
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: wmZmQcak5vpnH91TmOcamaN1TC8/65ytp1/0KVz5c74=
Subject key identifier: 30:F9:65:D5:8F:D4:EA:24:D4:89:37:6A:C3:4B:C3:7F:20:94:A0:1A
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019EB7A104A9DB6CA5B9CBAC868935AD7663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0230
Signing time: Thu 11 Jun 2026 17:00:43 +0000
Manifest this update: Thu 11 Jun 2026 17:00:43 +0000
Manifest next update: Fri 12 Jun 2026 17:00:43 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: HeOup+yU76qnzu53Kh7haI9u7FMg6eCr23ytHDpiR1M=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:04:a9:db:6c:a5:b9:cb:ac:86:89:35:ad:76:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Jun 11 17:00:43 2026 GMT
Not After : Jun 12 17:00:43 2026 GMT
Subject: CN=30f965d58fd4ea24d489376ac34bc37f2094a01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:94:21:4d:76:ae:ed:39:43:e6:53:85:60:
f7:9f:c2:ee:68:11:23:73:1e:13:a9:29:73:cc:aa:
6d:84:5e:24:13:06:b5:05:2f:58:e3:dd:dc:97:41:
9f:0e:9c:46:5b:9d:97:bb:03:b4:8c:70:16:47:b0:
bd:9f:6f:e8:0f:39:64:95:e7:e2:c9:2f:cc:9b:d1:
0b:da:98:bb:bb:16:95:14:56:f6:80:df:2d:ad:89:
9b:c7:37:7b:44:3a:85:2b:56:b8:dd:2c:46:a6:c8:
da:14:a9:d5:f9:56:b6:ff:14:b4:af:ba:7d:5d:5f:
46:5b:67:3a:5a:38:d5:7d:21:57:6b:60:51:4b:8b:
e7:91:6f:6f:5a:79:4f:e1:be:5d:aa:34:3e:b4:13:
3e:38:9f:b9:6d:a7:99:3c:ae:42:fc:ef:85:b8:29:
62:e7:0a:3c:7c:f5:d9:00:5e:d7:07:75:6c:0b:53:
e5:69:5b:52:fc:5a:cc:d5:01:57:7b:dc:dc:5c:87:
24:b1:75:fb:1f:58:a0:6d:02:9f:21:7a:da:f8:a2:
36:be:f2:f7:e0:e7:cc:12:9a:5e:f7:2f:5b:8a:d3:
f2:35:50:d7:06:67:5f:43:10:0d:86:a1:5f:4a:87:
e3:ba:88:24:55:88:bb:e7:b3:48:fe:d6:61:84:d3:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F9:65:D5:8F:D4:EA:24:D4:89:37:6A:C3:4B:C3:7F:20:94:A0:1A
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ae:4b:31:a0:39:cc:f0:ea:8d:95:23:58:cc:ed:42:34:64:
94:72:67:e3:66:14:2a:44:3a:75:03:5c:8e:9d:d7:23:52:68:
ef:40:eb:8b:c3:8b:64:bd:31:8c:e1:7a:e4:79:65:94:41:b8:
5b:ed:99:bd:8b:e7:8a:89:df:15:05:c6:55:f1:99:e2:9f:19:
8b:38:88:46:87:93:a6:8b:fb:b5:a0:96:e4:ca:e8:35:59:b9:
8a:a2:c9:ed:b4:eb:fc:65:7d:36:cf:e1:de:f6:5d:65:5f:60:
68:08:e8:b6:10:f2:3d:6d:8b:72:96:8c:4a:b1:65:d0:3d:17:
69:73:9d:9b:6e:44:45:4e:b9:c9:c4:72:cc:c9:11:81:3a:d1:
e1:87:44:4b:5d:f8:55:24:3f:40:ae:29:bc:ce:59:b6:0c:de:
18:bb:a7:0e:f0:34:26:a3:ee:64:ed:0f:7f:8d:7c:ae:78:97:
34:e1:85:69:7b:d7:07:c5:b2:3c:37:ce:13:c2:5f:ce:b2:80:
ac:6e:d2:91:77:62:a8:93:05:18:49:bf:3b:ab:55:5e:93:ba:
2e:3b:10:d1:e9:c0:c5:84:b2:fa:0d:32:b6:a9:6c:8c:1c:fc:
06:34:e2:96:4f:76:73:3d:02:a2:fa:74:7e:e7:ac:5e:41:df:
34:13:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:25 2026 by rpki-client