Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: 50aTJOB+3qKCdKgeiacsIf9YivJ13JWjvFYFbImQibY=
Subject key identifier: 25:92:F9:D1:3F:51:F0:AE:FE:55:30:C3:32:D0:15:08:5D:10:E8:FA
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019E1F7F1BE419117763D0C844C40886CC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 04:01:24 +0000
Manifest this update: Wed 13 May 2026 04:01:24 +0000
Manifest next update: Thu 14 May 2026 04:01:24 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: Kel9aP5qVUhuTQIsS0YZ33aLURt6ueOdV7/QrVymdRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:1b:e4:19:11:77:63:d0:c8:44:c4:08:86:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: May 13 04:01:24 2026 GMT
Not After : May 14 04:01:24 2026 GMT
Subject: CN=2592f9d13f51f0aefe5530c332d015085d10e8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:30:61:26:14:59:9b:d7:bd:bb:bb:56:0a:
41:d1:84:07:0e:e3:bc:e5:c4:77:10:3a:70:b8:e1:
05:6c:18:22:d7:5c:11:2e:2c:e1:d8:ca:60:7a:48:
9b:67:44:78:aa:b9:60:a6:ab:89:85:ce:9b:94:50:
47:87:99:d1:0f:21:30:2a:7b:6f:e8:8c:51:92:2f:
be:f6:3c:d5:19:6c:49:6b:b9:4e:d7:ba:6e:ee:f8:
a0:11:a6:db:ff:77:32:31:47:9f:f7:c0:66:eb:88:
0f:74:8d:64:61:f3:65:97:2a:52:74:1e:81:e9:52:
02:c9:32:e1:79:72:18:f7:80:40:c8:dd:37:b1:6c:
26:67:6c:8a:9c:b2:90:2a:55:99:f6:70:f2:f7:ef:
74:49:6a:bc:b9:66:ad:03:1c:fd:f1:d6:77:35:f2:
90:73:63:37:a5:86:9c:fe:eb:0d:82:9a:47:26:ae:
d8:ef:04:bf:74:c1:0a:5a:c6:ae:84:45:61:92:54:
b5:68:91:82:ab:33:03:0d:2a:c1:cc:13:4d:7a:34:
00:b3:c0:e1:ab:0a:f8:40:0f:78:3e:89:83:05:c6:
bd:83:e0:20:b1:dc:17:20:51:73:37:23:e7:71:d4:
8b:27:66:c2:c5:d7:05:23:77:99:90:b7:40:1b:30:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:F9:D1:3F:51:F0:AE:FE:55:30:C3:32:D0:15:08:5D:10:E8:FA
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1b:03:8c:92:c4:d2:e2:49:a6:47:e2:93:db:f1:a8:9c:ad:
6a:99:22:92:a9:59:c4:0f:6a:da:db:e8:7d:89:e5:0a:64:7d:
3a:65:3f:af:a2:01:25:0f:ed:44:69:8e:c4:31:a0:5e:7c:19:
87:17:8c:64:9a:8d:8c:07:f2:18:1c:59:0d:a1:a3:dc:4c:e3:
bc:80:2f:67:7b:cf:81:7a:82:65:05:dd:e0:1b:39:47:8b:f0:
05:08:ee:7e:83:fd:d8:9f:b9:0e:ad:30:9e:70:3f:ea:2d:4e:
a4:24:85:a3:0f:11:05:e7:83:78:7c:f7:50:90:f1:56:86:46:
42:46:d3:0e:f0:3f:ee:77:03:1c:bd:2e:df:4a:e2:1a:cb:17:
6f:28:3c:c1:e1:6c:16:da:b3:d9:b9:e4:97:cd:51:8a:6d:36:
bc:3f:a6:6c:31:ec:8f:93:65:0a:89:53:aa:f2:09:a3:c8:ea:
69:6b:12:06:7d:e7:48:58:13:40:1c:cc:40:c9:eb:28:3d:dc:
9e:a2:8d:f5:be:05:2d:d7:ef:1d:64:5e:3f:45:02:41:fd:9a:
27:35:90:30:c4:03:bb:f1:60:f9:ac:1b:87:f4:ac:66:15:2b:
14:af:fd:78:f0:97:73:bc:15:5a:72:23:3e:3b:43:71:b9:3d:
52:03:2e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffxvkGRF3Y9DIRMQIhsxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw
MmI2Y2EwHhcNMjYwNTEzMDQwMTI0WhcNMjYwNTE0MDQwMTI0WjAzMTEwLwYDVQQD
EygyNTkyZjlkMTNmNTFmMGFlZmU1NTMwYzMzMmQwMTUwODVkMTBlOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6IwYSYUWZvXvbu7VgpB0YQHDuO8
5cR3EDpwuOEFbBgi11wRLizh2MpgekibZ0R4qrlgpquJhc6blFBHh5nRDyEwKntv
6IxRki++9jzVGWxJa7lO17pu7vigEabb/3cyMUef98Bm64gPdI1kYfNllypSdB6B
6VICyTLheXIY94BAyN03sWwmZ2yKnLKQKlWZ9nDy9+90SWq8uWatAxz98dZ3NfKQ
c2M3pYac/usNgppHJq7Y7wS/dMEKWsauhEVhklS1aJGCqzMDDSrBzBNNejQAs8Dh
qwr4QA94PomDBca9g+AgsdwXIFFzNyPncdSLJ2bCxdcFI3eZkLdAGzDSowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWS+dE/UfCu/lUwwzLQFQhdEOj6MB8GA1UdIwQY
MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt
NWQ4Mzg2NjhiZWJlLzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEtNWQ4Mzg2NjhiZWJl
LzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahsDjJLE
0uJJpkfik9vxqJytapkikqlZxA9q2tvofYnlCmR9OmU/r6IBJQ/tRGmOxDGgXnwZ
hxeMZJqNjAfyGBxZDaGj3EzjvIAvZ3vPgXqCZQXd4Bs5R4vwBQjufoP92J+5Dq0w
nnA/6i1OpCSFow8RBeeDeHz3UJDxVoZGQkbTDvA/7ncDHL0u30riGssXbyg8weFs
Ftqz2bnkl81Rim02vD+mbDHsj5NlColTqvIJo8jqaWsSBn3nSFgTQBzMQMnrKD3c
nqKN9b4FLdfvHWReP0UCQf2aJzWQMMQDu/Fg+awbh/SsZhUrFK/9ePCXc7wVWnIj
PjtDcbk9UgMuew==
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:49 2026 by rpki-client