Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File: vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier: Q6PBccljslzv+urgyDSZYCaLZNI3JmJw/RKjPlSa4P0=
Subject key identifier: DF:26:A0:A3:F0:47:98:20:09:07:C3:F5:D8:1D:85:A5:F6:DA:63:8D
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer: /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial: 019E1D90303D86DB98EC0955EDA4403F3B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number: 0158
Signing time: Tue 12 May 2026 19:00:49 +0000
Manifest this update: Tue 12 May 2026 19:00:49 +0000
Manifest next update: Wed 13 May 2026 19:00:49 +0000
Files and hashes: 1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: scBM/PbLsuxQmuZhbpQ6NDQhK9ecGbbbCbSAGZX14K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:30:3d:86:db:98:ec:09:55:ed:a4:40:3f:3b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Validity
Not Before: May 12 19:00:49 2026 GMT
Not After : May 13 19:00:49 2026 GMT
Subject: CN=df26a0a3f04798200907c3f5d81d85a5f6da638d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:5e:b0:21:09:48:e4:8f:9f:d7:c8:98:ad:
a7:8f:fd:05:b9:e4:28:1f:40:01:06:2a:72:58:b5:
d6:83:c0:fb:d6:03:80:dc:71:65:95:9d:00:c2:09:
0c:66:72:1a:cd:ab:ca:36:41:4b:97:39:3e:fb:dc:
64:6a:ea:b6:10:38:21:dc:f3:6f:71:a4:f9:31:b4:
01:24:14:ee:1f:51:57:74:4a:04:3a:4a:97:ae:86:
50:73:fd:55:1d:98:ca:07:b3:45:d9:9e:29:c7:89:
77:23:93:ba:49:08:8c:b7:8b:5a:d2:cb:11:76:39:
36:b9:9e:4d:fa:ce:de:84:3f:60:95:2c:94:7a:54:
80:14:9e:e4:f9:aa:9c:59:c4:50:44:1b:8c:6c:2c:
dc:de:77:69:89:e2:20:b9:00:0d:86:72:44:1f:e8:
df:22:6d:69:2f:a4:8c:7f:40:fb:78:3e:6c:60:42:
e2:2a:9b:bd:f5:b6:4a:93:66:45:a3:09:24:ab:75:
bf:6b:00:a0:bc:14:02:5a:2f:7a:20:95:19:06:fb:
96:18:25:09:f9:9f:76:35:19:28:52:e5:44:e7:4f:
69:d5:2b:7b:1e:7c:8e:a6:06:ee:45:f4:be:e9:f6:
af:1a:ad:57:59:2f:4f:72:00:a9:7d:12:be:7e:02:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:A0:A3:F0:47:98:20:09:07:C3:F5:D8:1D:85:A5:F6:DA:63:8D
X509v3 Authority Key Identifier:
keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d9:57:5b:38:a8:16:60:ee:a4:3d:83:4d:44:5c:ed:c9:ff:
7e:c6:13:f4:ce:ec:1c:62:ea:52:ac:c5:94:6a:02:be:6a:c5:
cd:5e:bc:25:85:b6:58:85:68:43:51:36:4d:89:87:43:01:ca:
05:4f:4a:d0:dd:bc:f3:42:eb:15:f0:4d:f9:9c:d0:27:32:16:
e8:bd:4d:28:7a:3c:1f:f1:0b:8e:af:dd:7e:ee:40:6a:ce:b5:
31:f3:39:b5:f2:fb:3a:b9:6b:d9:fc:90:3d:d9:bc:8f:f3:e3:
83:b1:ce:4f:73:2d:d9:66:af:31:77:9c:94:9c:0f:da:cf:64:
99:bc:47:1b:24:be:7c:b0:3a:e7:14:8c:02:8f:74:f7:32:e2:
69:c7:4d:7e:42:dd:56:ca:45:40:2f:71:68:bc:09:7b:11:2a:
7d:48:7f:80:e7:64:7f:22:30:12:e9:16:c7:06:3f:a8:9a:5b:
64:af:97:f1:a0:d8:ed:50:7f:2f:21:70:75:c4:73:a1:64:20:
f0:19:26:69:ae:88:ed:d0:b0:3c:c5:0e:97:d3:81:6c:9c:61:
e6:23:a8:fb:41:f2:f7:7c:87:67:de:4d:94:69:16:60:2e:7d:
72:91:38:c3:05:b5:15:86:6b:19:e4:ac:5f:0d:e8:42:74:15:
d0:75:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:09 2026 by rpki-client