Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: o0VSSerBONlE7BAIx45C23tDm0x4agmi7uYxTRvTBKo=
Subject key identifier: 41:CC:E4:BD:9E:65:7B:46:6D:34:7B:50:E1:7F:1B:02:F3:92:B8:97
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 019E1DC7411EA36C7ED124287717A8FE4FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 20:00:58 +0000
Manifest this update: Tue 12 May 2026 20:00:58 +0000
Manifest next update: Wed 13 May 2026 20:00:58 +0000
Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: 0cUYSSDNJg29zqkmImjmw0MWAbAqvpqcnnJf4xQxf74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:41:1e:a3:6c:7e:d1:24:28:77:17:a8:fe:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: May 12 20:00:58 2026 GMT
Not After : May 13 20:00:58 2026 GMT
Subject: CN=41cce4bd9e657b466d347b50e17f1b02f392b897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:cb:73:b4:9a:11:11:d2:24:19:40:66:87:
21:08:40:e0:0d:33:21:c5:36:19:eb:bb:9e:8f:ca:
fe:75:ef:cc:11:90:43:20:76:ac:75:c7:cd:0b:7f:
f0:fc:62:f5:be:67:d4:71:79:27:6e:cc:7b:21:e0:
82:29:ac:d2:3a:4c:9b:3f:92:5d:a7:bf:c3:a9:0a:
29:47:71:18:3b:4a:b2:3e:bc:8e:7c:01:fb:1e:bd:
2d:48:00:4b:d4:f1:d8:5b:89:1b:57:f9:ea:d0:85:
c0:fb:16:f8:51:6f:f5:2f:d7:5e:af:ce:57:e0:8c:
58:c9:ef:a6:04:36:d5:a7:8a:f9:2c:cd:b2:19:8f:
96:dc:d0:7e:5e:ae:ac:f7:89:01:e1:67:30:16:bd:
de:93:fc:c1:8b:f0:5f:62:7f:f7:50:3f:4e:0e:94:
0f:b9:3b:21:80:60:fb:e1:e0:63:3d:45:da:66:dc:
05:67:01:46:c4:38:7f:5b:92:5b:8a:11:fe:ef:c4:
8a:8f:21:cc:c5:60:ad:da:08:c8:0f:29:2f:f0:76:
1e:76:56:60:d8:4d:36:3f:28:0b:d3:d9:22:29:92:
a3:20:ac:4d:e8:31:17:84:16:b4:67:17:4d:9e:18:
22:c8:97:06:42:73:1c:b1:c3:be:b3:8f:7d:03:f4:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:E4:BD:9E:65:7B:46:6D:34:7B:50:E1:7F:1B:02:F3:92:B8:97
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b6:0b:33:eb:74:99:60:45:83:20:b2:05:9b:6a:72:e6:f5:
13:6e:3f:81:f9:91:9e:a6:ba:bb:59:02:41:7f:51:38:bc:ef:
b1:3c:68:9d:28:4a:2b:e1:5f:12:8b:99:5b:3f:94:97:57:51:
b7:7d:2d:a5:14:4f:ca:bb:c6:12:71:fb:e1:ca:14:31:f8:18:
37:6a:03:fc:24:bb:ee:e9:1f:0a:87:7a:03:a4:75:95:c5:3c:
0a:94:51:de:9e:01:cc:af:18:77:15:7c:00:6e:52:56:45:0a:
99:b9:63:87:a8:a2:49:98:81:29:de:89:3b:85:99:1f:6b:2e:
d1:ca:32:78:db:2c:a0:b4:f8:f2:08:03:48:e6:48:73:8b:9e:
04:c8:e2:e6:1c:09:32:b9:b6:63:a7:90:76:4f:ad:c0:71:59:
95:c5:2c:8a:9b:00:c2:cc:59:38:a0:8f:22:bd:dd:9b:b9:b1:
ec:c5:4c:31:28:6b:8a:c5:40:54:e3:72:09:58:86:33:d9:b7:
1f:00:91:e0:9f:ed:22:72:92:b5:f4:96:74:69:3f:19:e7:7b:
b6:61:7d:58:a8:df:c6:ef:6c:5c:81:77:7e:5d:46:87:53:25:
a2:7e:0c:af:8e:de:90:b2:96:df:18:df:df:b1:3e:cc:ae:24:
ab:e6:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:13 2026 by rpki-client