Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
File: vWGQNE2etusMy5SON6oKqr4vLpA.mft (raw, json)
Hash identifier: 4kR7e03U8A84q33+3ff9VyUjRURmvtaumyCVDeLM/Iw=
Subject key identifier: 5A:2E:AE:79:E5:9C:42:AB:6A:36:F4:94:B1:4E:35:15:6E:E5:E1:39
Authority key identifier: BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
Certificate issuer: /CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Certificate serial: 019F11F81F07406B137C854E9A62187878EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
Manifest number: 01A4
Signing time: Mon 29 Jun 2026 06:01:41 +0000
Manifest this update: Mon 29 Jun 2026 06:01:41 +0000
Manifest next update: Tue 30 Jun 2026 06:01:41 +0000
Files and hashes: 1: jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa (hash: 4Rm+AgcIx2QNLzodYb14yKwLv1JgZDJIFSxZdtp7HDw=)
2: vWGQNE2etusMy5SON6oKqr4vLpA.crl (hash: cB2AATD2TBC7nDLxoSyPfN3csswfrYA4PNAVVDE4s/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:1f:07:40:6b:13:7c:85:4e:9a:62:18:78:78:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Validity
Not Before: Jun 29 06:01:41 2026 GMT
Not After : Jun 30 06:01:41 2026 GMT
Subject: CN=5a2eae79e59c42ab6a36f494b14e35156ee5e139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:8a:b6:66:55:e9:7c:7e:03:64:f7:de:cc:
75:b1:3a:73:06:0c:2c:f5:16:80:78:75:c8:78:09:
b3:44:a9:63:cc:d0:69:67:f0:c5:35:27:18:8b:21:
44:4e:4e:78:b6:cb:ea:b9:1a:15:00:76:23:de:89:
45:4b:85:4a:9b:30:22:28:13:7e:4b:58:0d:00:49:
15:50:36:7a:2b:fd:93:8f:dd:0c:60:01:f1:45:4f:
87:0d:fe:31:26:2f:78:c0:bf:55:52:dc:08:f9:ad:
8d:b7:4f:97:ed:ad:70:09:77:fa:8b:ac:b4:1c:0b:
3e:9d:3b:ce:6f:db:9e:16:85:4d:a9:1d:10:ee:a6:
e8:e6:f1:91:39:72:25:7f:b2:80:b5:d4:50:de:3e:
10:de:cc:df:88:46:44:ce:20:a3:58:aa:b8:74:af:
e2:e6:f0:9e:ae:14:2a:0b:8a:a4:85:14:5f:3b:51:
41:96:f4:2c:b4:ff:d6:d3:28:43:de:e2:2a:96:0d:
64:71:0f:d4:f4:f2:32:b3:7e:10:28:f3:3c:a3:f8:
ee:20:fe:e2:a6:93:b1:b3:e0:39:48:be:cf:d6:35:
2d:2f:ca:ed:06:48:35:ec:b7:e4:e2:0e:61:8f:27:
c5:b4:e5:54:f9:fd:59:29:64:1d:e3:4d:78:ba:33:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:AE:79:E5:9C:42:AB:6A:36:F4:94:B1:4E:35:15:6E:E5:E1:39
X509v3 Authority Key Identifier:
keyid:BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d7:00:c7:65:25:d3:2c:59:00:f1:e6:d6:af:4c:25:7c:68:
b7:4c:aa:0e:f1:93:40:7a:54:f7:4d:9f:72:71:7e:88:3e:87:
57:61:0a:b5:19:aa:f1:80:60:cc:e8:4f:78:1a:3c:37:fb:fe:
c2:eb:ab:88:b6:37:a3:8c:98:f6:16:3a:13:8a:da:d4:7e:09:
cc:0e:b4:5b:29:be:ff:b4:65:d0:64:1d:ec:88:64:79:b0:f9:
5a:2a:29:81:f4:81:ba:7e:a6:7c:28:dd:c8:07:15:b0:b5:c3:
2c:3c:b0:2a:82:52:57:f1:ea:ed:4f:63:28:c7:2a:38:19:29:
60:16:ff:3e:52:36:ec:66:2a:8b:f5:1b:d6:c1:49:0c:60:66:
bc:95:53:d2:cb:8a:6f:d5:df:1a:93:d1:24:60:9f:af:ac:9d:
87:b4:15:73:6a:ae:6d:51:2e:28:5c:04:ac:92:b8:fd:2d:ed:
7e:bd:a8:87:51:44:98:2b:b5:60:2f:64:b0:2e:3c:16:88:f4:
be:a1:3b:ec:61:bf:b9:73:bb:8f:db:7f:36:47:67:94:92:40:
df:e1:2b:a6:3e:46:52:c9:b6:d0:60:98:b8:03:4d:78:96:e7:
81:8d:bc:26:d8:b8:ba:41:06:30:9c:f9:6b:c0:33:08:18:af:
bc:20:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:25 2026 by rpki-client