Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: 5dXxp+rE5cZfoePN20Qy6E0px9YSBAoO6+dGdI9UquE=
Subject key identifier: 44:3B:F7:10:EC:CF:DA:B4:09:5E:60:9A:95:C8:4D:6B:D2:31:C6:61
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019E32CF04B5B4957EAD2BB45DD457207EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0D12
Signing time: Sat 16 May 2026 22:01:28 +0000
Manifest this update: Sat 16 May 2026 22:01:28 +0000
Manifest next update: Sun 17 May 2026 22:01:28 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: ilmBRWbkbJ0hSuGgsOayU1akxreowuPFrLtcQBZw8M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:cf:04:b5:b4:95:7e:ad:2b:b4:5d:d4:57:20:7e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: May 16 22:01:28 2026 GMT
Not After : May 17 22:01:28 2026 GMT
Subject: CN=443bf710eccfdab4095e609a95c84d6bd231c661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:10:ea:5f:fc:b9:7d:a9:44:e4:f7:73:b6:
28:3c:f3:2d:7c:24:ce:58:2f:a5:ad:56:9e:f3:46:
41:f8:be:1c:e5:a2:0f:ba:a2:24:57:1e:7d:d8:f9:
ac:cc:26:89:0a:7c:5a:90:94:5f:74:db:54:95:c2:
7d:65:55:f1:c6:38:ce:df:25:3f:d3:88:26:02:d2:
c6:1b:21:74:a7:3d:fe:5f:4a:be:10:e0:b5:01:91:
c3:b4:f4:c0:70:59:30:37:a1:48:f0:d0:b4:2b:2d:
f0:6c:e8:01:f0:67:1d:e2:f5:4a:7f:50:48:be:30:
ce:2e:13:18:39:db:92:23:08:00:bb:0a:e2:bb:21:
a3:0a:18:08:f2:4b:83:05:5d:f1:22:02:c8:e5:a7:
8a:81:79:7e:e4:cb:67:09:0e:81:b1:47:d2:33:88:
af:94:c4:00:c7:33:f8:71:73:92:73:ab:73:32:1c:
a9:0b:12:c1:fa:e2:f8:7e:b4:36:ce:9c:cd:37:9c:
0d:bc:0f:12:8d:76:ee:66:02:53:85:35:43:ff:87:
e8:cf:17:40:7e:ac:f7:67:53:b2:23:02:09:d6:b7:
cb:ca:49:08:81:2a:e3:da:43:48:d4:2b:eb:02:8f:
0e:48:f6:89:f2:4d:3e:a3:28:8a:b3:4f:43:06:05:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:F7:10:EC:CF:DA:B4:09:5E:60:9A:95:C8:4D:6B:D2:31:C6:61
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e3:b9:f8:8b:f2:88:d1:83:6d:3e:0a:ff:40:ae:db:ce:64:
5b:35:dd:7d:10:f1:29:bc:b1:92:41:fe:f4:99:d9:76:4a:57:
cb:ae:c3:80:d1:3d:3e:4c:ab:16:47:de:ee:6d:c6:2b:4e:53:
d8:42:d0:89:6a:9a:60:12:0c:45:aa:2e:10:22:43:e1:94:f5:
fd:e8:5f:a0:c3:8b:d1:47:e9:3a:ba:c3:42:49:04:26:b9:97:
d0:08:7c:61:e8:23:33:d5:eb:75:ec:98:74:fa:93:4e:1f:43:
49:2d:3b:ad:be:c7:1e:5f:c4:5d:fc:74:9d:26:fe:ee:12:6d:
89:d0:0c:51:20:90:dc:80:a8:7a:b7:ce:40:78:dc:b2:1f:1f:
ae:48:94:40:f9:e2:30:dc:4e:27:46:7b:b5:a4:6a:3d:d3:2e:
54:ac:33:29:bb:20:ed:32:3b:67:6c:d3:70:89:1d:1a:64:76:
65:99:2e:e9:f4:29:c7:d4:52:c6:41:dc:4c:ff:6d:1e:77:e6:
96:18:0b:40:22:5b:94:b8:12:11:97:44:8c:45:b5:bf:83:b5:
bf:66:e2:c6:d5:46:1e:bd:ab:49:94:d5:c0:44:cb:03:91:f6:
b8:5c:fc:4a:48:68:12:62:63:ed:8f:a6:62:10:a0:2d:08:e0:
9d:b9:42:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yzwS1tJV+rSu0XdRXIH6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzdjNzBmMWM2N2VjYTE3NzVhNzA5YzkyMzVkNmEyZjU1
NTE2YjgwHhcNMjYwNTE2MjIwMTI4WhcNMjYwNTE3MjIwMTI4WjAzMTEwLwYDVQQD
Eyg0NDNiZjcxMGVjY2ZkYWI0MDk1ZTYwOWE5NWM4NGQ2YmQyMzFjNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo48Q6l/8uX2pROT3c7YoPPMtfCTO
WC+lrVae80ZB+L4c5aIPuqIkVx592PmszCaJCnxakJRfdNtUlcJ9ZVXxxjjO3yU/
04gmAtLGGyF0pz3+X0q+EOC1AZHDtPTAcFkwN6FI8NC0Ky3wbOgB8Gcd4vVKf1BI
vjDOLhMYOduSIwgAuwriuyGjChgI8kuDBV3xIgLI5aeKgXl+5MtnCQ6BsUfSM4iv
lMQAxzP4cXOSc6tzMhypCxLB+uL4frQ2zpzNN5wNvA8SjXbuZgJThTVD/4fozxdA
fqz3Z1OyIwIJ1rfLykkIgSrj2kNI1CvrAo8OSPaJ8k0+oyiKs09DBgWpjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ79xDsz9q0CV5gmpXITWvSMcZhMB8GA1UdIwQY
MBaAFL43xw8cZ+yhd1pwnJI11qL1VRa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQt
YzhlYjA4Y2U5MDg5LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQtYzhlYjA4Y2U5MDg5
LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+O5+Ivy
iNGDbT4K/0Cu285kWzXdfRDxKbyxkkH+9JnZdkpXy67DgNE9PkyrFkfe7m3GK05T
2ELQiWqaYBIMRaouECJD4ZT1/ehfoMOL0UfpOrrDQkkEJrmX0Ah8YegjM9XrdeyY
dPqTTh9DSS07rb7HHl/EXfx0nSb+7hJtidAMUSCQ3ICoerfOQHjcsh8frkiUQPni
MNxOJ0Z7taRqPdMuVKwzKbsg7TI7Z2zTcIkdGmR2ZZku6fQpx9RSxkHcTP9tHnfm
lhgLQCJblLgSEZdEjEW1v4O1v2bixtVGHr2rSZTVwETLA5H2uFz8SkhoEmJj7Y+m
YhCgLQjgnblCeA==
-----END CERTIFICATE-----
Generated at Sun May 17 02:07:23 2026 by rpki-client