Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
File: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft (raw, json)
Hash identifier: JPL46gZUIF3jLPwuqxUbyTDCahx5BsLlZ3Ejydu/WoE=
Subject key identifier: BB:1F:1A:DB:D2:3E:03:AB:C7:8F:F2:89:18:6D:99:C6:68:0C:45:B0
Authority key identifier: BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
Certificate issuer: /CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Certificate serial: 019E1BD8DF3C78B5D2068B6E26F105B87AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
Manifest number: 19
Signing time: Tue 12 May 2026 11:00:58 +0000
Manifest this update: Tue 12 May 2026 11:00:58 +0000
Manifest next update: Wed 13 May 2026 11:00:58 +0000
Files and hashes: 1: Gk3qRjHc4sWF2rOaGo2ujBXucwU.roa (hash: pHlVorceZH8dGeu3/EtQuQX+jpCTueBXs4FELHev8DM=)
2: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl (hash: J9qBsNy2+LoLEjDK6BWTqaPi4QnlGbpdBJqkwMLRlEs=)
3: yH4YewMKblaB_L12xQ35G0SXRYk.asa (hash: nott0T0TIvklgCDjdkStX556EDcXcSa/s6c9BihWlRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:df:3c:78:b5:d2:06:8b:6e:26:f1:05:b8:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Validity
Not Before: May 12 11:00:58 2026 GMT
Not After : May 13 11:00:58 2026 GMT
Subject: CN=bb1f1adbd23e03abc78ff289186d99c6680c45b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:b9:1a:75:13:6f:a0:68:c6:a2:e1:1f:14:
00:68:73:b4:fb:7a:85:45:f6:e4:a5:ed:45:06:ed:
98:6d:24:b5:eb:21:fd:85:7c:6c:38:5f:06:8a:85:
01:c9:0e:4b:79:62:a5:dc:d2:0d:51:22:58:c3:0c:
40:9e:34:70:f2:7f:21:bd:e7:0c:5f:81:4a:5c:8d:
6a:d1:4f:d2:96:15:e6:02:d3:88:44:c0:93:71:3c:
3b:a9:d3:55:82:18:8e:18:b7:00:cc:47:f0:5a:a4:
73:1e:cc:b0:cb:89:e4:c7:19:92:4b:f9:f7:f2:1a:
69:b9:69:55:b4:80:ff:cc:e0:76:29:fd:79:cb:6b:
45:d6:60:e2:bd:0f:71:c5:43:e8:51:42:22:20:61:
ac:27:11:5c:c6:29:44:be:44:af:56:34:87:d7:86:
f5:fb:d7:0d:97:99:97:d3:c2:7a:b5:3c:21:d0:a4:
56:00:05:fe:23:3e:0f:68:f6:f6:b1:4b:5a:5b:d0:
ca:ae:0b:ff:55:41:66:6a:3a:20:95:a3:ee:f3:dc:
b1:1e:07:fb:5f:13:a7:b4:0b:33:5d:5f:fa:6b:c2:
46:d6:e8:23:b7:6b:78:b1:da:73:98:b8:11:1a:20:
f7:f7:72:4c:3c:26:62:43:a1:8f:9e:b2:43:cd:86:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1F:1A:DB:D2:3E:03:AB:C7:8F:F2:89:18:6D:99:C6:68:0C:45:B0
X509v3 Authority Key Identifier:
keyid:BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:3d:b2:39:93:08:9b:ca:88:23:f3:77:4a:56:09:aa:2c:
