Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: OR1ejb6limc40wtmo7th5rVPsbrS7AVZXz2EmahvGig=
Subject key identifier: 91:8E:02:F7:43:83:4A:D8:D0:B6:1E:E3:D6:5E:20:11:21:9B:6E:9F
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 019E1D59B4E8197410C440E088AC2414F402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 74
Signing time: Tue 12 May 2026 18:01:18 +0000
Manifest this update: Tue 12 May 2026 18:01:18 +0000
Manifest next update: Wed 13 May 2026 18:01:18 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: wfOrYJp4YIr+i3Rzj03Cuyg5Ss9eIWGW3RuxeYuRh+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b4:e8:19:74:10:c4:40:e0:88:ac:24:14:f4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: May 12 18:01:18 2026 GMT
Not After : May 13 18:01:18 2026 GMT
Subject: CN=918e02f743834ad8d0b61ee3d65e2011219b6e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:0a:12:12:b8:b9:13:84:fa:27:cb:5b:18:
1a:93:e1:4a:96:4d:c5:71:a7:c7:65:74:47:22:d2:
10:75:db:87:50:e0:12:7f:cf:89:4e:e0:ec:f3:1a:
0c:79:07:b5:48:3d:2c:be:3a:90:00:8c:26:50:50:
7a:fe:2e:1e:88:2f:29:22:ab:fe:cd:14:18:61:ac:
c5:64:ee:2c:84:cb:ba:62:d1:cf:98:7a:0d:0e:55:
8a:d6:d5:f3:f3:1d:34:e2:2e:18:04:d1:7c:16:09:
60:ab:d8:8e:e8:c7:b5:85:8c:d3:77:f3:5e:28:93:
88:9b:de:97:2f:f3:b8:5f:50:9b:9b:8e:38:fd:86:
15:dc:7c:e9:22:96:20:1e:f9:62:04:33:b7:09:77:
ca:ae:0f:e1:29:43:a6:37:f6:80:0c:63:37:aa:ac:
a1:29:67:a9:c3:7d:de:b1:5d:6e:6c:f0:2d:dc:15:
e9:65:d3:54:b9:9c:f6:c8:03:34:70:53:2f:40:e9:
80:19:74:13:da:43:cc:c5:41:db:82:d0:c6:e0:45:
be:d0:15:60:01:93:38:96:77:36:33:64:f5:fc:73:
71:68:21:86:05:69:41:3e:5c:50:21:d4:56:cc:c1:
2e:05:c5:a5:c5:45:1e:54:64:6f:97:52:06:13:90:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:02:F7:43:83:4A:D8:D0:B6:1E:E3:D6:5E:20:11:21:9B:6E:9F
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:92:44:44:32:24:3b:b2:7d:77:df:98:a2:0a:05:5e:58:
a9:12:36:30:64:92:15:6e:20:4a:a4:43:d6:73:18:bf:d9:76:
a2:fd:f3:97:32:7b:32:69:68:85:cd:e8:10:f3:dd:0d:f2:0b:
6d:2a:ed:63:8d:fc:02:10:20:70:01:07:c3:73:8b:96:b2:cc:
8b:b0:80:85:29:99:58:e9:72:e0:46:f8:68:ec:9e:ad:32:0c:
0c:15:bc:46:38:3c:45:5d:08:e5:1a:8a:ac:f0:ed:d4:22:2c:
0e:ac:5f:e2:63:bf:1c:c6:9d:22:57:47:c3:8c:47:4a:f5:b0:
54:ea:cf:ab:cb:aa:3c:ef:45:2f:35:f2:74:af:b2:d3:ff:01:
8a:38:37:e0:a5:48:6e:db:8b:2e:34:f8:96:76:cb:fb:84:46:
0a:c7:88:ac:66:9a:06:00:c8:1a:dc:91:e7:40:16:82:c6:e8:
19:12:45:f0:ee:35:bc:42:69:6f:70:28:bc:6b:3b:b4:3c:51:
cd:7e:95:82:0d:79:01:01:91:64:52:6d:83:5b:aa:28:17:d6:
17:2c:dd:4d:51:2b:9d:ec:b6:8e:90:c6:ea:ff:14:dc:03:12:
04:13:73:37:99:d1:55:41:f6:dd:2a:74:a0:6f:20:f7:71:af:
a7:0f:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:59 2026 by rpki-client