Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: JKcaL/r561W1jch6JKdBr/JYl7fchOn0Sq+mmtjLszM=
Subject key identifier: 79:78:E4:9F:D1:8D:50:07:C4:65:5A:7D:57:C6:6F:EE:69:9E:80:F1
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019E9B17E78A2E1D25361498895651108960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 04:01:35 +0000
Manifest this update: Sat 06 Jun 2026 04:01:35 +0000
Manifest next update: Sun 07 Jun 2026 04:01:35 +0000
Files and hashes: 1: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (hash: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8=)
2: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (hash: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY=)
3: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: 5GKWomBYT0HHmb++sIKNihU4hcbUMEeZ7yQDYNXI9gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:e7:8a:2e:1d:25:36:14:98:89:56:51:10:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Jun 6 04:01:35 2026 GMT
Not After : Jun 7 04:01:35 2026 GMT
Subject: CN=7978e49fd18d5007c4655a7d57c66fee699e80f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:da:9d:10:c8:aa:98:d3:ff:41:e9:16:4f:
11:ea:ce:fe:44:71:cb:ee:69:30:e8:db:9c:17:6a:
cb:d2:10:69:f2:00:00:36:86:59:67:8e:33:4c:cf:
e7:71:1d:e2:90:6e:6e:a3:e9:c1:71:7a:ad:84:bb:
74:09:b5:08:18:5b:56:f5:9e:a9:40:ac:5c:49:62:
36:b4:82:d3:ab:b3:3c:9b:d2:99:96:2d:49:b6:38:
d9:6c:c6:01:e8:22:57:0a:e5:b7:8b:47:60:04:2b:
fa:40:ca:d0:59:4f:e5:86:9b:6b:62:3e:9b:16:19:
a0:ca:ed:2d:0d:e1:43:e7:a8:53:f5:cb:10:ae:07:
12:1d:89:a6:84:31:ff:79:a8:54:12:47:40:6d:5f:
0f:7e:d6:7c:29:27:bc:eb:82:ee:2e:4a:d8:2a:eb:
46:49:74:9d:f3:0a:67:25:25:37:d4:4d:7a:b0:93:
ed:33:99:80:98:5b:75:9c:8f:f6:05:c1:dc:0f:55:
99:63:2c:33:e9:0e:f3:f5:73:40:ba:dd:0b:b3:86:
e5:6e:a8:55:5d:13:1c:81:53:46:6d:16:f8:7d:fb:
05:19:ff:f7:d9:a1:ea:79:7f:dc:95:df:9f:89:88:
de:27:ed:fc:f5:d3:d6:13:f2:b0:e8:80:d2:34:b4:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:78:E4:9F:D1:8D:50:07:C4:65:5A:7D:57:C6:6F:EE:69:9E:80:F1
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:90:b6:a1:8b:19:dd:f2:48:1e:1b:45:6b:5e:c1:0c:d0:cc:
e9:39:90:61:58:bd:9c:fb:e1:9d:6b:ed:d8:d6:2b:a1:ce:6f:
ac:5d:08:13:48:14:a5:5a:19:29:50:25:7b:e1:ac:75:c9:ad:
89:ef:8a:50:4b:bf:29:f1:73:dd:3e:b3:aa:c1:7e:58:31:56:
41:09:54:72:8d:2e:8d:6c:8d:b3:0c:d9:a3:a9:c3:37:cc:57:
07:f7:46:e0:c4:da:90:1f:10:f7:f5:55:43:b7:cf:27:a8:96:
05:ed:e6:bd:f3:8d:ee:c5:29:2f:24:a4:57:de:de:5c:d2:2b:
c5:09:2d:00:cf:92:fe:1d:04:c2:6d:96:2f:6c:91:70:dd:5a:
25:63:6a:c5:8e:bd:ed:0c:dc:dc:85:04:b3:5d:05:e7:39:fd:
73:1f:cf:c1:cc:59:27:47:21:f0:a8:f7:b4:5d:de:c5:0f:89:
58:88:81:f5:e6:07:c4:64:6d:a7:0b:83:48:27:2d:0a:e5:89:
6c:c9:0b:6a:82:74:67:2c:ae:d9:37:da:92:a1:b3:40:f2:43:
b2:14:87:c6:fd:65:52:1e:c7:a4:ad:49:68:0d:92:6f:df:87:
fe:bb:0b:fe:5b:ed:8d:46:86:d6:e2:42:91:be:07:35:38:35:
72:56:4b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:50:39 2026 by rpki-client