Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: S2JtDUXAKx60fkbddAGVBeFPjYK8AAB3EFCamt8E27g=
Subject key identifier: 92:BD:64:8C:84:30:23:6F:BD:05:C6:8D:40:1A:1B:25:0B:8B:DB:94
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019F126606B989EC7ACFF0F9C61F3DDD5E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 08:01:44 +0000
Manifest this update: Mon 29 Jun 2026 08:01:44 +0000
Manifest next update: Tue 30 Jun 2026 08:01:44 +0000
Files and hashes: 1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: S4zgX1BaOtfnQ8tcTSsH0n00QCtzyOD4tItNM96MwLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:66:06:b9:89:ec:7a:cf:f0:f9:c6:1f:3d:dd:5e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Jun 29 08:01:44 2026 GMT
Not After : Jun 30 08:01:44 2026 GMT
Subject: CN=92bd648c8430236fbd05c68d401a1b250b8bdb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:de:d3:54:f6:83:19:79:43:00:7c:c3:74:
59:01:f2:b0:a2:cd:3f:ef:04:60:de:b9:01:66:c9:
c2:f2:1f:45:2b:51:21:5d:7d:09:b7:6e:9d:d4:a2:
f3:42:4a:35:54:da:a1:9d:59:e6:7a:87:3e:34:29:
49:37:5f:dd:57:2a:31:bb:9e:71:17:31:8b:99:ea:
b1:19:51:fb:aa:21:06:b2:1c:1e:b5:83:a6:dc:6e:
2b:7e:16:ff:75:70:e0:6a:2f:d6:02:87:e8:97:4b:
85:45:97:ad:a3:25:09:97:1d:69:04:57:5f:19:7d:
99:40:14:af:ed:09:15:59:9f:61:48:43:6a:36:fc:
c6:c6:13:d2:72:54:93:42:15:b7:ae:41:9f:7c:6f:
28:62:09:e2:da:e7:b4:18:45:b7:40:01:be:94:cb:
a9:6e:01:f4:4e:41:8f:5e:be:65:d7:1f:0f:58:2e:
90:cd:4d:18:8a:99:e9:5a:ff:60:75:16:f7:f5:57:
22:b3:ef:62:35:a2:4d:07:ea:51:19:65:08:b8:b0:
05:a1:74:23:e6:0c:51:9f:53:a2:05:af:67:71:8b:
46:b3:d5:6d:66:c6:74:27:c0:9d:85:46:33:fa:8a:
1c:24:25:35:ce:5a:28:04:a3:ca:50:2f:20:af:f2:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:64:8C:84:30:23:6F:BD:05:C6:8D:40:1A:1B:25:0B:8B:DB:94
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:49:8f:d6:58:76:bf:34:11:53:85:ef:de:d9:c2:9b:bd:bc:
49:31:ab:87:37:c9:44:d4:57:cc:93:8f:86:92:15:56:0d:cc:
ac:01:f5:c8:59:a4:3e:ec:29:1e:85:b6:fb:25:7a:5d:72:f5:
40:60:75:da:fb:4f:4b:79:da:3b:27:18:ae:a8:6b:d9:e4:08:
62:8c:14:c4:d9:d0:00:4d:de:97:1f:25:19:2c:7a:29:ad:94:
48:ca:c2:3a:0d:38:b9:01:61:01:12:a7:d5:44:76:4b:e2:39:
20:8d:27:37:48:7e:fc:f4:db:b2:3b:1c:99:e8:0d:c8:cf:38:
e8:3c:4a:bd:49:79:2a:c8:76:cd:8d:e6:96:2e:13:c4:41:48:
fe:d8:2b:fc:fe:93:df:2f:84:a8:0e:47:6c:b6:be:59:3b:f8:
b1:da:c3:5f:82:20:8b:60:fd:7f:61:a3:7f:32:93:98:f9:da:
6f:59:fa:ea:9c:41:b6:82:ff:4d:69:cf:2c:59:a7:1b:2c:0a:
85:d2:88:d4:47:85:b0:a0:88:92:b6:83:66:b2:5f:ea:7e:cb:
15:7b:55:ba:13:c7:29:9a:ac:95:06:a8:66:06:10:c7:49:64:
e1:9e:ea:86:0f:f1:e6:57:bc:c2:bc:40:f3:e3:c5:30:a2:f5:
df:24:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:42:19 2026 by rpki-client