Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: mkntW8FsnLDoLKv9NOrt6PsWyVjlH5Z8F2KRZ3Jcu3Q=
Subject key identifier: 00:03:E6:EB:EE:A5:BB:AC:36:D8:19:2C:0C:28:99:13:57:BD:EF:58
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019E1EA3DDFD02C5B3D3D04992C72D00F2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 00:01:56 +0000
Manifest this update: Wed 13 May 2026 00:01:56 +0000
Manifest next update: Thu 14 May 2026 00:01:56 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: k/TN6qoydlJVMQag63/34x9xbeFUY0WK3fU5GBM5fRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:dd:fd:02:c5:b3:d3:d0:49:92:c7:2d:00:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: May 13 00:01:56 2026 GMT
Not After : May 14 00:01:56 2026 GMT
Subject: CN=0003e6ebeea5bbac36d8192c0c28991357bdef58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:98:1a:8f:af:f2:65:01:07:18:b3:83:bc:2b:
0a:67:3d:d9:50:96:5e:06:35:ef:b7:3d:ac:77:28:
82:ef:c9:1e:b6:15:ab:a7:b6:9a:d5:5b:41:39:d8:
69:6d:1d:76:d2:dc:7e:66:42:01:5c:c3:0b:98:19:
df:f1:fd:6b:53:dc:32:6c:74:46:cc:a6:77:0b:24:
87:6e:01:56:aa:b3:9b:eb:68:4d:79:fb:b2:a2:de:
a7:49:b5:9c:d6:fe:84:42:8d:5b:c8:ad:a4:6e:a5:
29:8f:96:09:0c:8b:e2:c6:d2:f8:52:bc:d4:43:89:
19:32:2d:35:30:f5:5f:72:aa:06:79:4b:fc:b8:5d:
9c:82:9f:eb:20:66:39:8a:7c:8d:64:86:d0:da:e2:
d0:76:64:ec:7c:f3:64:a1:f7:5f:04:0d:cf:91:e7:
61:a2:c5:8c:ea:1c:1c:1d:97:8d:73:7d:5a:68:75:
bb:6c:cc:cd:32:ec:e1:86:92:3b:2f:6b:6d:1f:d5:
01:bd:e8:18:b5:cc:e9:25:c1:32:0e:df:78:bc:e1:
f7:88:d4:07:a5:f3:9b:6d:19:29:b3:df:98:41:78:
04:42:8b:fc:c6:0d:a0:62:90:d6:b6:c8:39:a3:d7:
f8:58:4d:b6:f1:11:e3:ca:a6:5e:88:1d:b2:44:2d:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:E6:EB:EE:A5:BB:AC:36:D8:19:2C:0C:28:99:13:57:BD:EF:58
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6b:2b:29:99:bb:67:00:3a:9c:5f:e0:85:09:55:4b:e8:38:
c8:e5:5b:5e:b3:75:d1:55:61:f1:df:2e:67:3a:86:6c:21:7c:
1f:47:12:93:8f:b9:86:96:5a:3a:a3:0c:bc:10:e5:61:2a:bf:
19:da:2a:62:96:ef:47:7a:49:38:64:9e:04:27:40:a4:77:89:
fe:63:3b:14:2d:99:90:dd:8e:a0:fc:31:fb:e0:85:bd:2b:9f:
2a:f4:a9:0b:d7:8d:5b:c5:e4:2b:46:c5:9f:33:fe:82:10:85:
93:c3:4c:61:6b:04:20:2b:ca:e7:71:f1:05:de:42:1e:ea:13:
1d:ec:fc:83:c1:6b:d0:4a:68:d1:02:3c:b4:ea:14:2c:d5:30:
41:4e:a2:03:4a:f1:fe:2d:3b:8f:5b:d1:1f:27:97:2e:2c:c0:
71:8b:9c:57:e6:3d:8e:65:ad:bb:d7:4c:d8:c6:1d:43:5f:b4:
3f:84:e0:ca:9e:59:e6:d6:90:59:6d:8c:66:ef:34:f4:1b:24:
e5:fa:2c:d2:0d:c3:94:29:6d:72:6c:dd:45:e0:8b:e8:fd:2f:
ae:02:09:46:ac:b9:86:fe:e7:96:a3:d9:2c:55:5b:40:61:1d:
aa:9a:2c:d1:24:b8:90:f3:00:63:63:60:7a:2c:36:07:dc:83:
62:6e:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:07 2026 by rpki-client