a6:9a:8e:71:
fd:ea:a7:8d:93:ad:55:08:e9:0a:6d:fa:34:6a:b6:
f1:fe:2d:53:b4:6f:7d:ce:8e:28:06:82:6e:77:54:
ad:bd:cf:42:38:d6:65:dd:f3:6e:cc:72:d1:c9:84:
82:0a:7e:53:cc:87:34:15:32:ed:97:7e:7f:da:2f:
03:66:91:ea:3a:d5:15:66:ff:99:27:8b:48:88:a3:
80:8e:39:73:7d:68:97:ed:f6:1c:eb:a9:d0:ef:28:
b6:4f:f8:00:8c:80:cb:4c:54:f5:44:32:fb:11:9f:
98:e0:ba:51:9e:03:88:5e:c7:33:93:71:8f:c3:27:
ce:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4F:D4:5E:26:F7:C7:94:47:65:B5:AD:0B:61:D8:D4:01:F7:4A:B4
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a4:6a:9b:fc:74:39:6a:2b:e0:f4:57:54:7d:f3:2b:7a:91:
d4:b0:47:52:ba:10:6e:da:96:9b:6f:28:5c:52:06:87:6c:68:
57:bc:69:e5:89:38:ea:71:11:75:67:83:bf:0d:20:58:fb:b8:
ea:94:cb:10:4e:25:c4:dc:42:ac:92:8f:ca:9d:ae:d7:3a:35:
fe:9b:93:cd:6b:2e:e7:d0:d3:74:43:66:a4:0e:6d:09:31:4c:
33:d6:5c:bc:34:fe:b4:14:cc:ec:32:62:ff:5b:f5:fb:77:58:
60:5f:03:0f:36:42:3a:ac:28:d5:fa:57:b8:a0:45:e3:e1:6f:
ec:11:03:be:a0:bf:8a:34:67:5d:18:cd:7b:04:80:30:be:c8:
99:22:d0:94:5b:8d:ac:b0:3b:a4:3e:2a:99:ff:66:d5:10:3a:
56:95:a8:d9:1a:40:8f:3e:99:b8:6f:35:0e:c9:c4:0d:87:df:
e3:f0:48:ee:fe:82:75:9a:eb:df:ce:d3:b6:8d:02:a5:bc:46:
b9:cd:3e:a7:3e:9a:03:10:2a:e6:b0:df:de:b3:f0:39:f8:88:
85:f9:e0:b7:96:69:d6:38:1b:e5:2b:d9:06:87:ae:fb:5a:62:
97:dd:db:d9:11:22:c5:b4:05:f6:a5:f2:6b:de:91:9b:33:80:
bf:19:b2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:21:23 2026 by rpki-client