Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: POso9XpW8mDjVnEYccEOqV/rGAml+IlZdE0JemwJhu4=
Subject key identifier: 06:02:91:06:8C:D4:B8:70:B5:0B:9C:65:8D:29:05:9F:91:B6:42:89
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 019D269628E326FC90296F7BF4D1751F3D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: jACzAXdfR4X0+dpKM6rGoNZ8qWaMtGh/arRAOScG/uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:28:e3:26:fc:90:29:6f:7b:f4:d1:75:1f:3d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=060291068cd4b870b50b9c658d29059f91b64289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:4f:22:54:de:d1:e8:a1:b6:cf:51:e7:24:
b9:ff:a7:bc:0d:b5:86:e7:a6:a3:8b:af:09:36:25:
5b:d5:82:2a:06:24:6c:55:0e:b5:31:4c:f9:76:54:
24:af:c6:dd:7a:d5:a5:80:50:cf:8f:63:85:7c:67:
6f:65:2f:7d:8d:b6:20:f6:1b:23:41:2c:52:4f:68:
9e:a8:cb:c7:a7:3f:5d:e8:65:23:bf:8f:10:12:22:
33:e6:c5:ae:a1:50:d2:07:15:bc:d7:14:7a:3b:09:
e6:ed:32:f8:54:6f:39:d8:3b:92:d6:f0:cd:3c:23:
03:77:85:3c:5c:3c:3e:d8:34:65:87:33:2a:7e:b4:
0b:30:cf:a4:f5:2b:f0:20:32:de:67:73:22:14:c2:
d2:ac:63:61:b6:0a:62:ad:c0:8d:c2:66:e7:9e:2a:
eb:b0:53:04:50:ef:6f:d8:3a:6b:bf:23:51:6f:d6:
0e:17:9a:a4:bc:be:b6:0c:67:66:d4:11:42:88:5c:
be:04:c3:1b:a2:b9:ef:df:10:8c:65:eb:92:48:49:
58:6f:63:5c:2d:d2:c1:2c:3d:fa:ec:b0:d5:a0:d4:
6f:3c:95:8c:82:0e:7d:7e:07:eb:9c:dd:7a:56:75:
d5:59:b0:43:31:2e:d0:d3:22:97:c4:6c:74:9d:b7:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:02:91:06:8C:D4:B8:70:B5:0B:9C:65:8D:29:05:9F:91:B6:42:89
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ca:10:c8:da:e0:13:ab:be:80:cb:dd:0c:84:19:10:8e:a1:
3a:0b:01:6b:9d:19:f9:53:f4:31:fb:83:e0:aa:a7:5e:47:02:
9a:a4:96:aa:d4:3a:25:27:bf:30:00:3a:92:4e:f1:6d:ab:7e:
b8:bc:b2:89:f8:7b:fa:46:07:c4:fb:ba:78:09:5e:7b:23:54:
35:99:d2:fa:5d:9d:b7:5a:62:98:c1:5d:d6:22:cf:51:30:bc:
ba:c1:8e:c3:f1:25:21:db:61:da:b3:9e:b3:06:f5:01:73:71:
57:f6:38:b1:11:a2:f1:35:39:43:f7:37:57:9d:ca:c4:c3:54:
a7:37:d4:14:77:34:f1:54:29:d7:d4:20:c1:5f:1f:c2:a5:d6:
61:b1:95:fd:cd:f9:7f:df:8d:57:d0:bf:3d:dc:bb:f9:da:9a:
39:dd:e3:a1:c7:29:a3:37:7d:2b:e4:61:27:ea:7a:f4:c1:ac:
75:68:58:8a:4d:76:56:15:7b:80:4f:38:84:0c:f8:fd:6f:46:
f2:48:40:6d:c5:c0:cf:c9:70:40:cf:b4:e7:2b:46:d5:21:a9:
a1:0e:06:98:ad:6f:6e:36:60:b3:18:82:04:5d:c7:86:69:f3:
57:49:3f:5b:d5:be:09:bd:d4:98:c3:82:f9:e9:b6:df:28:99:
d5:ac:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:57 2026 by rpki-client