Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: Xq4Tgukbd340urXYKnh53CSE681Zb9nnjxbe2sqtZ2M=
Subject key identifier: A8:33:D6:AC:EC:8E:C9:16:B6:A6:FB:41:C9:BD:65:D2:30:36:71:47
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019E1E35764D0EECFFAEDC92E01F169203AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 22:01:20 +0000
Manifest this update: Tue 12 May 2026 22:01:20 +0000
Manifest next update: Wed 13 May 2026 22:01:20 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: +JTmDQcll3yVa62/PlaoXGn01iikTyULVhXnwL4MU8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:76:4d:0e:ec:ff:ae:dc:92:e0:1f:16:92:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: May 12 22:01:20 2026 GMT
Not After : May 13 22:01:20 2026 GMT
Subject: CN=a833d6acec8ec916b6a6fb41c9bd65d230367147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:0e:88:2c:7c:78:5e:58:43:58:95:d4:72:
9b:bb:a4:e0:87:39:a7:11:26:f9:5a:0f:ec:23:d4:
ba:97:9f:c3:c1:99:5c:8f:66:c3:3a:97:4f:d9:81:
e8:78:57:44:55:65:b5:87:cc:6d:45:fc:de:3a:b4:
25:6a:d2:45:74:c3:6d:38:60:0a:7e:24:69:96:ab:
4d:8d:d9:fb:8f:ae:12:7a:8b:ed:cd:b3:8a:87:af:
07:aa:ab:4a:00:33:a5:94:ee:ac:4f:f1:50:c7:73:
f8:c8:db:64:02:2c:98:0c:02:3a:78:7f:ff:8c:96:
6a:25:bd:c1:d7:64:a7:54:58:0d:8e:14:4b:4f:39:
71:b9:4d:83:8a:f6:5f:99:fd:dc:be:9e:e0:e3:56:
d5:78:03:2e:00:76:da:e4:bc:ad:4b:b4:d5:fb:63:
ef:80:a6:cb:45:ac:92:8b:e6:5c:05:10:77:5d:c2:
aa:03:45:95:14:25:ab:46:70:1b:ce:c0:e6:c5:28:
d5:59:6f:df:a6:21:5e:78:9e:bc:f2:3f:86:b1:25:
d9:5f:5f:f5:1a:84:1a:ae:7d:aa:1a:96:0d:8b:a0:
94:37:de:59:80:1b:b9:2d:ea:63:fe:ef:fd:18:bc:
99:a6:08:68:33:43:b1:4e:a8:66:d2:cc:f5:85:b2:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:D6:AC:EC:8E:C9:16:B6:A6:FB:41:C9:BD:65:D2:30:36:71:47
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:af:9c:34:2d:15:61:36:77:c6:25:56:06:49:ac:d2:60:78:
df:ca:17:90:e9:4e:e2:2c:66:cc:ed:9d:18:e4:df:ec:f6:ff:
0d:b0:0c:a0:2a:0b:27:89:28:b0:c1:e7:6b:3e:9a:46:e4:34:
00:4d:2b:cd:26:53:73:2b:85:b6:78:8f:4f:ad:cf:1a:3c:71:
31:b9:1c:87:40:9e:f0:49:25:bb:00:14:bc:93:fc:da:dd:c3:
f7:2f:d9:f2:61:03:c9:d0:f8:2d:41:6a:b6:34:87:bd:e7:6b:
d6:0a:02:4d:c6:36:9f:6e:14:79:4b:f7:43:3e:9d:94:79:63:
b3:5b:77:dc:13:77:4d:c2:39:86:a9:3a:bf:33:e4:6a:9b:c3:
7c:6b:5e:63:32:ce:d4:a1:f6:74:c2:96:9a:4f:88:96:55:24:
f0:da:42:ec:80:25:92:20:2d:13:4f:4a:7f:d1:35:45:a9:1b:
f4:1a:5a:13:48:01:08:50:9d:81:d1:d3:3f:7f:77:da:04:1b:
5e:ef:b9:20:09:49:de:60:6b:39:1f:68:94:06:1c:50:47:a1:
8e:1f:11:3e:4c:a6:fb:e8:a9:de:48:90:ed:d1:2d:48:52:f8:
20:4e:38:46:8d:61:86:56:f4:7a:da:4b:23:14:49:ff:f7:2f:
16:9e:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:27 2026 by rpki-client