Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: ojD9yuUTMmCemuba2/XMN9+agSiOSlXtndzDSxhxwqk=
Subject key identifier: 2A:E8:3A:34:50:43:57:DC:9B:9E:05:4B:51:AF:54:59:2A:D2:EB:8B
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019F8EA2B91E7E14CF43ACC20A5DC0AAC719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 08A7
Signing time: Thu 23 Jul 2026 11:00:56 +0000
Manifest this update: Thu 23 Jul 2026 11:00:56 +0000
Manifest next update: Fri 24 Jul 2026 11:00:56 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: n3HDOVL8UdhYPFCkfn/L8JjIZCH/sLoC9gr8EL2cJIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b9:1e:7e:14:cf:43:ac:c2:0a:5d:c0:aa:c7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jul 23 11:00:56 2026 GMT
Not After : Jul 24 11:00:56 2026 GMT
Subject: CN=2ae83a34504357dc9b9e054b51af54592ad2eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:de:95:8d:74:9b:97:54:80:dd:21:04:2f:
d5:83:e3:f1:87:a4:98:79:a1:6d:c3:87:0a:80:30:
cf:5f:f8:a0:f9:1b:76:c7:29:b6:08:ef:67:3d:2a:
fa:ea:20:6d:95:26:78:6c:28:82:0c:9f:00:df:e6:
78:1e:b8:36:56:98:32:d9:ed:b5:f8:44:2f:49:a8:
b2:ee:ea:a7:c1:75:3e:2d:5c:d3:b5:1a:55:44:d4:
6c:b6:fe:c9:d1:50:36:74:d9:30:4c:6f:67:33:64:
eb:37:80:4e:9d:9e:ec:b6:23:8f:b8:19:64:3e:bd:
90:97:44:ad:8a:bd:94:06:fb:78:00:0c:50:07:10:
67:7d:de:96:be:ef:cf:9c:01:e5:98:04:8d:66:9f:
a4:38:26:fe:0c:28:30:98:55:51:59:e5:a2:0a:c3:
48:fe:b3:c9:a7:97:ed:2d:7e:35:54:78:5c:7a:e6:
02:73:30:a8:c2:75:ee:79:27:3c:75:22:34:f5:76:
3f:70:e8:ca:eb:30:dd:61:d1:83:e3:72:db:18:14:
f3:87:32:25:47:c4:92:76:58:f7:c5:01:4b:c9:9e:
c4:f4:b0:8b:16:55:df:6b:5c:4e:70:1e:98:a6:3e:
b1:a3:89:9d:93:d1:73:8c:63:06:f0:e0:a3:f3:cf:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E8:3A:34:50:43:57:DC:9B:9E:05:4B:51:AF:54:59:2A:D2:EB:8B
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7b:4b:31:7f:4c:b9:ba:ef:25:74:bd:59:5e:ca:82:52:58:
fc:82:d9:5a:8a:89:32:b7:70:02:b2:43:be:b7:5f:a2:7e:ec:
31:db:8a:12:38:c9:da:f2:f2:91:2d:0e:a8:10:41:81:b4:c4:
a7:2c:d8:9b:ca:8b:0b:51:68:19:23:34:a1:11:3d:50:ac:1e:
fb:a3:98:c6:31:97:35:fe:c7:26:73:00:c1:06:44:79:3b:be:
9c:9b:98:42:a7:e1:3f:f6:78:f7:83:92:29:fd:c6:ff:e4:b9:
85:d4:f0:9b:37:50:d5:1d:b8:9d:fc:9a:f0:0b:ae:87:e3:e4:
df:30:8f:12:1f:0b:ae:d2:98:40:ab:47:fe:57:40:59:63:56:
d6:89:9a:20:1c:86:a4:9b:49:a2:53:79:ff:42:59:a2:ce:91:
3e:c6:1d:c0:43:55:29:e1:64:f8:b0:87:74:b5:a1:a2:70:a6:
ac:99:e0:14:75:d1:cd:83:ce:b0:d3:ae:cc:fc:dc:ec:b4:39:
aa:f7:3c:6f:ca:30:d2:ce:4b:8f:fe:e1:bf:e3:74:cd:14:18:
53:72:4a:ec:2e:fc:3e:94:cc:b1:ec:16:fa:e7:89:45:6f:5e:
1a:ed:ca:39:bd:30:a2:c2:0e:21:3b:77:e3:74:56:5d:1e:52:
51:1f:56:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OorkefhTPQ6zCCl3AqscZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3
ZTgxZTAwHhcNMjYwNzIzMTEwMDU2WhcNMjYwNzI0MTEwMDU2WjAzMTEwLwYDVQQD
EygyYWU4M2EzNDUwNDM1N2RjOWI5ZTA1NGI1MWFmNTQ1OTJhZDJlYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkLelY10m5dUgN0hBC/Vg+Pxh6SY
eaFtw4cKgDDPX/ig+Rt2xym2CO9nPSr66iBtlSZ4bCiCDJ8A3+Z4Hrg2Vpgy2e21
+EQvSaiy7uqnwXU+LVzTtRpVRNRstv7J0VA2dNkwTG9nM2TrN4BOnZ7stiOPuBlk
Pr2Ql0Stir2UBvt4AAxQBxBnfd6Wvu/PnAHlmASNZp+kOCb+DCgwmFVRWeWiCsNI
/rPJp5ftLX41VHhceuYCczCownXueSc8dSI09XY/cOjK6zDdYdGD43LbGBTzhzIl
R8SSdlj3xQFLyZ7E9LCLFlXfa1xOcB6Ypj6xo4mdk9FzjGMG8OCj88/yDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCroOjRQQ1fcm54FS1GvVFkq0uuLMB8GA1UdIwQY
MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt
MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl
LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHtLMX9M
ubrvJXS9WV7KglJY/ILZWoqJMrdwArJDvrdfon7sMduKEjjJ2vLykS0OqBBBgbTE
pyzYm8qLC1FoGSM0oRE9UKwe+6OYxjGXNf7HJnMAwQZEeTu+nJuYQqfhP/Z494OS
Kf3G/+S5hdTwmzdQ1R24nfya8Auuh+Pk3zCPEh8LrtKYQKtH/ldAWWNW1omaIByG
pJtJolN5/0JZos6RPsYdwENVKeFk+LCHdLWhonCmrJngFHXRzYPOsNOuzPzc7LQ5
qvc8b8ow0s5Lj/7hv+N0zRQYU3JK7C78PpTMsewW+ueJRW9eGu3KOb0wosIOITt3
43RWXR5SUR9Wyg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:41 2026 by rpki-client