Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: YNpVHuzQY5krfrvubIN/fN8O8yiqiJZrTqXyVRpeGQE=
Subject key identifier: 1E:D6:49:D3:4F:B4:B3:95:01:FC:A6:85:D3:1F:08:D8:02:9A:FD:50
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 01A0D6F0E9020C40190C0D3184DC4A5E67A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 0951
Signing time: Fri 25 Sep 2026 05:01:47 +0000
Manifest this update: Fri 25 Sep 2026 05:01:47 +0000
Manifest next update: Sat 26 Sep 2026 05:01:47 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: x2W3ggD5lg16MvLO/tsEeAZOqlA7Rr4I37qsI/hHl5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:e9:02:0c:40:19:0c:0d:31:84:dc:4a:5e:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Sep 25 05:01:47 2026 GMT
Not After : Sep 26 05:01:47 2026 GMT
Subject: CN=1ed649d34fb4b39501fca685d31f08d8029afd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:a8:8e:a7:eb:12:02:d8:12:e1:1f:d8:e3:
34:f4:c1:40:4c:64:97:7a:c4:95:4c:e5:2c:01:f2:
0d:da:98:7d:6b:91:31:f1:63:bd:d1:7a:aa:78:e1:
ac:51:52:a7:fb:71:07:8c:93:74:4b:0b:47:a4:59:
fb:b9:3f:b8:e1:7a:3e:45:fc:1c:dd:f2:6f:01:6a:
cd:ed:a8:ae:15:de:c6:c5:5e:28:d4:f1:18:83:8f:
7c:86:16:80:a1:9e:66:c3:54:4b:9f:56:af:e2:af:
e1:42:52:67:8c:cc:7c:28:09:ad:1f:71:bc:19:46:
5d:e0:95:8a:c5:18:21:a6:d9:b5:c3:6f:bb:9f:64:
84:3a:01:8d:94:78:f7:58:d2:4f:9c:9a:72:97:6b:
c1:9d:80:d1:cd:c9:f7:cd:99:26:7c:e2:9a:a2:ff:
7a:9e:67:3e:cf:a9:a1:89:2e:42:99:c7:3c:d6:84:
06:b0:52:97:b1:14:20:59:71:6f:d7:b6:32:56:98:
d7:fb:86:f7:2e:36:f7:ee:88:06:fd:5d:85:bc:ec:
89:ff:20:b4:c9:e0:ea:bb:7f:93:48:02:09:90:cf:
2d:97:7a:de:9a:18:15:c1:fd:80:5e:2f:09:40:7a:
38:f6:a0:49:69:64:09:99:3e:36:6a:be:f6:af:e4:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D6:49:D3:4F:B4:B3:95:01:FC:A6:85:D3:1F:08:D8:02:9A:FD:50
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e6:f6:85:2b:2c:63:88:8a:d5:44:25:54:0f:78:f8:0f:95:
16:97:19:76:5b:1a:55:c2:de:3b:47:9b:7b:92:09:d2:73:8a:
12:d2:09:f6:17:60:b3:fc:72:ea:1e:af:06:72:ec:c7:30:e1:
19:72:7e:21:d6:d1:21:8f:9d:4c:b5:18:5e:f7:93:79:08:e2:
c8:ad:ef:af:52:e0:b2:26:e2:33:20:b4:45:54:0e:f1:cb:7d:
85:11:f6:19:cb:47:b8:61:b2:19:4b:ac:44:ba:8a:d7:1a:9c:
fc:14:f9:04:85:3c:4c:1b:e7:e8:ca:ed:7f:70:e3:2b:7b:c7:
7e:da:91:93:12:10:7e:6d:ff:08:e9:57:7e:81:07:96:58:5f:
a1:0e:70:32:59:95:c4:9f:b3:51:77:7a:0b:c8:d0:ae:d0:b1:
4f:2c:69:f1:79:58:32:fc:da:84:dd:2f:14:52:03:18:b2:1f:
66:a0:20:2f:09:7f:5a:92:60:c0:20:da:6c:52:ea:43:ba:5d:
4a:d4:8f:04:4e:8b:44:ef:25:b7:1d:36:2d:8a:48:be:53:0d:
b1:a3:98:2e:3f:86:1e:b9:55:b7:d1:1c:56:54:38:77:e7:2e:
59:1b:31:54:cb:08:e3:3a:6e:2a:85:26:aa:bf:ef:d9:90:72:
d2:dc:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:33:34 2026 by rpki-client