Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: xcpzKrffBCGKJLWWx4YZiwHQa/+SjtLcLds5pb+9vXI=
Subject key identifier: FF:C0:6F:AC:53:03:16:87:18:D5:09:89:27:86:04:2D:AE:E6:72:FC
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019E9101D3A05DA12DCF57B2B836189E8BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0B8D
Signing time: Thu 04 Jun 2026 05:01:16 +0000
Manifest this update: Thu 04 Jun 2026 05:01:16 +0000
Manifest next update: Fri 05 Jun 2026 05:01:16 +0000
Files and hashes: 1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: X7Qq9aBBYQfRBx2qRmlIZ9fCvDt5FdHb1ugxVYOxqhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:01:d3:a0:5d:a1:2d:cf:57:b2:b8:36:18:9e:8b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jun 4 05:01:16 2026 GMT
Not After : Jun 5 05:01:16 2026 GMT
Subject: CN=ffc06fac5303168718d509892786042daee672fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:d2:fd:57:08:0f:95:b9:cd:ba:42:7f:4b:
c6:f9:5b:50:96:fd:d6:08:e8:88:33:d7:bc:6b:7c:
bf:e9:f6:1e:96:4c:85:2c:50:d7:cc:c6:f7:6c:fc:
c8:14:b9:85:09:b5:1b:63:ea:cb:ae:db:d3:6b:d6:
b9:f2:89:86:4b:05:ec:9a:1d:26:23:c0:09:cc:42:
f3:77:24:32:89:62:05:ee:d0:dd:02:c7:3f:5f:b0:
63:50:e0:2d:8b:64:80:48:04:41:6f:d1:ad:98:e2:
80:91:5a:ae:5e:ca:85:6d:8f:74:ea:89:75:7c:e0:
d5:45:d6:16:67:8d:0d:b7:e1:c8:1a:b5:3e:db:5f:
94:e5:20:96:f5:fe:8e:5e:e4:49:e5:68:cd:fd:67:
cd:58:48:7c:9d:db:5e:2b:99:bb:f1:f0:ed:6d:c1:
02:a3:7a:a5:5b:c7:4d:d1:84:b4:2e:7d:94:44:83:
57:95:a4:6b:0d:4a:d1:00:66:a2:25:eb:30:52:e6:
17:73:e1:c2:ec:66:1d:45:d5:ae:e9:f0:e2:a8:07:
b5:e0:c7:0d:17:48:4e:55:c7:bc:04:04:ae:91:54:
52:04:9a:68:58:10:f7:b8:dd:f2:8d:5b:d0:a2:8a:
7f:85:0e:4c:42:4f:d3:f9:58:9f:69:57:2c:cb:7c:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C0:6F:AC:53:03:16:87:18:D5:09:89:27:86:04:2D:AE:E6:72:FC
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ea:b6:3f:9f:1b:a1:17:21:d5:65:43:82:5a:d9:2b:75:d3:
3e:04:8e:bc:80:34:0b:da:0c:75:51:cc:5d:82:a0:03:38:ea:
74:c3:9a:1a:5d:e6:80:5c:da:ad:9a:60:9a:18:6e:38:13:a8:
ac:07:c3:72:e7:27:17:af:b7:1c:8c:46:6b:5a:29:5d:1f:fa:
7d:17:4e:a7:d5:da:cd:7e:b8:2f:98:8c:9e:ae:5f:c8:f7:fd:
d3:99:86:a6:43:94:91:04:18:0f:65:e0:74:52:fd:6d:cd:db:
40:a9:31:88:f8:89:ce:4d:4b:8b:ef:2d:3e:51:13:47:a7:b2:
fd:c2:ba:d5:d6:70:86:16:5e:2a:d3:f9:7c:43:5f:cc:52:15:
bf:5f:68:ea:40:c8:43:4c:47:3d:cb:0a:3a:a5:75:5c:6a:1e:
67:c1:8e:a0:12:d1:dc:08:8c:21:b4:75:b9:f8:5a:86:05:b3:
49:e2:42:1e:c3:2d:73:07:57:d7:37:1d:3a:fd:db:cc:ce:de:
ce:94:19:e2:2f:c7:06:1d:08:7d:0d:37:5b:df:f4:6d:ef:25:
59:de:43:d3:33:89:39:8d:3d:be:68:1c:25:3e:d1:bd:4b:3a:
9e:c8:82:b1:00:3e:ff:15:a7:1c:e2:4a:29:1e:ca:0b:95:97:
ac:d2:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:24:05 2026 by rpki-client