Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: KoznYVPPiV+zyBnnBbQe+fKBE/ghliIFNihe9tcREFM=
Subject key identifier: AF:E7:56:94:3A:FF:4B:27:BD:FF:C6:84:DD:21:6F:B8:99:C0:04:42
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019ED72CBB1FF59570D166C3D076AD1C4347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 0561
Signing time: Wed 17 Jun 2026 20:01:33 +0000
Manifest this update: Wed 17 Jun 2026 20:01:33 +0000
Manifest next update: Thu 18 Jun 2026 20:01:33 +0000
Files and hashes: 1: j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (hash: U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=)
2: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: W4+dgFVp4qnUcA69YW4zoAla5DzOeCAOur+ppPF2fAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d7:2c:bb:1f:f5:95:70:d1:66:c3:d0:76:ad:1c:43:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Jun 17 20:01:33 2026 GMT
Not After : Jun 18 20:01:33 2026 GMT
Subject: CN=afe756943aff4b27bdffc684dd216fb899c00442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:54:c4:de:4b:3a:f5:9c:32:0b:61:1b:fe:
30:4c:fc:8b:e5:f0:37:c4:5c:f5:f1:1a:7f:97:16:
87:a9:89:f8:f1:e7:3a:da:4d:b4:06:60:c2:46:72:
39:62:8a:79:d2:83:ab:a3:01:3a:1a:01:25:fe:a3:
6b:65:73:c3:ce:ca:43:fa:1a:cc:47:1d:d6:13:f0:
b7:23:dd:f0:55:be:bd:11:86:38:99:79:30:ef:94:
21:65:7b:8f:bb:ab:fd:a6:c0:0b:6d:97:96:2d:e2:
46:90:b9:3e:84:66:42:88:a6:c3:6a:b6:ae:5e:c3:
ea:bb:5a:91:06:94:69:6a:74:7f:94:37:2b:1a:6a:
55:3f:74:e8:07:56:d2:93:40:15:b6:27:15:88:b2:
0c:0c:dc:d4:d8:76:4a:5b:29:5b:23:9a:d9:be:3c:
2c:40:ff:57:4f:5f:00:4e:4a:74:63:d9:ee:92:ef:
2c:8b:26:12:38:06:91:bb:4b:a8:2a:d8:3c:e9:23:
60:6b:9b:73:38:87:32:74:d8:a1:e3:b2:86:db:ad:
e6:b3:12:33:65:1b:56:00:6e:38:9e:03:04:1d:6b:
e1:b6:42:4e:8e:d7:c2:29:38:41:e9:a2:e4:25:b3:
6e:9e:b8:89:53:90:d0:18:17:d6:e9:6e:7c:d5:10:
75:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:56:94:3A:FF:4B:27:BD:FF:C6:84:DD:21:6F:B8:99:C0:04:42
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3c:9a:b5:a0:8d:4b:c7:6c:fd:c3:97:1c:93:c7:fb:78:e8:
68:ad:67:0f:54:bb:2d:85:e0:51:cc:cb:33:ca:69:09:50:17:
ff:a4:e7:a9:a4:86:38:fa:16:68:f2:51:10:52:21:6e:a5:c4:
4f:3e:2d:86:a2:fa:9f:bf:85:1a:39:6a:b2:73:24:a1:0f:0c:
9a:ab:09:fb:a4:c7:aa:ba:c9:19:08:1c:2f:87:2f:63:cf:47:
e9:ab:85:6b:58:06:d9:ce:d0:2c:53:0d:90:2b:1d:9b:88:2e:
58:a3:5f:3d:f3:06:ed:b9:92:bf:ce:43:2c:59:27:dd:09:db:
50:79:67:86:a9:bf:bb:b8:da:ed:fc:74:d4:d2:cc:80:82:1a:
a5:ae:46:64:fd:ed:4b:6c:7a:c1:15:c9:22:eb:c1:16:0f:44:
61:53:91:92:b6:a4:d5:3f:db:8d:69:cf:43:e7:b9:86:79:c5:
fb:58:57:18:ca:7d:51:9d:88:9c:5f:78:8e:a3:43:6b:32:b0:
b7:ca:54:11:8c:80:3a:bd:df:5d:39:11:90:56:fc:61:94:75:
91:96:b8:80:8d:1d:e6:e7:08:95:e8:36:73:c2:74:8f:8c:27:
47:d8:7f:36:98:ca:ff:e6:93:e2:ce:08:4d:6b:5d:58:79:49:
c6:43:96:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7XLLsf9ZVw0WbD0HatHENHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWEzODFmOGE2MGNjNTFiNTI5OTBlZDM4Njk0OGY2ODRj
MzE1OWQwHhcNMjYwNjE3MjAwMTMzWhcNMjYwNjE4MjAwMTMzWjAzMTEwLwYDVQQD
EyhhZmU3NTY5NDNhZmY0YjI3YmRmZmM2ODRkZDIxNmZiODk5YzAwNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtJUxN5LOvWcMgthG/4wTPyL5fA3
xFz18Rp/lxaHqYn48ec62k20BmDCRnI5Yop50oOrowE6GgEl/qNrZXPDzspD+hrM
Rx3WE/C3I93wVb69EYY4mXkw75QhZXuPu6v9psALbZeWLeJGkLk+hGZCiKbDarau
XsPqu1qRBpRpanR/lDcrGmpVP3ToB1bSk0AVticViLIMDNzU2HZKWylbI5rZvjws
QP9XT18ATkp0Y9nuku8siyYSOAaRu0uoKtg86SNga5tzOIcydNih47KG263msxIz
ZRtWAG44ngMEHWvhtkJOjtfCKThB6aLkJbNunriJU5DQGBfW6W581RB1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/nVpQ6/0snvf/GhN0hb7iZwARCMB8GA1UdIwQY
MBaAFLyaOB+KYMxRtSmQ7ThpSPaEwxWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTkt
ZWEwNzE4MzU5ZTUyLzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jYTBlN2UtNGVjZC00MmVlLWE4NTktZWEwNzE4MzU5ZTUy
LzEvdkpvNEg0cGd6RkcxS1pEdE9HbEk5b1RERlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDyataCN
S8ds/cOXHJPH+3joaK1nD1S7LYXgUczLM8ppCVAX/6TnqaSGOPoWaPJREFIhbqXE
Tz4thqL6n7+FGjlqsnMkoQ8MmqsJ+6THqrrJGQgcL4cvY89H6auFa1gG2c7QLFMN
kCsdm4guWKNfPfMG7bmSv85DLFkn3QnbUHlnhqm/u7ja7fx01NLMgIIapa5GZP3t
S2x6wRXJIuvBFg9EYVORkrak1T/bjWnPQ+e5hnnF+1hXGMp9UZ2InF94jqNDazKw
t8pUEYyAOr3fXTkRkFb8YZR1kZa4gI0d5ucIleg2c8J0j4wnR9h/NpjK/+aT4s4I
TWtdWHlJxkOWzg==
-----END CERTIFICATE-----
Generated at Thu Jun 18 07:01:22 2026 by rpki-client