Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: MlKDmaLw/1x0p2pxIAHH7rpsB18BSSqdf/1GSd8vhYU=
Subject key identifier: 28:92:6E:2C:D7:5E:3F:21:F7:A0:D7:D0:3E:0A:EE:89:C0:17:7B:92
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019E454302F3AB6F6C65A6DF434962248ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0DA7
Signing time: Wed 20 May 2026 12:01:20 +0000
Manifest this update: Wed 20 May 2026 12:01:20 +0000
Manifest next update: Thu 21 May 2026 12:01:20 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: XQlQdmIF1jui04N4oySMrtAJQTT9GJeLS8ZgDZDHPuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:43:02:f3:ab:6f:6c:65:a6:df:43:49:62:24:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: May 20 12:01:20 2026 GMT
Not After : May 21 12:01:20 2026 GMT
Subject: CN=28926e2cd75e3f21f7a0d7d03e0aee89c0177b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:84:30:c3:0d:78:5c:6e:bf:e2:8e:35:7a:
c6:d6:4a:8b:bc:c7:53:e2:85:c9:68:a2:bb:6d:55:
74:d7:64:2b:a5:70:36:6d:e0:a8:a2:4d:b1:82:cc:
66:e5:de:75:19:2e:1d:28:86:62:63:99:ab:74:6e:
94:03:58:8f:72:52:94:4e:23:93:f6:dd:25:3c:d5:
d3:8e:36:32:ac:4b:07:69:08:ca:63:f0:78:e2:c0:
85:8b:10:b1:89:4f:a2:1c:e0:d8:78:b2:40:c5:5d:
e8:a2:d5:f0:78:cc:0b:59:b5:28:55:1d:65:4c:e8:
8d:5b:5d:05:81:be:01:ac:89:58:e8:76:00:3b:a4:
d2:09:07:f4:d0:b4:5a:fa:7e:f5:b0:5d:21:19:b6:
57:ac:b0:12:c2:08:21:67:ed:a4:f8:86:12:b7:73:
21:4f:ad:b4:36:f9:29:dc:03:10:d9:bb:75:e0:55:
17:3e:b8:a2:0e:92:e1:19:d2:2e:62:a5:0f:15:0b:
6f:ae:2c:ff:da:80:b6:1c:a6:5d:dd:b7:34:c4:f5:
fd:d1:1c:52:fb:7a:34:55:98:cc:ca:ec:1c:da:14:
32:68:2a:16:30:47:81:1d:52:19:3b:dc:12:b4:25:
62:9b:00:a6:f7:f0:a9:78:de:dc:ca:15:12:67:54:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:6E:2C:D7:5E:3F:21:F7:A0:D7:D0:3E:0A:EE:89:C0:17:7B:92
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:14:be:8d:de:d1:12:d9:8f:4e:f4:54:b3:c0:cc:f2:ab:50:
1c:fa:0f:1e:a7:9f:ea:e0:67:b8:cf:cf:e3:69:bd:81:7c:6d:
9a:4d:7a:fc:52:b9:30:f3:ed:9f:f7:fe:4e:9d:75:c1:eb:8c:
7f:3a:b4:f6:08:ad:36:95:de:e4:ca:c1:47:e5:65:e5:9b:6a:
f3:00:7e:d4:c0:4b:bb:6b:38:9b:ba:4b:91:80:01:c0:75:df:
15:dc:ab:ae:9d:74:ce:a6:64:9e:91:a0:51:64:e3:97:d2:12:
70:03:05:3e:06:19:f6:35:7a:07:0b:fe:fe:af:e7:48:a7:44:
a0:5d:4f:c9:34:fb:3c:b2:b9:e0:8b:53:b5:da:4d:63:b7:91:
f8:de:2d:d2:56:7a:77:55:8f:e8:56:4b:b3:57:f7:13:9a:31:
98:3f:f5:05:84:84:28:6c:a7:34:d3:3d:b0:7b:76:fd:d6:2e:
b1:ca:d1:24:ae:2d:ed:03:79:0c:39:74:50:c0:4f:36:cb:48:
92:c4:42:8c:e6:52:03:f4:4c:1e:57:e2:2c:c5:81:ae:97:c3:
e6:09:ba:e2:7b:5f:48:a4:0c:f1:3b:53:e5:1b:82:32:52:ee:
2a:ff:91:ed:86:d6:da:aa:5c:38:a0:aa:b7:f2:9d:7d:ac:2e:
54:ba:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 22:34:36 2026 by rpki-client