Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: 5Y6et4BF6JJ/jPJfMwsws1hmbfbisJ5qZDQN2AAIcE0=
Subject key identifier: 2A:02:1F:4E:BB:9D:0D:C5:3F:84:34:B4:FF:34:45:39:5B:F9:4D:21
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019E1FB5E9BAABB606094D9DE269D07BBB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 07E9
Signing time: Wed 13 May 2026 05:01:15 +0000
Manifest this update: Wed 13 May 2026 05:01:15 +0000
Manifest next update: Thu 14 May 2026 05:01:15 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: BZK+IEm5vymZL7m43yON7qkYWunh1GAtUfCE0LvS9Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:e9:ba:ab:b6:06:09:4d:9d:e2:69:d0:7b:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: May 13 05:01:15 2026 GMT
Not After : May 14 05:01:15 2026 GMT
Subject: CN=2a021f4ebb9d0dc53f8434b4ff3445395bf94d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:98:6b:ef:d8:11:d1:b5:08:6d:ae:d2:b7:f1:
0d:2b:07:7f:a2:fc:e3:99:93:81:0b:ae:7f:58:93:
36:d7:3b:d3:09:53:e6:74:10:c2:e4:95:7a:dd:cd:
7d:00:78:81:51:41:5c:b1:26:fe:45:5d:a9:dd:9b:
16:5a:0c:82:7b:5f:58:65:e6:11:8f:5b:62:2a:cf:
90:dd:ca:6e:b5:9c:4d:18:f8:06:59:35:e0:0e:46:
c9:83:b7:13:62:e1:02:a8:60:b4:92:4f:85:d9:8a:
32:67:b9:65:92:7d:66:3d:82:54:58:de:34:ac:a8:
1c:4d:76:9d:1a:1e:f2:26:12:85:93:c7:ec:71:54:
a7:3b:97:bb:83:d5:3c:06:36:7d:49:2a:75:c0:8c:
bd:16:74:be:63:18:f0:8e:40:24:a5:b6:03:cd:ce:
32:8d:45:5b:26:df:42:c3:97:2f:b4:e3:7d:d9:7c:
ad:60:0d:f1:f2:9d:b2:7b:03:33:83:62:fb:e3:e8:
19:8c:86:71:f7:23:5e:85:32:a3:70:ab:45:6d:f6:
82:15:83:ef:45:40:18:4a:35:97:7b:fc:96:6f:59:
29:19:68:91:f2:82:75:4e:68:72:9a:d2:44:69:4c:
57:fb:5f:00:77:da:52:25:fe:c5:14:a8:b2:97:d0:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:1F:4E:BB:9D:0D:C5:3F:84:34:B4:FF:34:45:39:5B:F9:4D:21
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:93:a1:ea:24:83:12:5b:ea:f5:da:f1:bc:ef:60:d3:56:0e:
02:83:d9:93:df:a3:e9:00:cb:d7:99:4a:9c:ef:54:05:2a:b0:
7a:6e:fc:50:87:de:28:ad:0c:16:d3:0d:5e:65:37:a0:4f:37:
73:c6:09:df:cd:fb:f7:96:e2:55:b8:c9:1c:d9:3a:10:29:a1:
c1:a5:24:1a:13:c8:c3:68:cb:69:d7:34:3a:ad:dc:5c:60:38:
5e:3a:0d:cd:ac:f0:a0:63:d9:26:37:0b:b9:91:73:ed:91:d8:
25:d8:62:c6:51:46:ee:fe:b6:aa:05:6f:bc:92:31:14:6e:2d:
0d:b0:9d:ec:7b:bd:5f:17:02:31:32:ff:6d:64:42:06:a1:c1:
9d:7c:fc:67:dc:85:04:cf:93:ef:aa:87:8f:78:43:e9:29:69:
30:16:ca:8c:2c:3b:41:0e:38:8a:a3:49:e9:f7:a2:4c:cf:cc:
4b:80:46:8d:09:67:59:0f:7b:c9:c2:b9:57:af:99:ae:58:0c:
e0:7f:ac:e1:db:9a:a0:18:0c:c3:ab:c3:40:9a:58:e3:13:50:
8a:39:29:08:2c:39:af:55:d7:d3:fc:61:9a:a0:46:4e:17:a5:
53:54:d7:68:f0:c8:d6:f2:7d:48:ff:a8:8c:ab:94:c8:3e:0b:
ef:bd:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:16 2026 by rpki-client