Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
File: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft (raw, json)
Hash identifier: yM2POUvRJXATxvTmR8jfc60BzCOZEQeaOicXb9HY0s8=
Subject key identifier: 4A:16:5E:A7:89:8E:12:E9:9F:5A:39:A7:59:20:9F:30:61:85:8F:D9
Authority key identifier: BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
Certificate issuer: /CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Certificate serial: 019E295E0A341452C32B725F3B858BE70476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
Manifest number: 20
Signing time: Fri 15 May 2026 02:01:29 +0000
Manifest this update: Fri 15 May 2026 02:01:29 +0000
Manifest next update: Sat 16 May 2026 02:01:29 +0000
Files and hashes: 1: Gk3qRjHc4sWF2rOaGo2ujBXucwU.roa (hash: pHlVorceZH8dGeu3/EtQuQX+jpCTueBXs4FELHev8DM=)
2: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl (hash: 1E8Yrs7bExa9P/vagShV/GyWZZoNB/MUyW4DxGNZiDk=)
3: yH4YewMKblaB_L12xQ35G0SXRYk.asa (hash: nott0T0TIvklgCDjdkStX556EDcXcSa/s6c9BihWlRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5e:0a:34:14:52:c3:2b:72:5f:3b:85:8b:e7:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Validity
Not Before: May 15 02:01:29 2026 GMT
Not After : May 16 02:01:29 2026 GMT
Subject: CN=4a165ea7898e12e99f5a39a759209f3061858fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:77:bb:57:ae:5c:79:75:c2:3c:9f:22:b6:
a4:36:15:36:80:90:6c:80:70:e1:a8:af:95:66:c2:
ae:af:c5:91:5b:02:f4:14:7e:4d:ca:c3:8a:f2:69:
0e:2e:3c:be:82:2d:a6:e2:a5:51:d8:aa:e7:49:ea:
60:de:41:90:79:9f:45:9f:f8:5c:63:40:51:55:02:
95:32:61:f1:74:10:5b:b7:01:08:12:f1:9f:33:e7:
54:4e:b9:a6:bb:c7:05:1f:e0:d5:74:f3:55:db:cb:
31:58:bb:e2:f4:06:77:70:c4:21:24:79:53:aa:45:
68:ab:89:67:9e:f2:11:cc:f8:7e:56:03:f6:2a:22:
ff:a3:5c:88:7b:7d:db:c6:ad:1d:70:5d:56:2b:21:
92:77:6c:a3:ce:7e:04:0d:e5:b8:b0:6f:be:af:cd:
85:58:1b:42:11:de:f7:f9:51:e5:ea:4b:8b:27:37:
f9:22:54:bb:a2:e8:e0:13:ee:a3:73:b3:36:b9:3a:
b4:c8:e4:75:43:54:34:f8:53:3e:01:a6:6d:f9:51:
0b:db:48:62:b1:35:b1:c2:60:95:0b:06:54:48:e2:
9b:ac:6e:b8:3d:f2:fd:b6:13:a7:c4:ff:66:22:94:
ca:a8:d5:e6:34:78:1c:67:0f:4e:e1:20:0a:33:7d:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:5E:A7:89:8E:12:E9:9F:5A:39:A7:59:20:9F:30:61:85:8F:D9
X509v3 Authority Key Identifier:
keyid:BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:14:d1:bf:83:67:b4:38:93:dc:91:70:a2:ef:b5:be:bd:2f:
c8:52:80:28:5a:af:c4:37:31:d2:d0:e6:08:7e:91:2f:d8:69:
22:6e:2d:d9:09:01:81:64:bf:fc:8d:3d:cb:a9:53:53:17:c5:
b4:6a:07:ce:df:02:9d:92:04:8b:b9:86:6b:c4:6d:fd:fa:b1:
43:f0:ea:6c:73:20:fb:23:b5:40:a5:e7:b4:98:8d:bb:f2:51:
75:eb:0a:95:53:38:7a:b4:c8:68:42:a8:44:e8:71:76:ea:c9:
e9:49:67:46:65:96:56:63:3b:c4:8b:7d:8c:54:23:79:ae:81:
97:cf:d2:fd:f0:7b:eb:36:cd:a8:be:94:2e:13:9f:66:23:fa:
42:ca:37:fc:46:32:67:87:fa:c3:f6:53:fb:c7:5a:9e:57:6d:
a6:89:c8:ec:9d:47:28:0b:09:2a:b3:a8:b3:c8:10:ed:3c:ea:
13:00:22:8a:3b:59:b7:e7:00:ae:5e:bf:fe:e2:01:27:15:ac:
5e:ce:73:cc:6c:50:b2:3e:a4:28:cb:18:e3:e1:fb:c3:cb:54:
60:56:52:7f:b5:a1:39:09:73:d1:5d:ec:33:f9:e7:7e:68:f5:
8c:84:a4:4c:2a:9b:ca:42:2c:64:c6:dd:29:55:e3:7d:f8:e1:
f9:e7:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:53:24 2026 by rpki-client