Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: 3NM1leyH28UiMzSjGotu36x4oytMPTfPNUQhyMuWuvk=
Subject key identifier: 3D:14:E4:A1:3D:68:E2:3F:90:0C:D2:EA:E8:F1:AB:71:E3:1A:D0:79
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 019EE28B965CCB5CFD12FA44B21E22B05129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 0CA0
Signing time: Sat 20 Jun 2026 01:00:59 +0000
Manifest this update: Sat 20 Jun 2026 01:00:59 +0000
Manifest next update: Sun 21 Jun 2026 01:00:59 +0000
Files and hashes: 1: dk1G9hz2trfq5CaaUBMe9RcS93I.roa (hash: lH6gfT8/HMNpYY4aojCo2W76iGRxmIa0HJsfcgDAePE=)
2: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: /fhJ56L5824m+wCYcB2fWpuwWiCF6AP5r5Tew3mT9do=)
3: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (hash: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:8b:96:5c:cb:5c:fd:12:fa:44:b2:1e:22:b0:51:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Jun 20 01:00:59 2026 GMT
Not After : Jun 21 01:00:59 2026 GMT
Subject: CN=3d14e4a13d68e23f900cd2eae8f1ab71e31ad079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:08:ef:10:f7:1e:15:d8:62:90:50:09:cf:
c8:51:79:26:9d:de:e8:d8:bc:fd:42:b7:ce:3c:3f:
bc:9a:db:dd:1b:08:da:f8:5e:6d:f8:e0:b6:df:1e:
85:bc:bd:17:0a:64:c4:ce:a2:fe:5e:4d:cb:7d:c9:
86:b8:00:19:10:04:a3:69:86:6e:75:19:f0:b6:3f:
0b:d6:eb:24:46:b3:61:e4:00:b5:d1:df:f9:4d:15:
34:64:f8:83:5e:37:d6:3c:3d:27:d5:2a:80:63:a5:
a1:ac:b6:37:84:70:14:f2:6d:b8:83:9e:6c:6b:3b:
08:6c:f8:31:31:27:b8:37:76:a2:e3:61:8a:9a:01:
de:36:63:97:ad:74:df:8c:a2:4c:5d:b5:86:98:5a:
65:39:cc:e5:c5:b9:de:86:a8:13:fa:22:0a:7d:40:
23:51:03:37:1e:ce:42:09:f3:af:e2:d4:e2:1a:ff:
77:5a:d0:91:ac:43:9d:98:5d:93:0e:2b:e3:59:24:
94:3b:ef:23:33:17:ee:56:68:55:74:c6:ec:62:8c:
a4:5d:3e:a7:04:43:a7:82:2b:ff:db:05:00:36:3f:
41:a5:15:a0:cf:5a:63:0f:1b:c3:81:1c:79:ef:e0:
d9:3f:65:63:c0:b7:5c:a6:60:ec:5e:c8:34:22:bb:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:E4:A1:3D:68:E2:3F:90:0C:D2:EA:E8:F1:AB:71:E3:1A:D0:79
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:34:ff:50:13:fc:7c:80:55:a5:b0:48:9e:73:7a:56:28:52:
64:aa:05:10:0a:09:ab:33:83:93:e9:57:58:7d:25:bc:cf:31:
76:b8:49:b6:c1:76:a7:8f:79:c9:fb:36:80:3c:cb:30:01:01:
8d:82:30:eb:49:4b:0b:f3:c0:ea:0b:49:b1:dd:53:3a:43:c3:
ac:ee:87:13:f5:28:9d:86:80:05:74:f7:6f:91:36:74:a0:83:
fb:69:0f:61:5f:6e:6a:17:91:d4:a6:28:09:e5:96:67:87:f1:
f4:15:2b:d1:80:26:64:13:29:90:4f:2c:ea:20:1f:ad:d7:cb:
5a:38:39:87:7d:e9:90:90:0f:2b:64:67:95:bb:2f:07:2d:ad:
04:4e:03:6f:be:1f:4c:09:89:c7:31:ae:83:3b:92:7b:a2:56:
0f:68:86:f2:94:6c:42:63:e7:11:80:d0:29:89:4e:57:be:47:
97:26:59:2e:03:4a:02:24:85:9b:66:ef:b9:7c:7d:e7:10:55:
d0:2f:40:ee:79:92:10:40:53:26:62:52:a4:1b:63:d2:d1:d2:
1a:34:40:83:03:af:ea:c9:e4:88:22:4a:a0:28:a4:ac:e0:e4:
5a:31:a3:f6:17:d9:71:ec:3a:c7:fd:48:6d:66:91:04:4e:61:
09:13:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:22:52 2026 by rpki-client