Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: yUMg+7tARP2Hf86S6gQ50lzxRglu+a1jrUzi2tSi/Vw=
Subject key identifier: 0F:0F:38:9A:1D:29:FD:A8:91:AF:F0:16:6C:12:67:9A:0E:59:2C:6D
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019E9B8519DEA74B0446D28E9F10EAD49F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1949
Signing time: Sat 06 Jun 2026 06:00:51 +0000
Manifest this update: Sat 06 Jun 2026 06:00:51 +0000
Manifest next update: Sun 07 Jun 2026 06:00:51 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: tQnd8B6OyJnj4gQoLlSOHfyTz1NTqsWnXSAX4jHPisQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:85:19:de:a7:4b:04:46:d2:8e:9f:10:ea:d4:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jun 6 06:00:51 2026 GMT
Not After : Jun 7 06:00:51 2026 GMT
Subject: CN=0f0f389a1d29fda891aff0166c12679a0e592c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:cc:38:55:40:dc:d0:b4:3d:a0:b3:f3:29:
c3:4d:0e:5b:e1:78:43:47:75:c8:ca:c1:6f:c4:74:
6f:21:31:8d:bd:5a:03:4b:04:28:f5:27:97:e5:d3:
0a:f7:58:42:18:0f:93:be:7a:2a:0b:3e:96:3e:df:
74:10:20:16:11:39:9f:37:e1:95:7f:cb:bd:e7:92:
96:57:a0:26:aa:0e:08:74:9c:ef:4f:c5:5b:ce:e7:
21:af:e7:7b:86:5e:0a:38:38:d4:1c:f7:03:44:a8:
ea:7c:5b:13:be:7e:46:59:a5:fb:9b:ac:ee:d1:fc:
40:6c:77:e6:74:16:df:47:30:46:92:38:16:6e:22:
b1:cb:7e:ff:8f:30:2c:33:d3:f5:7f:a7:5e:54:9a:
0b:49:af:75:3b:d8:c5:a9:3a:69:3b:6e:9f:4b:d8:
be:33:9f:41:50:ce:c3:af:30:10:1e:a8:96:85:af:
ad:46:80:27:e3:2d:7b:5c:9e:ba:ba:88:70:2c:87:
6e:81:8b:98:6f:88:07:37:37:4d:fb:b6:97:46:7e:
06:e2:63:a1:4c:35:a4:5a:a1:5a:06:6c:92:b2:ef:
0d:98:8e:45:e8:34:d0:16:c9:0e:da:55:cc:82:cb:
8a:b6:52:56:a2:ca:cc:8a:1d:22:06:7c:72:75:a8:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0F:38:9A:1D:29:FD:A8:91:AF:F0:16:6C:12:67:9A:0E:59:2C:6D
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:bb:c5:16:d0:60:2e:98:32:db:86:84:19:d0:cc:fa:63:
9b:db:f5:58:b2:94:98:f2:2a:e2:53:4b:2b:e6:fa:90:00:cd:
be:eb:bb:14:36:9c:e7:7a:d7:48:db:35:e8:b9:e8:d1:19:92:
e6:be:0e:fa:82:be:41:f5:4b:26:4a:47:18:74:a8:48:12:93:
3e:dc:d4:d3:8f:69:b3:66:92:e0:83:87:a2:95:5a:e0:99:1d:
26:fc:ae:6e:84:d8:73:22:39:0c:40:0a:d3:04:4b:9e:03:b6:
dc:05:f0:be:ab:87:3e:cb:4a:0d:25:c1:49:26:12:f3:0f:14:
c7:eb:ba:47:80:30:05:b9:ba:c3:0a:a7:6c:c1:1e:33:53:9e:
5d:84:19:2b:96:59:97:25:9e:44:bb:ea:72:44:05:1a:d5:12:
25:df:24:9d:37:e8:ed:72:dd:a8:6a:71:5c:de:80:21:f1:35:
9b:e5:c3:b1:f5:d2:1a:f7:6d:79:09:0e:04:4a:27:0f:49:15:
2a:83:e9:97:ef:f7:e0:0d:67:94:4e:af:11:f4:c9:71:f2:a2:
59:c9:07:f1:2b:9a:1f:5a:71:e2:24:be:bc:38:46:77:db:7b:
30:91:c5:ae:0e:df:41:82:31:14:65:a8:d9:77:ac:12:e5:6e:
e2:3d:35:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bhRnep0sERtKOnxDq1J8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy
MTZjNzgwHhcNMjYwNjA2MDYwMDUxWhcNMjYwNjA3MDYwMDUxWjAzMTEwLwYDVQQD
EygwZjBmMzg5YTFkMjlmZGE4OTFhZmYwMTY2YzEyNjc5YTBlNTkyYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIHMOFVA3NC0PaCz8ynDTQ5b4XhD
R3XIysFvxHRvITGNvVoDSwQo9SeX5dMK91hCGA+TvnoqCz6WPt90ECAWETmfN+GV
f8u955KWV6Amqg4IdJzvT8Vbzuchr+d7hl4KODjUHPcDRKjqfFsTvn5GWaX7m6zu
0fxAbHfmdBbfRzBGkjgWbiKxy37/jzAsM9P1f6deVJoLSa91O9jFqTppO26fS9i+
M59BUM7DrzAQHqiWha+tRoAn4y17XJ66uohwLIdugYuYb4gHNzdN+7aXRn4G4mOh
TDWkWqFaBmySsu8NmI5F6DTQFskO2lXMgsuKtlJWosrMih0iBnxydaha4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8POJodKf2oka/wFmwSZ5oOWSxtMB8GA1UdIwQY
MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt
NTY4MDVjYTExYzMzLzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz
LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObq7xRbQ
YC6YMtuGhBnQzPpjm9v1WLKUmPIq4lNLK+b6kADNvuu7FDac53rXSNs16Lno0RmS
5r4O+oK+QfVLJkpHGHSoSBKTPtzU049ps2aS4IOHopVa4JkdJvyuboTYcyI5DEAK
0wRLngO23AXwvquHPstKDSXBSSYS8w8Ux+u6R4AwBbm6wwqnbMEeM1OeXYQZK5ZZ
lyWeRLvqckQFGtUSJd8knTfo7XLdqGpxXN6AIfE1m+XDsfXSGvdteQkOBEonD0kV
KoPpl+/34A1nlE6vEfTJcfKiWckH8SuaH1px4iS+vDhGd9t7MJHFrg7fQYIxFGWo
2XesEuVu4j01KA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:19 2026 by rpki-client