
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: e69fhzDdJ7fVDKHmvTsNGhPZL1w/nBhTkZRCPv1M4Cc=
Subject key identifier: 67:A2:1D:31:28:96:D8:8D:92:3C:C6:2D:4C:ED:56:26:BE:44:A3:BD
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 019E1E353615AD1DEEADB55E61798D869538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 22:01:04 +0000
Manifest this update: Tue 12 May 2026 22:01:04 +0000
Manifest next update: Wed 13 May 2026 22:01:04 +0000
Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: P0EV3mHOqJJbHw8XpqvnNf4J2JerLq1yeBDr4bVaASU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:36:15:ad:1d:ee:ad:b5:5e:61:79:8d:86:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: May 12 22:01:04 2026 GMT
Not After : May 13 22:01:04 2026 GMT
Subject: CN=67a21d312896d88d923cc62d4ced5626be44a3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:08:a9:c5:73:64:08:35:96:cf:35:ae:84:
17:c1:f0:ba:83:7a:75:61:af:94:d7:44:95:b3:de:
57:5b:b0:8d:d1:58:f1:cc:6d:42:4d:d3:28:7c:db:
c9:ef:e6:18:85:c6:b9:4e:af:d4:fc:00:4b:39:9f:
97:7f:ae:0e:62:d2:d2:e5:b5:39:61:cf:64:6d:3d:
44:de:d0:cd:c5:60:4b:48:7e:2f:6f:37:7b:10:f6:
5f:91:46:a9:f4:a0:59:f9:2d:75:d2:d0:8a:26:af:
cb:a4:eb:0e:c2:8c:72:d6:fb:bc:8f:3d:b4:bd:14:
61:40:8b:8b:dc:1f:41:fe:c5:d4:02:2d:94:71:0b:
7e:e6:3a:ce:86:53:60:d3:9a:55:56:f2:04:0a:88:
b9:5e:21:5f:e5:19:18:51:3d:87:d0:9a:27:5c:22:
92:cc:c6:d9:39:b9:be:5b:fb:1d:6d:59:91:50:7d:
5d:49:34:83:ed:72:70:2e:38:b4:7a:17:f2:f1:a0:
b3:7d:c6:d8:b0:2e:4f:00:f7:ce:ee:f1:a6:85:e9:
f5:96:8d:d1:b0:af:c9:e3:49:80:17:56:ed:ca:36:
8e:fc:a7:ad:fe:0a:2c:f9:90:b2:e8:e5:58:9e:ca:
dd:bf:9c:49:5b:15:12:a2:1e:f9:c7:d4:78:b2:28:
2a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A2:1D:31:28:96:D8:8D:92:3C:C6:2D:4C:ED:56:26:BE:44:A3:BD
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:16:b0:7e:20:10:c4:24:77:1c:48:a3:33:83:42:07:d3:90:
54:0f:ce:bc:fa:38:71:f4:19:9e:95:ce:86:24:75:82:61:a2:
28:57:24:10:a1:5e:a1:17:da:2a:af:71:3c:4f:70:5e:1c:71:
2e:4e:5e:e1:31:a8:c4:f6:3b:e2:e4:8e:d6:cf:1f:b2:fe:1e:
fa:6f:ee:bf:00:d2:1d:59:76:2c:d8:c2:72:97:25:bc:ac:37:
79:ea:f8:78:b5:1a:20:29:b5:80:77:63:ec:0e:a4:95:28:a1:
26:91:42:84:ae:dc:93:39:5f:cc:2d:f2:d5:93:01:0d:be:01:
ee:b2:c7:1b:ea:59:38:17:47:f7:a9:6b:38:c2:7b:90:60:a4:
bf:7f:78:89:b8:2d:0d:fb:81:8b:03:0c:ca:c1:46:22:c8:dd:
ec:31:de:2e:fe:a0:ff:b6:9e:e2:a8:49:86:22:83:b6:a2:b9:
fc:05:65:64:9f:78:bb:67:25:56:14:35:dd:cc:2d:eb:de:24:
38:78:43:2d:ff:ef:e0:89:70:5a:a4:c5:3d:8b:0e:b2:7d:21:
31:40:16:01:21:0d:9c:0b:33:21:b8:60:ce:62:5e:09:ca:8f:
ec:52:9f:0f:7b:b2:ea:e4:69:8b:70:16:7b:4b:a4:2e:86:5a:
2b:cd:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:20 2026 by rpki-client