Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json)
Hash identifier: AM3E+xmZLT7VEx1TiQN3F1Qj4dBnxlLTmuiOcuu91AA=
Subject key identifier: BD:9D:50:7E:57:6B:B1:1C:9C:23:DB:19:9E:53:C5:79:31:53:EC:82
Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Certificate serial: 019E062D4F23B63F280422F6355BE9FBD2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
Manifest number: 18FB
Signing time: Fri 08 May 2026 06:01:33 +0000
Manifest this update: Fri 08 May 2026 06:01:33 +0000
Manifest next update: Sat 09 May 2026 06:01:33 +0000
Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=)
2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: db48/BMeP2iUPadjOf3EcHmTXGKx2eWQabFCM2KbqZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:2d:4f:23:b6:3f:28:04:22:f6:35:5b:e9:fb:d2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4
Validity
Not Before: May 8 06:01:33 2026 GMT
Not After : May 9 06:01:33 2026 GMT
Subject: CN=bd9d507e576bb11c9c23db199e53c5793153ec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:42:82:44:b9:d3:55:54:c8:e0:c9:d7:ee:
7c:93:dc:fc:dd:f9:fc:83:a7:6b:cc:58:9b:38:26:
83:04:4d:a8:8a:16:92:f3:0a:35:2c:cf:9c:8b:3b:
e6:f3:81:39:01:4f:a1:80:72:1b:3a:1d:33:10:0a:
7c:cd:75:03:15:34:6a:4a:c1:ef:bc:ee:83:5c:ae:
15:ee:7c:63:0a:2e:0a:41:e7:13:2d:d1:8f:b3:12:
07:0f:0a:1d:00:4b:dd:eb:db:be:e4:37:2d:34:37:
eb:06:6b:6f:d7:ba:04:0d:a3:e5:17:d0:52:b2:8d:
4f:a6:0e:15:77:c9:b9:b3:57:4e:c4:4c:e4:a2:8e:
39:82:0f:50:d9:0e:41:5b:b5:6b:c0:82:80:0f:38:
3b:6e:53:87:37:b8:a6:0f:a6:be:cb:51:c8:7f:96:
4c:9f:33:ca:05:04:91:d1:94:5e:f1:97:fe:f9:db:
7a:19:51:fa:fb:6e:7a:12:ed:d0:4b:e8:eb:6d:bd:
1a:e6:31:f4:7b:85:ce:7b:d5:5e:ed:7a:a4:b1:9e:
9c:d6:fa:58:15:75:a3:fa:f0:cb:96:43:5d:f5:7a:
25:90:b2:7a:9d:b8:7a:fb:f0:ed:2d:a2:f8:7e:c5:
af:66:99:3e:95:da:68:20:04:37:48:e0:2a:db:0d:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9D:50:7E:57:6B:B1:1C:9C:23:DB:19:9E:53:C5:79:31:53:EC:82
X509v3 Authority Key Identifier:
keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:19:db:8e:ee:9c:12:61:65:7b:aa:26:db:e6:3b:af:13:b9:
c9:aa:7c:df:24:ad:1f:2e:db:0e:83:65:53:40:c6:d5:fa:71:
44:9f:f4:9e:46:67:8a:4d:6b:b9:d1:6b:6b:38:3d:ba:a1:00:
e3:43:f4:c3:8f:c9:0a:08:b1:35:71:85:87:ce:80:b2:fb:9b:
71:2e:a2:5b:f7:88:39:82:2b:34:b7:01:c1:79:0d:63:5c:cb:
18:e4:7d:2e:a5:bb:ce:b8:21:2f:0f:c1:e5:29:49:01:46:93:
06:70:35:03:86:0b:4d:c6:63:94:bd:71:8a:91:c5:7b:22:f2:
bd:a8:6d:95:40:5d:59:57:7e:65:54:32:f8:a4:75:31:a5:e8:
5c:8c:e7:79:37:9e:50:9c:86:df:22:01:48:0c:42:ae:09:5e:
f0:9c:f3:5f:6d:45:f2:53:cf:28:b3:e2:f6:ab:91:6f:31:d6:
62:33:18:04:be:cb:4c:83:65:80:ee:fb:ca:e3:2b:45:7e:34:
65:5a:06:e1:4b:a8:e1:f5:23:22:80:8e:09:f9:34:94:48:f7:
35:e0:b0:01:4a:88:62:b6:7b:f4:91:5f:72:a9:07:fb:73:46:
e5:24:28:28:8a:fa:ec:1d:d3:3c:21:3c:2b:a8:46:78:2d:b1:
28:eb:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:41:59 2026 by rpki-client