Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: 78a1Tl+kTaOO40iL9aueY0/dGQifuXT6zjPAn/kews8=
Subject key identifier: D2:F1:F6:93:4D:89:44:FE:30:7D:0C:68:05:0F:CD:B4:76:7F:7D:B6
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019EB7A151611D48B3A90EF65321AC766A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 101E
Signing time: Thu 11 Jun 2026 17:01:03 +0000
Manifest this update: Thu 11 Jun 2026 17:01:03 +0000
Manifest next update: Fri 12 Jun 2026 17:01:03 +0000
Files and hashes: 1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: vdS50wXDO76Ou3li3QLeFqW28aVhyh0cpfwgZ8zDEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:51:61:1d:48:b3:a9:0e:f6:53:21:ac:76:6a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Jun 11 17:01:03 2026 GMT
Not After : Jun 12 17:01:03 2026 GMT
Subject: CN=d2f1f6934d8944fe307d0c68050fcdb4767f7db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:21:43:76:cc:77:a4:73:bf:c3:1a:7c:d1:
63:44:dd:52:fc:90:ed:a2:57:77:40:5a:72:61:af:
03:1a:42:ac:83:b3:8a:36:a3:ed:a9:c2:06:84:5e:
6d:db:fa:3b:24:b4:6e:00:c0:8c:88:64:02:24:0f:
7f:24:2f:15:1f:84:d2:7f:e7:a5:eb:c1:55:c2:aa:
d1:a7:4d:e3:b3:99:82:a6:41:21:03:76:d1:ce:76:
16:3e:da:7b:62:29:e7:1c:02:84:d8:88:10:9f:81:
38:9f:32:36:45:2d:b0:c5:47:a0:82:13:fd:dc:4f:
1c:fa:09:d0:cd:c6:9c:a7:6d:61:1d:e3:3b:56:d7:
b3:54:77:de:7a:a7:b7:58:0d:23:02:94:a5:64:b0:
a2:fc:c8:db:ce:9e:06:0b:32:25:60:11:01:b8:6f:
59:ed:2a:7e:9a:a3:3d:c9:d1:63:03:cf:fc:0b:81:
d3:65:76:f7:26:b0:95:09:e8:94:2a:b6:0c:e4:03:
d3:d4:da:7f:89:78:61:82:4c:c4:ae:d8:7f:87:9f:
b1:e8:8f:08:7a:7b:b4:03:05:ea:df:6e:51:d5:1d:
ba:3f:7d:f8:ac:44:74:e3:c8:3e:fa:d5:77:bf:e3:
65:66:18:ab:d4:41:cd:cc:22:ca:33:4e:29:d8:99:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F1:F6:93:4D:89:44:FE:30:7D:0C:68:05:0F:CD:B4:76:7F:7D:B6
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:20:a0:f5:97:d4:cf:ee:12:cc:e9:29:f9:5b:8b:52:8d:f7:
65:ac:65:ee:cc:cf:f1:82:da:4a:ad:4f:14:70:32:90:a1:b8:
a3:fc:a8:e5:76:8d:de:f1:53:33:af:12:a6:28:64:d1:67:84:
2e:6c:69:c2:8a:24:e2:0e:d9:5e:8b:23:11:4d:c4:b1:a6:68:
0c:c1:8e:dc:d0:57:0a:0e:fd:67:b5:85:5a:68:9f:f6:8f:10:
36:21:01:f8:f6:45:52:d9:f9:6c:2e:b8:a2:57:ca:43:31:30:
69:77:c5:6e:3a:b0:d7:61:31:dd:5b:fc:bd:67:bd:ab:ef:53:
0f:bd:a2:3e:db:23:f3:aa:7d:fd:1e:2a:c6:4e:5c:5d:fb:46:
95:e3:a5:76:65:3d:00:5f:13:f0:12:ca:41:93:30:e2:46:d3:
aa:02:61:b6:f2:02:87:6c:a0:ce:1f:2e:60:aa:fd:fb:35:fa:
f9:68:fd:92:7e:72:25:1b:ff:d3:98:0f:76:42:2f:07:38:7d:
07:5e:74:e6:06:83:51:5b:26:87:02:8d:35:9a:c6:6d:cd:8b:
2c:55:75:ab:5e:53:bb:ce:cd:4a:37:e8:49:5b:07:7f:46:90:
5f:99:fa:85:c7:81:eb:c3:12:69:e3:c5:94:88:d5:60:3b:06:
d7:9a:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:14 2026 by rpki-client