
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: aKB+BIF/lSpAsck+Fnc8rtmlQGsO+kMPP46YrMftukU=
Subject key identifier: 13:3C:81:72:9F:19:A0:25:13:53:44:B8:A6:88:EF:FE:2E:23:6A:82
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 019EB6208AC815C11A5A3DA2E8A4E9CC7557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 10:00:46 +0000
Manifest this update: Thu 11 Jun 2026 10:00:46 +0000
Manifest next update: Fri 12 Jun 2026 10:00:46 +0000
Files and hashes: 1: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: b2y3hl3TfzZoK/zl5NlQ0I+CbefjfoB+OrUB6jHjAEs=)
2: z7dvscAPc8RwI0qZ-f09vWYFrxY.roa (hash: cEZ+Bp7svftrWkfXKY4Q3ijh9mhZFUHispLnsT5moTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:8a:c8:15:c1:1a:5a:3d:a2:e8:a4:e9:cc:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Jun 11 10:00:46 2026 GMT
Not After : Jun 12 10:00:46 2026 GMT
Subject: CN=133c81729f19a025135344b8a688effe2e236a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:57:a9:55:8e:dd:64:64:fc:d9:ca:6d:76:
b4:a4:83:85:2c:cc:4c:90:1d:d2:62:1f:f8:3b:ca:
87:86:f4:75:85:ee:e3:57:7a:71:09:c2:2d:45:09:
c9:b2:30:6f:bc:b3:97:0f:af:c4:00:47:4e:59:38:
6f:db:64:08:cb:a9:ab:b5:a9:bc:3a:a5:70:7d:1b:
24:b7:4f:9f:5b:49:44:08:9d:a1:45:ec:e5:5d:4d:
00:40:6c:d4:aa:c7:5f:3c:ab:53:c0:d7:5a:2f:98:
90:a4:5f:89:be:ed:94:36:bd:65:b8:19:3b:5b:92:
08:ee:a7:28:b4:50:c6:16:21:e7:b4:30:9d:fd:dd:
27:97:76:46:9c:4e:38:9e:0c:1a:ae:0f:ff:3d:85:
d2:db:12:de:40:5f:23:2a:4c:a4:2d:04:e1:41:02:
e4:85:c3:06:a1:2e:0b:69:49:39:7e:d4:df:5e:89:
d3:84:21:2c:07:cb:03:8a:19:37:ec:2e:8c:0e:fb:
cf:76:00:23:51:85:d5:eb:90:2d:ad:54:c1:b5:8d:
bc:fa:ac:fa:f4:15:78:8e:93:32:73:94:e0:a6:96:
2b:ec:47:5f:06:ff:ee:86:6b:c6:97:a1:33:51:32:
27:be:d7:46:57:9f:7b:5c:d5:3b:f6:17:03:37:33:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:81:72:9F:19:A0:25:13:53:44:B8:A6:88:EF:FE:2E:23:6A:82
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:7f:21:8d:02:0e:76:52:1f:6d:51:1a:39:57:3b:35:e4:
29:08:97:9c:c3:e4:3c:45:11:9e:35:3e:f5:fb:d3:40:df:a5:
cb:67:93:34:55:a2:6e:89:47:6b:df:53:86:ca:ce:16:75:f6:
00:6d:98:56:b1:6c:64:0c:c0:30:d1:08:30:5e:0b:7e:5a:e9:
e1:0b:18:56:53:53:23:ac:12:ba:51:96:ee:5f:d6:c6:02:b0:
9d:c1:7f:37:25:72:df:a9:29:d4:bd:73:18:31:5f:e4:72:ac:
41:a5:17:b8:75:ac:c9:5d:08:41:f6:f7:2e:5b:16:32:38:7d:
37:5f:19:e6:95:6d:92:98:c1:98:1c:2d:0a:50:2d:52:ad:dc:
c0:50:9b:09:0d:48:b1:ea:72:d2:3f:6d:b1:49:02:82:bb:30:
27:bf:81:de:20:ba:52:47:f9:37:02:4f:2a:2f:46:93:63:78:
e6:64:28:5f:54:b8:60:7c:61:6b:23:b9:53:f0:33:45:06:6c:
52:98:35:30:7d:b5:aa:99:b1:f8:72:33:a5:66:d7:c4:b1:0a:
8c:95:8e:68:39:a8:8e:ad:d9:61:32:1f:e8:39:e0:c1:45:94:
75:78:40:5b:b9:e5:28:0d:64:e1:98:8a:dc:ea:92:73:bf:d7:
09:a3:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:13:03 2026 by rpki-client