
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: zyHEqgFFMBJtfijquyMYxNRhurBxCkXvbl4MPUB0J28=
Subject key identifier: 39:4A:C2:A8:49:7B:19:FB:7E:9F:E4:DC:49:A6:63:A4:8C:11:34:47
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019E20C84B30FF9BCEEB68BED5380336E7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 189C
Signing time: Wed 13 May 2026 10:00:57 +0000
Manifest this update: Wed 13 May 2026 10:00:57 +0000
Manifest next update: Thu 14 May 2026 10:00:57 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: mNzprS+hRYYC4RZulxS0bxUBD2DeWt37Na0NpWBDJ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:4b:30:ff:9b:ce:eb:68:be:d5:38:03:36:e7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: May 13 10:00:57 2026 GMT
Not After : May 14 10:00:57 2026 GMT
Subject: CN=394ac2a8497b19fb7e9fe4dc49a663a48c113447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:d4:65:97:12:5b:97:12:0b:e7:b4:12:31:
b3:6a:48:74:c3:2d:0a:81:fd:4f:e0:ba:f2:fa:b9:
18:b3:e4:1a:a8:30:be:eb:30:44:c5:45:3c:d2:d4:
c1:df:1f:f5:c1:c9:2b:65:a4:73:2c:b4:7d:88:31:
31:36:82:f7:52:79:08:a6:83:84:5f:dc:6e:c9:35:
9c:38:d9:b2:9a:ed:90:8a:2f:ca:64:ed:14:2a:26:
07:5f:03:de:6c:be:84:3c:1c:cd:ee:d7:7c:d7:cd:
1d:93:40:c4:80:99:e4:2a:fe:d3:66:d9:3a:27:df:
78:59:1d:34:ec:b5:97:aa:78:a3:f8:69:71:f7:1f:
69:23:bc:6e:f3:9d:f8:fd:41:2d:80:bd:e5:5f:75:
34:94:f3:6e:4e:6d:4b:ae:2a:4b:c5:b1:09:05:91:
15:ce:86:b4:f3:9a:65:c6:0d:ba:3b:6d:b4:cb:22:
e3:c7:3a:1f:c5:82:44:94:1e:c5:cd:61:1d:11:2c:
73:bb:93:5b:07:c6:be:80:39:47:6f:9f:5b:f2:4f:
c8:30:14:25:56:03:62:9e:d4:a3:29:fd:84:a6:e0:
72:a3:d9:de:77:69:fa:22:b3:a4:ef:21:85:93:b7:
93:eb:c5:76:87:64:c9:93:b1:cc:bf:00:85:c1:b4:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:C2:A8:49:7B:19:FB:7E:9F:E4:DC:49:A6:63:A4:8C:11:34:47
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:05:21:1d:48:ef:0e:f3:52:68:a1:43:93:75:d0:5d:1f:3b:
70:cb:8a:b9:68:f9:9b:d5:4d:56:90:50:26:dd:c7:19:cd:93:
13:ee:42:82:35:95:63:db:8b:67:0f:61:90:3e:65:90:8e:8b:
ae:1d:ca:14:2d:c5:a3:fa:d3:0e:83:da:2d:77:0e:08:11:20:
e4:4e:b9:a6:cd:6d:0b:59:b4:7c:95:d1:2b:13:29:a6:33:f1:
04:db:4a:b0:e9:a0:3b:38:c4:eb:ad:2b:b2:6c:0e:26:c9:32:
47:ac:b9:ea:d9:3f:7d:de:b3:2d:d3:1e:71:fa:5b:04:f1:2d:
28:53:12:d3:a6:be:6e:40:28:f0:2d:2f:d5:b3:e4:bf:89:82:
6f:83:a3:eb:62:90:37:32:c3:80:56:90:77:fc:f9:03:1e:9d:
12:9d:14:41:36:21:7b:ec:5b:ee:c4:56:14:7b:41:07:cb:f6:
74:6d:b3:9e:6b:e1:79:6f:15:27:24:f4:2b:2e:c3:d7:ab:21:
8d:03:13:15:9d:28:2d:a5:1b:b9:48:f1:65:7b:c1:bf:71:c4:
e6:bd:20:0c:40:9b:43:e3:5a:f4:91:6e:d9:22:1c:34:1e:e1:
a3:ee:2a:7f:7d:6d:f1:cc:22:a9:ca:46:27:c1:20:f1:c6:c9:
6f:49:86:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:18 2026 by rpki-client