Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: 4jSnPR1DHKduULQz96v6K9d/gihcIagiGjL0aifSocQ=
Subject key identifier: 30:FC:51:C2:DC:AB:7D:A7:BA:45:40:FC:C0:25:C4:A5:B7:99:F7:D9
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019EEB8EC5721ACD4DC09C7429B1E25AA2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1973
Signing time: Sun 21 Jun 2026 19:01:02 +0000
Manifest this update: Sun 21 Jun 2026 19:01:02 +0000
Manifest next update: Mon 22 Jun 2026 19:01:02 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: uNFQMZ2SAg8+JRPlM742qCm3ZEOFShR+CJC29pSL54o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 17:55:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:8e:c5:72:1a:cd:4d:c0:9c:74:29:b1:e2:5a:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Jun 21 19:01:02 2026 GMT
Not After : Jun 22 19:01:02 2026 GMT
Subject: CN=30fc51c2dcab7da7ba4540fcc025c4a5b799f7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4f:ce:8c:27:18:18:45:69:09:34:82:b2:97:
ba:0b:61:1b:d8:f8:66:4f:f0:18:48:4c:05:8c:93:
34:19:2b:69:3d:2c:8d:27:04:fe:e4:76:1b:69:30:
08:6f:b7:d0:18:bc:49:7b:7a:37:9e:3a:99:5b:d5:
35:bf:15:79:6e:35:be:13:76:1f:25:96:b0:c1:2e:
44:e8:e2:aa:84:a8:67:23:86:07:14:98:25:bf:3f:
6c:c2:52:8d:4d:ee:56:9b:2c:39:f0:d9:c6:e3:44:
d7:dc:f4:7a:e7:0f:b4:d8:52:c7:ac:b0:69:34:02:
da:6d:1f:af:85:b1:f5:99:94:a1:8c:b0:61:81:d2:
19:ac:48:da:8a:71:c5:ae:ce:66:08:10:25:99:38:
e0:68:3b:3d:00:7d:24:56:c8:1a:73:38:0a:b1:3c:
d4:66:cc:7e:d5:1c:1a:e1:75:ba:a9:2a:1d:86:cc:
7d:9f:a8:95:25:c2:f4:d4:93:78:dd:95:c9:b0:44:
e5:d8:05:21:09:0d:fb:37:73:74:d6:c5:7f:7c:f9:
98:75:35:f1:29:18:bf:fd:5d:34:5c:af:cf:98:aa:
45:5a:b3:ea:d6:fa:d9:8a:04:77:0d:92:03:1f:69:
43:b7:6c:04:39:6c:d5:8e:01:7b:de:4c:c7:c1:cf:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:51:C2:DC:AB:7D:A7:BA:45:40:FC:C0:25:C4:A5:B7:99:F7:D9
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:63:53:0a:86:f8:c8:f7:74:3d:92:c9:69:d4:a3:9e:5a:37:
77:c2:c7:2a:1d:16:61:c2:ac:8c:ec:51:c3:99:af:23:c0:17:
54:e1:89:40:e1:c6:80:53:55:03:cd:52:a1:b1:fb:a5:34:0b:
14:b6:d3:66:1d:03:b2:c1:87:d0:cb:d3:e7:c5:72:26:b6:78:
1c:71:7f:d8:35:7b:08:8a:4e:00:3d:5a:16:e5:d2:6e:a7:b1:
11:be:32:09:72:2a:95:ed:15:8b:da:a3:f8:be:74:26:94:3e:
bd:8f:6c:a2:d5:8d:9a:e7:51:29:6a:f8:b4:f9:44:2c:44:7d:
ae:09:4a:f1:2c:15:5b:e6:01:45:e8:81:a8:c3:15:95:b0:33:
ec:f8:c4:0f:db:a4:64:1e:bb:27:a2:e1:e3:03:52:77:41:20:
1e:ce:15:cb:7c:43:24:3e:4d:05:16:f4:de:cd:eb:27:a7:1b:
bf:94:fa:8f:77:d8:0e:60:96:a3:5b:d0:fc:b7:c2:af:26:b0:
bc:8a:33:d9:95:63:35:17:60:07:97:67:ee:56:77:e6:4d:c9:
06:2b:a4:86:90:a2:3a:4a:59:08:24:67:0f:a7:e8:88:07:b6:
c5:0a:39:c5:b9:a5:9d:86:1d:fe:34:27:62:28:29:18:a8:c9:
31:53:68:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:36:45 2026 by rpki-client