Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier: EWo04DZcRXLgzmxiYlhnXNWLTgbY5lPASawtQWxpL7c=
Subject key identifier: 6B:B9:E6:78:5D:8A:AB:66:03:0A:1F:CD:D1:0F:BA:DA:11:4A:26:B7
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 019DED7FFC4648B6C55B90AC8B3FEA81BD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number: 0C63
Signing time: Sun 03 May 2026 11:01:20 +0000
Manifest this update: Sun 03 May 2026 11:01:20 +0000
Manifest next update: Mon 04 May 2026 11:01:20 +0000
Files and hashes: 1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=)
2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=)
3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=)
4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: jesu3H93k2i1zbF2O6SuWNIh4sCluh8k3LkdBV7dDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:7f:fc:46:48:b6:c5:5b:90:ac:8b:3f:ea:81:bd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: May 3 11:01:20 2026 GMT
Not After : May 4 11:01:20 2026 GMT
Subject: CN=6bb9e6785d8aab66030a1fcdd10fbada114a26b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:38:fe:3d:95:1e:1d:63:4c:6c:92:7e:9d:
3a:66:29:4c:e2:d3:52:81:b3:62:27:2d:0f:b1:46:
fb:e0:76:9a:b3:3e:51:92:3c:c3:93:c1:81:02:54:
9c:6a:c1:b3:54:36:87:1c:88:d6:b3:21:d8:5a:83:
c6:a2:f6:0a:9a:6e:06:65:90:f7:8f:fe:87:25:2c:
df:a4:ff:15:67:55:8c:8d:a9:c1:0f:9f:34:e3:11:
ca:9f:24:09:93:e6:98:b5:93:60:3c:68:45:b3:46:
74:b7:f9:63:43:c1:e7:b0:32:0b:e8:2e:d3:5e:77:
b2:be:78:6b:b0:66:5b:30:96:76:36:2c:ae:17:4f:
9e:73:58:e8:59:dd:d0:40:79:46:88:0a:b7:48:fb:
81:0a:1a:41:5d:3a:9f:a6:7d:66:15:f8:92:2c:7f:
26:8f:12:27:3a:a6:e4:45:a6:6d:97:0b:8b:1a:ad:
a3:d4:0c:e9:10:e2:45:43:31:92:b3:de:ef:d9:9c:
ce:ab:a8:a3:09:44:d8:34:69:1f:87:a0:72:1c:08:
2c:6c:52:7e:67:1a:da:f9:62:00:98:a5:50:cc:02:
16:a3:25:f2:f7:f0:19:27:ff:2f:5c:fb:9a:c3:c9:
7b:ee:dd:13:a7:9d:01:3a:2a:5a:c6:39:d8:18:70:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B9:E6:78:5D:8A:AB:66:03:0A:1F:CD:D1:0F:BA:DA:11:4A:26:B7
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:08:db:a6:4d:8f:b4:f9:bd:61:66:da:92:f6:0e:42:f4:
62:83:e1:37:3c:bd:68:d9:87:9d:a7:a9:91:88:54:6f:66:b9:
be:d7:a6:be:08:e6:57:7b:93:0c:eb:35:83:8c:80:73:bb:1f:
e4:19:0f:b7:89:d7:b4:65:be:65:7a:e7:c1:e7:1c:12:dc:0e:
90:1e:92:93:28:43:1b:e7:98:9e:13:7b:fe:1d:b3:b6:72:f8:
30:de:a5:c4:a5:8c:5a:46:19:5e:ea:3c:0c:e4:54:2f:78:ad:
70:27:53:31:87:ce:df:f5:df:0d:17:53:35:bf:83:13:74:23:
e8:f7:c9:f3:84:e7:89:8d:0e:59:52:33:ba:e0:c1:e7:3d:23:
d3:01:8f:75:66:60:e0:94:4a:22:30:05:82:eb:7f:09:7c:8b:
db:93:f3:da:91:09:8a:34:63:6a:38:ff:7e:ba:cb:75:eb:95:
c4:46:ba:7d:c3:c9:f4:14:f9:ff:83:8e:17:7a:92:17:ae:83:
8d:c8:38:d0:fc:7f:c7:07:56:40:2f:db:ba:d5:8c:86:d7:a6:
49:4a:1e:78:c5:ee:75:5d:32:7c:8a:95:8a:dc:cc:44:dc:e9:
28:02:d8:3c:3c:31:45:8e:d7:8c:60:83:07:d6:3f:62:b9:07:
50:a8:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:51:18 2026 by rpki-client