Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File: vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier: BEOvalrXnMax/W5w6c8CSQ7FeGGxCg8Lmn5GxuRiBb8=
Subject key identifier: 5F:58:97:86:18:3C:04:6A:8C:3A:D5:5F:D3:87:A8:63:23:2B:3D:E4
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial: 019DCC749EAF6987E53727E81EF93F6EE40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number: 0D73
Signing time: Mon 27 Apr 2026 01:01:27 +0000
Manifest this update: Mon 27 Apr 2026 01:01:27 +0000
Manifest next update: Tue 28 Apr 2026 01:01:27 +0000
Files and hashes: 1: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: dt4RjXysBLTcg4oUHbwpYwFwyW1yb8zpCfjdcmWg7h8=)
2: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (hash: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:9e:af:69:87:e5:37:27:e8:1e:f9:3f:6e:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Validity
Not Before: Apr 27 01:01:27 2026 GMT
Not After : Apr 28 01:01:27 2026 GMT
Subject: CN=5f589786183c046a8c3ad55fd387a863232b3de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:8b:fb:9c:d0:ab:7e:d8:23:2f:fa:10:94:
64:55:92:8f:8c:14:2f:3e:15:85:f9:07:33:52:45:
b0:03:e9:d7:24:41:07:63:8c:f8:42:15:11:4a:aa:
0f:52:fa:39:2d:b6:b8:9e:e5:79:eb:33:98:e2:5b:
22:5e:17:06:27:16:30:86:3c:87:f3:19:88:a9:1b:
12:dc:d1:c3:ae:e9:8e:34:ab:4b:d0:01:1b:a9:fc:
f1:35:d7:13:e1:ab:92:56:92:92:e0:ce:37:e8:18:
ab:d8:99:cd:0e:1f:2e:fe:9a:83:56:0e:05:96:ca:
ec:3f:5e:c9:9c:3e:a2:4a:02:01:00:d4:60:e1:bd:
a8:b1:25:06:bb:ad:57:a0:a6:8f:03:17:a8:aa:ef:
ae:64:f9:14:44:5a:45:34:4c:8f:1d:7d:7c:5e:fa:
05:c0:dc:76:62:10:6f:08:94:88:4c:99:cf:16:62:
dd:ce:ef:dc:47:25:f0:89:c0:1e:de:04:ab:0b:fd:
97:41:4b:5a:32:ec:c5:b7:1d:f4:46:bc:0b:44:c0:
0e:99:0a:cb:81:84:4b:d1:80:a2:5c:dc:44:1f:38:
c2:aa:dc:dd:4b:00:e6:88:cb:6c:f0:46:ed:71:be:
5a:c9:96:57:be:5f:a0:2b:bf:94:fb:f5:84:a2:39:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:58:97:86:18:3C:04:6A:8C:3A:D5:5F:D3:87:A8:63:23:2B:3D:E4
X509v3 Authority Key Identifier:
keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7e:6b:c7:6c:07:4d:49:96:b1:7b:ee:36:b9:ab:58:07:d7:
9f:6e:d0:7b:c2:d8:d9:ba:82:15:24:70:f4:b3:28:98:4e:1c:
5b:a1:ca:18:42:f7:7d:0c:3e:db:43:1c:41:b9:f9:01:72:57:
cf:3f:34:9d:71:50:bb:d5:90:2b:c2:de:a6:b4:20:e9:3c:2c:
58:cf:14:be:d2:8c:ed:7b:ae:ac:78:a4:a6:2d:5d:c9:2f:c4:
ac:74:06:14:30:96:7f:7e:ff:da:6f:ee:bd:d1:5d:60:6e:13:
e5:d1:4b:02:05:cf:1a:23:97:28:6e:04:ab:1d:90:7a:04:be:
52:77:0d:37:90:af:40:02:c5:05:a1:33:d6:2b:b6:de:9e:3e:
3b:41:b6:8c:59:da:bf:76:e1:15:a5:e3:cf:6a:37:4d:ed:15:
b1:bf:2b:5e:a3:35:df:77:71:f7:c4:5e:78:e8:8a:5a:99:f3:
1f:b0:55:80:63:4f:38:3c:19:e6:07:2d:7d:a1:f8:03:8e:3e:
87:29:f3:e7:83:8a:b1:59:61:51:4b:bc:39:3d:34:70:05:31:
0d:18:aa:05:a0:dd:16:39:e9:a5:9c:a4:09:0a:8f:fe:6f:a1:
47:54:54:ba:e1:16:83:45:8e:7f:64:ca:bd:95:5e:5e:32:ce:
da:b6:61:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:16 2026 by rpki-client