Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: DQhGxHRS5zHvrFuVfPYd0p225zojSMrDfWti/XViTVg=
Subject key identifier: 11:17:A3:A6:F0:56:38:9C:21:3D:93:6B:7B:ED:F4:B5:80:A0:59:7E
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 019EB7D7B549FA9B78147B83CE1781A4F6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 0BF5
Signing time: Thu 11 Jun 2026 18:00:27 +0000
Manifest this update: Thu 11 Jun 2026 18:00:27 +0000
Manifest next update: Fri 12 Jun 2026 18:00:27 +0000
Files and hashes: 1: 1ct-Ix4vqSryVTwpOe2dk96HqOE.roa (hash: ZHQYlnog1xkIVPDyJbvsnZ9amnNHU1IoPvRVcPKPYG8=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: ssi6/agtcUqqQaxfoXz3CFd+/aUAaT7nm4gXQbRcJ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:b5:49:fa:9b:78:14:7b:83:ce:17:81:a4:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Jun 11 18:00:27 2026 GMT
Not After : Jun 12 18:00:27 2026 GMT
Subject: CN=1117a3a6f056389c213d936b7bedf4b580a0597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:97:b7:5e:0a:d8:75:2e:90:80:48:bf:70:
b7:bf:3e:fe:63:66:3a:de:95:64:8d:d8:af:c9:bf:
1d:84:10:5a:aa:2d:5c:05:ef:ea:85:ee:ce:b8:71:
53:17:d8:a5:59:c3:ac:0d:75:fd:4b:09:35:73:38:
c2:00:69:58:f3:94:19:b2:21:38:50:97:42:ab:1f:
ca:0f:4e:67:7e:f5:a6:bb:dc:2e:6d:eb:ca:e5:d9:
3d:dc:aa:10:57:3a:e7:24:11:96:2c:cf:a4:a1:56:
d3:b8:7b:2a:59:c6:40:88:4e:d9:1f:77:f6:be:79:
14:34:ca:f3:2c:b8:d2:48:c4:74:5a:00:8e:87:24:
e3:a0:17:bc:2a:13:2f:0e:b5:49:58:0e:de:a5:dd:
f6:b3:c1:37:2d:25:b7:52:db:74:78:8d:e3:67:f1:
93:f6:85:5d:d8:24:62:2e:df:4f:ef:a3:f2:29:0c:
5b:ca:79:91:57:58:2d:15:33:97:4a:20:b9:9c:7e:
a6:36:48:51:4e:0d:79:24:ad:e0:8d:e5:7f:8c:7f:
e1:ec:95:5c:98:e6:8c:99:bf:f1:ec:03:e6:c1:e6:
24:8d:74:14:b6:35:35:f9:d0:0e:77:b2:19:58:88:
21:3e:e9:c6:4e:7a:de:24:8d:20:e5:ab:06:d2:01:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:A3:A6:F0:56:38:9C:21:3D:93:6B:7B:ED:F4:B5:80:A0:59:7E
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5e:46:25:89:d1:e0:6f:22:be:53:23:ff:7d:db:b8:95:44:
93:92:ba:f2:a6:57:b2:e7:90:4a:fc:2b:aa:56:48:71:a8:43:
a0:b6:e6:02:ea:2d:09:cc:ab:26:3b:7e:23:16:f8:1c:94:83:
82:c4:ea:de:b7:73:c7:78:7c:c1:ae:b2:cf:b2:10:cf:43:72:
fc:03:c3:a8:ab:b9:ef:ac:a1:ad:50:47:0b:6e:c0:c7:60:d9:
93:ad:a4:03:a1:60:e0:53:b9:84:64:ae:86:5b:a7:13:67:c3:
56:b2:08:f1:02:3a:0d:a9:11:3a:b2:1a:2a:22:2a:07:7c:e9:
c6:55:e4:1f:30:de:8f:f3:a2:ae:7f:20:b4:b3:4b:2f:ca:be:
01:4b:b7:92:21:e6:bb:b1:e8:e7:22:37:4e:9e:80:29:ec:63:
3b:ec:22:80:88:ef:11:e5:3d:a9:dc:d2:39:86:85:2d:bf:40:
8a:83:20:b0:98:a0:ce:ae:6f:6f:bc:fc:d5:c7:be:42:ec:65:
f4:70:c2:96:d5:3d:9e:84:7d:7f:35:86:c2:41:df:ed:77:e3:
e0:7d:72:d4:71:b3:54:a4:22:9a:c9:7d:30:f9:51:4a:8e:03:
2c:8f:93:74:7d:49:10:c6:1d:d1:62:c0:03:fb:dd:00:1f:ed:
b9:fe:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:20 2026 by rpki-client