Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: k7bZSsouV1ktlRT0bhXqLSwYPn27vzhWB05ywY9+43Y=
Subject key identifier: 34:2C:F6:35:AA:FD:83:9D:32:64:FC:71:9A:AA:C1:BD:92:4C:99:42
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019E32CE4FE43580FE0154034E53CB9364D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 22:00:42 +0000
Manifest this update: Sat 16 May 2026 22:00:42 +0000
Manifest next update: Sun 17 May 2026 22:00:42 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: q6HB9Wh/KUEJ3yRQhcxokoI81fLYrc/nTTx1qsbBHs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:4f:e4:35:80:fe:01:54:03:4e:53:cb:93:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: May 16 22:00:42 2026 GMT
Not After : May 17 22:00:42 2026 GMT
Subject: CN=342cf635aafd839d3264fc719aaac1bd924c9942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d2:7d:75:d1:05:d8:af:e2:a2:3c:09:2a:2d:
ef:67:f7:e9:4d:08:4c:a1:b9:92:69:b1:63:c8:d7:
fc:11:e6:d3:e7:a7:f8:42:09:1e:5b:0e:3c:19:f0:
64:a4:3f:a3:49:09:14:1f:d4:82:fb:69:e9:69:e4:
36:11:94:6b:9e:29:1e:6c:6e:9d:e4:7f:2d:3e:00:
db:df:5f:7f:3a:b2:93:74:82:6d:36:5d:c6:dc:44:
ac:b6:d3:a1:c6:ee:b0:5b:86:74:1c:5b:7c:7b:c1:
3f:66:55:f2:94:82:6a:33:a0:9e:b6:aa:7c:0d:79:
2a:1d:af:28:c2:a6:a8:8e:e5:2f:a2:54:40:4e:e0:
8c:10:6d:c8:33:ec:1c:ac:97:7b:7b:89:da:91:65:
fb:4f:11:74:17:ce:fb:dc:be:c1:86:2a:dc:74:c8:
10:48:2d:07:03:99:84:fa:a2:01:72:de:57:5e:58:
ec:58:6e:06:57:29:b0:3a:e7:7f:ec:9b:b1:db:6d:
28:d2:46:5f:8d:70:db:87:6c:7e:df:20:16:d2:ec:
9e:ea:ce:39:1a:de:b3:8f:68:04:52:70:21:81:c7:
85:6a:24:3f:ee:46:50:a7:30:68:86:12:b0:e3:45:
d6:5e:54:94:99:05:b5:a6:32:08:c1:1a:55:fe:d0:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:F6:35:AA:FD:83:9D:32:64:FC:71:9A:AA:C1:BD:92:4C:99:42
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ac:af:26:b9:a2:14:9b:9a:e2:9f:2d:32:7e:e0:63:98:c9:
d4:00:58:37:8f:8b:33:c9:f7:f8:b3:f0:00:42:c0:81:b3:20:
2d:4f:d4:7e:75:fb:2c:e9:b4:7b:c3:55:39:60:f0:45:cd:cd:
4d:05:cf:8a:1f:0a:22:da:a2:e2:37:b8:4c:27:99:c7:82:54:
99:c5:fc:32:92:ca:ad:26:bf:61:d6:58:2b:ee:f7:ac:a2:f7:
91:8c:d7:4e:ca:d1:87:fd:fb:01:bc:56:ea:dc:aa:a7:64:42:
dc:08:fb:94:5f:8e:5a:c3:da:03:d6:fc:6c:f4:7b:8d:8a:cd:
66:bd:2f:b2:d8:5a:16:a4:84:66:ba:58:15:04:89:22:2f:66:
5f:5c:f4:b1:90:99:e3:a0:3e:45:34:33:4b:86:ec:af:c2:7d:
1a:ab:43:8c:c5:ef:42:43:e9:42:31:2b:e6:e0:8d:93:a1:9f:
80:76:69:15:8f:8c:ff:cc:16:cb:df:df:24:85:af:94:7b:0a:
9c:c9:70:50:01:63:23:d5:73:a7:22:06:41:fb:74:08:51:46:
92:1c:b6:03:4f:7e:76:ed:9b:24:57:b0:1e:b0:43:e6:f6:ca:
e4:b1:87:b1:85:40:c0:80:26:77:0a:1e:4b:9e:5d:15:bf:a1:
a3:98:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:27 2026 by rpki-client