Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: zih1WL8CgAngm675JiU3Yqsv0tONJoWgy58JAb25wB8=
Subject key identifier: 84:5A:BB:85:3E:CC:CE:62:20:60:32:74:09:A2:E8:81:58:AA:9C:44
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019EB80F9E0C6201D7816F7822E62A12CE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 19:01:31 +0000
Manifest this update: Thu 11 Jun 2026 19:01:31 +0000
Manifest next update: Fri 12 Jun 2026 19:01:31 +0000
Files and hashes: 1: 39SWcIru4OOLf3jMU1giDlE-804.roa (hash: VHGE9nOLuGsrrsrjhfRfN6xG0b3Ab1haHqJsSirwxJQ=)
2: q2Eizro8coJ0vQbXr19bHJH4bc0.roa (hash: tmAf20SndhrgKXo0idQ98M/X9oFaPmCTdoXsGpxVz5o=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: GgYoxx824eZ8nHkNI0UmeuLuMJgSvqYvqPw++YvzHzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:9e:0c:62:01:d7:81:6f:78:22:e6:2a:12:ce:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jun 11 19:01:31 2026 GMT
Not After : Jun 12 19:01:31 2026 GMT
Subject: CN=845abb853eccce622060327409a2e88158aa9c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:4e:4c:a7:fa:61:ee:7e:eb:45:ac:f7:89:
f2:91:3c:c5:4f:04:18:b0:b9:06:c1:d3:9a:84:a2:
eb:41:86:44:1b:52:99:8c:00:be:f3:6f:9b:38:ff:
58:43:6a:a7:ef:d9:2b:85:2d:36:94:b3:57:f8:c1:
c5:d1:a3:ea:6e:1d:7c:ce:e5:59:d8:6f:8f:1f:b9:
d3:9f:3a:b5:d4:e2:ec:72:87:6c:a0:8d:f1:75:f5:
f4:f2:50:e6:78:60:25:2c:86:70:4e:3a:24:c3:8e:
74:71:ea:56:27:eb:6a:6a:8d:cd:df:5a:07:af:15:
a3:49:74:9c:f4:54:86:58:a6:3c:ef:da:41:d6:42:
99:e4:1b:dc:2b:5a:1e:71:ff:51:d1:17:b9:e9:06:
b4:97:d3:91:14:86:0e:bc:0b:5e:12:d1:1b:9d:50:
81:8c:5b:f8:d4:5c:45:7c:cf:96:8c:93:f0:43:aa:
dc:0c:0d:a1:a7:82:fe:d8:59:c5:f2:2f:68:d0:b2:
71:88:4e:da:0e:77:33:4d:03:58:8f:52:2a:76:d5:
2e:6f:91:e7:24:08:c7:c2:94:9e:32:95:1b:d9:4e:
1f:0b:e7:a6:7f:20:20:02:6b:4b:ad:51:e4:9d:44:
d9:10:9a:a0:a6:5d:da:82:a0:6b:39:f7:40:43:cd:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:BB:85:3E:CC:CE:62:20:60:32:74:09:A2:E8:81:58:AA:9C:44
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:96:59:d8:0d:9a:61:a6:72:c4:93:b2:ef:36:d7:e1:bd:
f3:1e:28:b9:fe:0c:72:20:74:b5:3c:9d:12:29:e3:20:44:e7:
39:c2:62:15:d6:54:5d:04:bb:d9:08:de:63:8c:7e:af:c0:72:
4f:8a:4a:09:bb:4e:3d:1c:92:f9:0c:18:fd:94:2d:c7:7c:2b:
75:5e:40:52:d5:0b:22:0d:68:bb:a8:94:c7:19:24:4c:fd:7a:
d8:5f:17:8f:42:19:0a:2f:68:0c:60:0e:ad:92:5a:44:1e:68:
ea:6e:35:60:65:a7:0a:e5:a6:7e:30:38:ad:fc:e9:85:26:d4:
85:5c:d3:92:cf:ef:4e:39:00:40:dd:1f:3f:69:63:f6:55:a3:
ec:91:22:50:f7:75:29:7d:77:b9:67:b0:e9:14:64:7d:5e:e9:
b9:88:97:c5:59:03:50:09:e1:e9:d1:6f:c9:48:67:4f:cf:22:
1f:e6:c9:3d:df:9c:88:37:7b:b6:c7:3a:21:86:c3:4e:98:b0:
92:1f:da:ff:98:91:67:a8:ee:93:58:d3:0a:6c:dc:8f:98:38:
53:5f:4a:1b:96:11:18:a6:54:86:9d:ac:1f:9c:87:67:82:71:
0a:b7:dc:ba:a4:3c:f0:de:13:aa:81:5f:91:a2:3f:ee:9d:34:
6d:51:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:27 2026 by rpki-client