Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: 5LxtMDoLz/9FO+J0DYlbvEnEpaTAno9WdVPCf1ISxW8=
Subject key identifier: 81:B6:7A:49:BA:32:F6:13:60:D4:FA:B0:8E:B8:29:E9:9B:C6:9F:3F
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019EB87CD2BE39E1C15D1EE439FDE193635D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 21:00:48 +0000
Manifest this update: Thu 11 Jun 2026 21:00:48 +0000
Manifest next update: Fri 12 Jun 2026 21:00:48 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: NesfGbprOByq75VZnHE4OWuZfIfHzbWafciFnq8pll0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:d2:be:39:e1:c1:5d:1e:e4:39:fd:e1:93:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Jun 11 21:00:48 2026 GMT
Not After : Jun 12 21:00:48 2026 GMT
Subject: CN=81b67a49ba32f61360d4fab08eb829e99bc69f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:c1:12:33:57:62:be:61:ed:04:fe:3f:ed:
17:4e:a0:a9:2a:87:aa:e7:13:ba:57:32:fd:1f:b4:
b4:15:e7:d6:fb:c2:db:5d:72:9a:22:07:03:e0:d8:
28:fc:9e:ab:df:b8:ef:04:86:3e:21:13:c2:35:41:
1d:50:b8:04:19:f4:d8:af:68:cb:c7:25:75:a1:7e:
ba:85:18:41:32:cd:d0:8c:5d:e2:d9:5b:5f:1a:f5:
02:19:cb:25:e7:c8:0f:1d:33:f3:c0:68:c0:7e:d1:
2f:8a:47:4a:7e:8c:7d:84:d3:60:16:93:e8:96:f3:
24:01:cf:52:3c:a8:eb:fd:ee:5c:ad:f1:fd:d0:8b:
2e:70:d5:10:ca:02:88:f9:06:26:09:7b:08:bf:83:
a4:08:11:e6:f7:ec:45:90:fd:4e:25:aa:0f:09:65:
fa:65:8a:fb:ac:9e:f9:d3:51:46:5d:a6:35:0c:09:
61:52:d1:7c:6e:1a:0a:11:6b:9e:9b:9e:42:60:8b:
84:24:9d:52:7e:1a:02:90:ac:d5:a8:3d:f8:63:6e:
4a:01:31:e3:eb:64:58:d8:b8:9e:0f:10:23:75:e8:
13:49:f7:57:a5:1a:11:3f:90:5e:1b:03:ba:6d:13:
d9:f8:6e:24:aa:bc:23:d2:9a:84:1f:cc:ff:be:cc:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B6:7A:49:BA:32:F6:13:60:D4:FA:B0:8E:B8:29:E9:9B:C6:9F:3F
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f4:c0:45:aa:ac:46:59:fd:1b:3f:42:f6:76:10:63:30:6a:
e4:80:65:96:be:bc:68:52:bf:80:38:f8:2d:46:e8:f2:76:8f:
46:2c:58:c4:45:fc:b4:9c:08:07:e3:1e:c1:51:b3:fc:57:f0:
84:71:f2:5b:c5:f3:40:e3:91:f7:c8:ba:a6:f6:ca:5e:e1:21:
6e:90:58:7f:92:95:f2:64:fc:0d:f0:a6:e0:54:6d:a7:e0:c5:
7e:23:a2:71:0b:0f:da:3c:37:ad:71:5f:93:e0:cf:b4:8d:82:
33:bc:f2:32:d7:e9:01:b6:5a:d3:da:27:d5:36:f7:00:e7:2e:
49:68:66:31:c8:9f:8e:7a:86:1f:90:10:85:36:1e:94:71:76:
cb:27:2d:50:b8:da:33:67:d8:1d:05:09:6c:c7:bc:f8:e6:56:
7c:5b:0a:98:5e:c1:19:07:ad:0f:0e:f1:b9:fd:e6:63:ad:c6:
23:7a:ff:2d:78:27:3f:84:a3:3f:42:f0:a3:74:c6:04:1c:01:
ec:d1:b3:78:17:e8:56:b0:70:7f:16:1c:de:75:32:43:e5:c7:
de:de:6e:50:5d:d1:19:bb:8c:9d:83:e4:27:a0:49:c9:16:a7:
25:c5:1d:30:9d:2a:0e:ce:f2:d0:00:60:c0:c0:45:a9:9e:f8:
6d:4e:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:28:45 2026 by rpki-client