Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: Kp1JYG1C0Ris3vee9H8rOUzW9a7lSlMX/ncNDh+fbtk=
Subject key identifier: 43:0A:EA:8D:1A:EE:07:4B:93:2E:93:CC:F2:6E:6F:B5:BC:E2:5B:A1
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 019DD841BE846674EBCD7377BAF111C9AB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0AFE
Signing time: Wed 29 Apr 2026 08:01:20 +0000
Manifest this update: Wed 29 Apr 2026 08:01:20 +0000
Manifest next update: Thu 30 Apr 2026 08:01:20 +0000
Files and hashes: 1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
4: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=)
5: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
6: LW7rb0AaEUjbPH9dnaOyHTBi76E.roa (hash: p1ZkXmO8OLBHzuVbdIzp+e8cKBOvTv26ZXhPyk/iQ9g=)
7: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: gUgf+Yb4crm5H7yQeEiFv09ukdc2NaKPicEkEXSdc/4=)
8: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
9: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 07:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:41:be:84:66:74:eb:cd:73:77:ba:f1:11:c9:ab:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Apr 29 08:01:20 2026 GMT
Not After : Apr 30 08:01:20 2026 GMT
Subject: CN=430aea8d1aee074b932e93ccf26e6fb5bce25ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:b4:a6:5a:ba:4b:be:ce:1d:60:b9:32:17:
4e:db:b4:13:e1:67:98:3f:d7:18:9f:27:f7:9e:83:
33:f6:ea:7d:41:68:4c:4d:27:a4:3f:16:17:27:c1:
d8:5a:d8:09:9f:00:1e:ed:cc:ac:cf:46:7e:73:50:
f0:de:fa:9f:68:4b:ef:75:e3:c7:7f:93:ce:78:90:
45:d6:38:b3:36:c6:01:1f:a4:36:fe:15:4e:0b:f2:
02:3a:0e:0a:56:9f:3c:91:60:20:7b:df:48:c2:fc:
f4:26:75:dc:a2:f5:ce:6d:2c:e6:b8:93:fe:85:38:
3c:53:fe:b3:a0:b4:9b:f4:a8:04:ed:ea:b2:f5:9b:
cf:b9:64:e1:7c:f5:60:82:1c:09:6f:9c:4d:95:44:
27:c2:2e:70:63:e4:c8:53:86:dc:e9:5c:e0:b8:07:
e7:96:19:d3:ec:3d:9b:75:20:a9:bd:2a:e1:6c:a0:
e0:fc:73:31:47:f1:d8:62:e8:b8:78:81:3a:98:75:
ea:c5:64:f0:22:74:b1:d1:fc:84:2f:66:a0:5c:29:
b7:0c:6b:5a:eb:2f:4c:41:61:9c:97:25:0a:77:6c:
64:bf:bb:98:cf:70:27:09:a7:2f:0b:c7:76:57:04:
18:3e:48:20:19:a6:c7:c9:36:ba:9a:2a:9b:2d:0f:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0A:EA:8D:1A:EE:07:4B:93:2E:93:CC:F2:6E:6F:B5:BC:E2:5B:A1
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:98:a4:35:8e:75:0e:5e:34:d9:23:31:cc:3c:f7:e0:52:b2:
fe:42:4a:63:ea:3d:49:1b:e0:6b:29:19:f6:87:70:c3:07:5e:
16:a7:53:9c:e4:5b:47:1d:4c:a0:b1:75:46:20:5e:d4:a1:3d:
44:00:49:b4:92:f6:d3:24:3b:e3:b6:c2:50:44:cd:0a:d4:58:
f0:93:00:a5:23:d0:76:a0:d9:64:f2:c7:67:3b:62:82:fd:68:
8e:31:5f:06:c1:5d:4a:07:8d:44:13:8a:93:7e:9b:5e:89:0f:
8c:3d:16:20:8d:cd:89:bc:a8:3e:87:43:e6:67:f6:63:6d:c5:
e6:f5:6e:b7:ff:07:70:c9:b7:e0:7d:bc:96:9d:88:8d:be:4a:
4d:f4:d2:2b:6b:8f:6e:55:fe:78:35:9d:75:0d:1a:bd:47:c4:
e4:e4:ac:1f:cc:39:b8:ad:1a:76:53:6a:72:e8:ad:44:50:e9:
c3:f5:f3:1f:d4:61:85:de:9c:af:3a:d0:3b:53:7b:14:83:cd:
7a:6d:e6:c3:61:35:2a:59:bd:0b:6b:9c:cd:70:b0:45:ae:6e:
ad:2e:82:d3:85:42:47:33:cc:c3:12:84:54:12:54:01:4d:b3:
fb:6f:cd:10:f2:57:a6:f9:c2:4c:40:8c:23:ed:39:6f:8f:f9:
c5:4a:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 11:40:00 2026 by rpki-client