Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: ZUKv8DacQaudJ7j2cWvT645wF9s/7ETywPuyQaCh17E=
Subject key identifier: 78:16:2B:90:3E:EA:FF:61:C8:1A:FD:15:47:7D:ED:B6:73:05:F2:30
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019D2A72D392246E597EDC958518EA5222F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 076A
Signing time: Thu 26 Mar 2026 14:01:01 +0000
Manifest this update: Thu 26 Mar 2026 14:01:01 +0000
Manifest next update: Fri 27 Mar 2026 14:01:01 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: 6cln4bFhxhEDe8xgWGiRnK9ISuSqNSWaijNjM3r458I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d3:92:24:6e:59:7e:dc:95:85:18:ea:52:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Mar 26 14:01:01 2026 GMT
Not After : Mar 27 14:01:01 2026 GMT
Subject: CN=78162b903eeaff61c81afd15477dedb67305f230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:5e:1e:40:1a:8f:49:bb:77:88:16:de:87:
ed:0c:f8:a8:cd:79:c7:39:c3:85:ae:fb:4a:9b:27:
3b:80:e7:8d:9e:35:f4:75:03:99:58:fc:72:85:44:
d1:58:73:d1:34:80:dc:f5:d6:57:65:82:0e:05:1d:
7c:32:03:e7:ec:fa:23:12:f0:d0:0d:a2:1b:2b:97:
8c:ca:f5:e4:62:cf:3f:0d:9d:b5:11:fe:2f:c2:c3:
bf:f6:d3:d1:07:b3:4b:e4:f7:f3:c2:a8:dd:30:e0:
1f:18:e3:c5:35:14:2b:78:4e:9c:d4:36:e9:a6:8c:
52:bb:0d:c2:dc:99:37:21:07:7b:e9:3f:59:49:7f:
70:aa:54:10:a3:7d:b2:ca:04:a1:a7:4e:fe:af:68:
91:52:77:0b:8b:3b:30:42:fe:d0:ab:35:23:fa:dd:
56:f2:5e:78:3e:2a:3c:8a:1c:35:87:34:fc:4d:a4:
b0:ee:e2:27:1a:da:ab:54:dd:a5:9d:f5:14:c8:c4:
dc:51:8d:80:bd:00:25:2f:3e:59:d1:a9:2c:c1:68:
8a:2b:c1:c7:ab:68:2e:c4:7b:da:0d:56:45:78:02:
be:7d:01:6f:39:1c:bf:ea:5c:3e:91:6b:1d:31:32:
ec:db:61:2b:5a:43:57:ac:02:ef:b1:8d:bc:b5:50:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:2B:90:3E:EA:FF:61:C8:1A:FD:15:47:7D:ED:B6:73:05:F2:30
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9d:89:3c:8c:16:ae:56:a6:41:59:cc:71:8a:25:27:6d:bc:
17:33:b4:6c:2c:a1:0f:ca:2a:4d:95:38:0f:3c:51:7c:f5:e3:
ea:2d:38:b2:bf:4d:09:90:95:da:1f:8e:c3:64:a3:b3:4b:3e:
31:32:58:cb:8b:4d:27:44:70:b0:4c:60:70:05:ba:ad:99:40:
3a:73:1e:13:41:4f:fb:e2:13:df:66:97:5f:38:77:fc:86:2f:
71:b9:67:54:ff:b6:9c:a5:61:6f:d9:21:bf:b2:c0:fd:e3:95:
99:14:6a:9d:4f:f1:08:f0:46:d5:6f:3e:f3:15:62:f1:c6:8b:
cf:5a:11:9c:a0:2d:21:ab:57:23:63:90:d6:41:4c:1a:f8:69:
c0:6d:e7:48:2f:11:49:97:43:0e:47:af:35:b1:3f:29:6f:a6:
17:ba:33:5f:45:cb:0a:8d:f6:e7:f1:06:9a:61:d2:b3:13:db:
3c:53:0e:99:83:65:38:fd:dd:b8:d3:4f:e6:50:83:ce:5f:33:
42:b1:b8:0e:50:09:6f:94:5f:68:e5:c1:05:25:3a:ce:81:74:
0d:68:67:96:f4:75:75:d6:54:ad:17:48:ea:be:07:a8:76:40:
7e:79:7c:5b:92:bb:c7:b9:81:ea:24:8b:76:aa:02:2a:2b:46:
c8:2b:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:49:02 2026 by rpki-client