Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: P4/1tbvZHRRp9vQDSpdQU1WtYULm+ZBBBLf45Xnt0C4=
Subject key identifier: 17:92:8D:32:6A:A4:38:61:54:3E:82:4C:A6:ED:A0:BA:CA:1F:14:7C
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019EF010DEC1E9A7E131460A040CBB34E155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1906
Signing time: Mon 22 Jun 2026 16:01:37 +0000
Manifest this update: Mon 22 Jun 2026 16:01:37 +0000
Manifest next update: Tue 23 Jun 2026 16:01:37 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 1rn1IJJpMeE+mWBPPFe3OOx+WgxlQOP2n4JAwg+fg30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 14:23:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:10:de:c1:e9:a7:e1:31:46:0a:04:0c:bb:34:e1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jun 22 16:01:37 2026 GMT
Not After : Jun 23 16:01:37 2026 GMT
Subject: CN=17928d326aa43861543e824ca6eda0baca1f147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:39:db:35:b9:e7:a7:bf:34:f0:eb:ad:e8:
b1:7c:f0:dd:87:ed:6e:64:4d:7d:01:fc:24:df:e1:
88:49:70:f5:65:a1:52:0e:a4:97:e5:fa:5e:ff:a3:
84:07:6a:8f:f4:4f:b4:95:ed:72:a0:66:2b:06:52:
92:55:24:d9:b9:7e:be:86:2f:64:51:2a:f3:2c:20:
04:d0:c9:b4:d2:1c:34:68:eb:6d:b4:df:f5:42:c9:
42:6b:17:73:8e:89:dd:e7:af:3f:1e:07:b5:ec:6d:
3c:f2:fa:a5:3b:62:52:ce:e4:b1:e5:f8:f9:7c:0c:
23:51:57:e6:a0:c3:a9:d9:33:d4:58:80:a8:8d:b8:
ba:ec:10:df:7f:1b:a7:ce:f0:0e:c4:ab:6e:c7:aa:
ec:2b:f4:e5:e3:66:97:11:fb:93:bc:02:10:3e:c0:
92:aa:fe:5e:f6:14:8a:e4:5d:5a:b5:9d:bd:ca:99:
01:e5:50:67:5a:89:1d:c9:34:2b:42:6c:eb:16:2e:
b0:eb:13:63:07:33:0d:16:6d:38:32:95:fc:2c:b1:
5f:17:de:49:16:53:f0:e2:e7:fe:16:2d:70:52:c2:
4a:19:34:ff:21:90:7c:17:f9:d0:40:18:e6:91:17:
89:e6:2e:78:92:24:b6:23:ff:71:69:47:b6:47:56:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:92:8D:32:6A:A4:38:61:54:3E:82:4C:A6:ED:A0:BA:CA:1F:14:7C
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:21:71:8c:20:0b:9d:55:96:ac:a7:d2:ef:c7:7c:28:2e:2f:
6d:c1:66:53:00:67:3a:4a:df:97:58:6d:83:62:7d:4c:e9:a5:
18:41:49:38:8f:c5:78:c3:75:a0:22:c3:64:81:58:c0:53:e4:
d0:5b:1e:0b:80:ad:8c:6d:88:54:29:a2:a3:e5:71:5b:68:41:
d3:b4:14:e9:8d:2d:55:2e:48:94:cb:bd:75:4a:22:26:26:a7:
d8:89:a7:1c:29:ea:c5:4a:07:49:21:91:c8:e2:00:b3:60:f9:
de:12:ce:ae:cf:4c:a6:0b:58:a2:1e:f3:76:89:11:7f:89:6b:
3b:26:28:9c:86:49:48:88:c2:f6:e1:56:4b:78:c2:15:6f:4b:
ea:6d:79:fa:a3:8e:fb:59:33:7c:d8:9e:15:8b:15:79:62:0f:
e5:ab:3f:c4:0f:28:b3:2b:3f:26:22:31:a3:c0:99:50:61:fd:
23:77:0f:a5:e5:ae:4a:ea:a1:24:cb:3e:29:58:be:a5:15:bd:
12:79:25:05:fe:28:56:9e:1a:28:87:bf:0d:bd:18:5a:78:7d:
51:97:77:89:db:4e:43:bc:9e:e0:31:13:a0:2f:41:03:31:85:
cc:8f:15:68:b8:78:32:57:d4:bf:1b:8f:e2:bb:e9:fd:26:b5:
f8:65:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 19:58:08 2026 by rpki-client