Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: AlB6yrVk1RjABlLRa93CknH7ZKrUCnHMmPbaigLUueM=
Subject key identifier: FA:D5:B0:40:24:BE:6E:D5:FE:21:2D:22:E2:A6:72:15:B0:47:1B:27
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 01A002820DAA7E22BEDDDD2C620A0344C3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 08E3
Signing time: Fri 14 Aug 2026 23:01:12 +0000
Manifest this update: Fri 14 Aug 2026 23:01:12 +0000
Manifest next update: Sat 15 Aug 2026 23:01:12 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: XntpEnGCV2uaOg3W7DNToVLRY9vS+CoPQb9kfD+0g5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:0d:aa:7e:22:be:dd:dd:2c:62:0a:03:44:c3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Aug 14 23:01:12 2026 GMT
Not After : Aug 15 23:01:12 2026 GMT
Subject: CN=fad5b04024be6ed5fe212d22e2a67215b0471b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:28:21:55:d8:31:c0:16:ea:0f:b3:3f:16:
67:c6:6a:3b:0e:30:75:37:44:b3:d2:b1:9f:a9:3b:
9e:c0:06:d3:c5:bc:70:03:98:01:4a:c8:90:ee:54:
a6:08:3e:b7:b2:f8:2b:b7:d3:2b:90:b9:ac:3d:18:
4b:90:66:da:bd:e4:5f:ac:52:89:70:24:d8:3c:89:
3f:0b:8c:3e:c2:4b:ee:2c:b9:02:30:97:29:9b:3e:
b0:cd:d4:03:34:08:d1:a3:89:1d:39:0d:e3:46:dc:
b0:97:4c:50:fe:09:52:86:39:59:a4:09:7c:f7:1f:
1e:ef:7a:80:2e:0d:4e:f1:77:06:d3:5a:34:40:47:
e1:74:f4:10:08:a6:4e:a2:a6:6a:2d:85:1f:2b:01:
a9:26:68:05:14:49:a9:ad:91:47:93:6f:41:e1:0d:
a9:91:fa:ee:68:19:66:36:ab:13:2a:e2:e0:75:34:
12:9c:30:3a:84:a4:30:70:87:a7:47:dc:29:42:f2:
08:21:5f:84:81:fc:eb:ea:7d:76:33:06:a7:e1:f6:
1c:ab:c8:07:c5:08:57:32:7e:7e:0e:7b:f7:71:b5:
06:5d:a6:97:6f:1e:8f:b5:03:35:62:1d:bd:2c:df:
96:29:6f:a3:10:0b:56:3a:8b:60:49:59:e4:65:d1:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:B0:40:24:BE:6E:D5:FE:21:2D:22:E2:A6:72:15:B0:47:1B:27
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:27:be:9a:b9:c8:7f:f1:19:62:73:d6:62:0a:06:e4:c1:db:
d7:77:e3:7d:5d:01:bf:0a:86:4c:01:5a:62:e5:85:d0:bb:67:
b2:07:ab:b8:d3:c7:c1:16:88:6c:04:eb:64:07:71:d0:60:e8:
2c:fc:b6:4d:57:cf:f4:50:17:99:8d:cc:76:c1:83:89:4e:54:
8a:84:a0:d9:3d:eb:4e:36:74:2b:65:29:93:92:4d:18:d8:cf:
3e:39:13:4e:3e:5b:a3:9a:bc:b1:7d:07:29:0b:dc:f9:8f:36:
28:71:04:69:13:4a:b8:33:79:89:c3:11:a1:93:62:a3:44:ed:
82:74:cf:57:2b:d5:61:fd:c3:ee:cd:fb:2b:14:79:3c:d7:e6:
21:ed:4a:88:d3:a2:8d:2d:d9:82:0b:90:6c:6f:62:9b:35:0b:
22:4e:db:f1:d0:6b:56:2f:92:4c:80:12:62:63:ee:41:49:a3:
29:a5:12:84:53:49:e4:fd:07:ea:60:bc:12:42:fd:af:e9:1d:
b4:7c:53:2b:80:f3:ef:03:8c:d1:17:d0:52:06:4c:f5:46:60:
3e:aa:89:d4:f5:25:6d:6f:8f:47:a6:ad:8b:45:7f:5d:4a:64:
8c:63:73:bf:fa:d7:f1:70:08:92:65:bf:24:f9:cd:c5:67:ba:
e1:68:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:54 2026 by rpki-client