a9:7c:46:51:15:13:45:42:63:07:cd:bc:fe:9d:93:df:45:9b:
02:ab:69:9e:f9:27:c1:4d:a6:31:ae:56:66:74:93:86:0b:6a:
aa:58:dc:50:4b:15:5c:0d:60:67:93:52:af:47:af:13:f9:fc:
dd:14:d8:04:e6:bd:ca:e6:07:d5:ea:0a:71:19:e5:cb:59:d9:
8b:29:07:0d:38:6d:ec:ba:23:39:bb:d2:d1:b8:52:ce:fa:54:
79:47:c1:44:a1:91:ba:0e:41:5b:1b:47:a3:b7:5e:40:8b:67:
a1:f8:ab:75:1b:9b:8e:e7:0a:ea:36:e3:a9:73:14:66:cf:55:
11:2d:71:54:ce:bf:5d:c7:c9:04:3f:27:f4:41:09:6d:06:c1:
d2:50:8c:cc:f3:2e:b4:f9:b1:57:6c:e8:58:5e:bb:92:0d:d3:
c9:ed:3f:8e:71:f2:be:ba:34:1c:dc:f7:e7:22:94:0a:5b:00:
20:c5:71:84:39:61:65:e7:6e:0a:ad:84:fb:2f:49:74:d8:65:
41:a5:75:59:47:6a:c9:bb:a6:05:8a:b8:35:b3:49:43:c5:dd:
76:11:4b:1d:6b:ce:b6:11:a2:f5:e5:45:33:ff:a3:71:50:f9:
34:53:b8:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2N88eLXSBotuJvEFuHq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjNlYTRmMmNiZmI3YzhkM2Q2ODE5OTQwZDM3NzY0YWM1
YmI3ZDgwHhcNMjYwNTEyMTEwMDU4WhcNMjYwNTEzMTEwMDU4WjAzMTEwLwYDVQQD
EyhiYjFmMWFkYmQyM2UwM2FiYzc4ZmYyODkxODZkOTljNjY4MGM0NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT65GnUTb6BoxqLhHxQAaHO0+3qF
Rfbkpe1FBu2YbSS16yH9hXxsOF8GioUByQ5LeWKl3NINUSJYwwxAnjRw8n8hvecM
X4FKXI1q0U/SlhXmAtOIRMCTcTw7qdNVghiOGLcAzEfwWqRzHsywy4nkxxmSS/n3
8hppuWlVtID/zOB2Kf15y2tF1mDivQ9xxUPoUUIiIGGsJxFcxilEvkSvVjSH14b1
+9cNl5mX08J6tTwh0KRWAAX+Iz4PaPb2sUtaW9DKrgv/VUFmajoglaPu89yxHgf7
XxOntAszXV/6a8JG1ugjt2t4sdpzmLgRGiD393JMPCZiQ6GPnrJDzYbGywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsfGtvSPgOrx4/yiRhtmcZoDEWwMB8GA1UdIwQY
MBaAFL1j6k8sv7fI09aBmUDTd2SsW7fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldQcVR5eV90OGpUMW9HWlFOTjNaS3hidDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDM4YTUtYjliMC00ODAyLTk5MDkt
Mzg0NWE0MmRhZTBiLzEvdldQcVR5eV90OGpUMW9HWlFOTjNaS3hidDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hNDM4YTUtYjliMC00ODAyLTk5MDktMzg0NWE0MmRhZTBi
LzEvdldQcVR5eV90OGpUMW9HWlFOTjNaS3hidDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA89sjmT
CJvKiCPzd0pWCaosqXxGURUTRUJjB828/p2T30WbAqtpnvknwU2mMa5WZnSThgtq
qljcUEsVXA1gZ5NSr0evE/n83RTYBOa9yuYH1eoKcRnly1nZiykHDTht7LojObvS
0bhSzvpUeUfBRKGRug5BWxtHo7deQItnofirdRubjucK6jbjqXMUZs9VES1xVM6/
XcfJBD8n9EEJbQbB0lCMzPMutPmxV2zoWF67kg3Tye0/jnHyvro0HNz35yKUClsA
IMVxhDlhZeduCq2E+y9JdNhlQaV1WUdqybumBYq4NbNJQ8XddhFLHWvOthGi9eVF
M/+jcVD5NFO4Bw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:32:56 2026 by rpki-client