
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: qa1SkbSXedV1fp4E/EV8fzGoSNabrEIqE1EQrvCJg7o=
Subject key identifier: 8E:E4:89:9B:09:55:1E:D9:88:DF:93:96:FF:D2:80:1E:29:9C:62:E6
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019E1CEB7B0E93B03F9E683E518717A12B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 132A
Signing time: Tue 12 May 2026 16:00:54 +0000
Manifest this update: Tue 12 May 2026 16:00:54 +0000
Manifest next update: Wed 13 May 2026 16:00:54 +0000
Files and hashes: 1: 3MMMGshhscEgulI14fb6J99Eo_s.roa (hash: G/JjT7AwdgSVF27o9D8WRmeWK0qxg60WOrdOIzV2kzw=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: v4rATANBsicf5mjg6QSM+saMqCSLEcNSxL09I+rkNjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:7b:0e:93:b0:3f:9e:68:3e:51:87:17:a1:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: May 12 16:00:54 2026 GMT
Not After : May 13 16:00:54 2026 GMT
Subject: CN=8ee4899b09551ed988df9396ffd2801e299c62e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:ae:ee:42:68:d4:5a:db:68:9d:57:03:9e:
67:4f:91:7c:22:d2:d4:83:08:af:14:8f:fc:33:ca:
60:19:1b:a2:b4:4e:d5:3e:b7:fe:d1:51:78:48:ed:
8b:a4:c8:36:75:b2:0f:c1:e0:10:01:0d:f0:46:62:
60:dc:9d:45:27:fb:0d:ba:2f:f0:b5:20:18:02:e1:
23:c0:a6:c5:82:bf:59:16:bd:14:d6:69:fd:23:b1:
1e:af:69:6f:bc:64:32:ae:2a:ec:47:cc:66:3a:f2:
b4:c7:c8:9b:05:f0:83:bb:a0:3a:91:10:63:14:88:
ea:74:88:9b:69:65:d5:d5:46:03:0b:ad:bf:f9:f8:
37:bb:ee:f2:d4:73:6e:76:e8:ef:fb:97:67:82:f7:
f5:2c:fb:ed:e5:5a:d1:ca:48:15:73:54:fd:cc:e9:
42:ea:60:fc:df:27:b8:e6:fc:0d:0e:e6:e5:46:ec:
62:6f:29:fe:f1:02:95:98:d5:f2:ff:7e:2a:dd:9a:
6b:9f:ea:8e:20:9c:03:c3:b9:66:fd:f9:e2:0c:d2:
eb:55:6d:ff:8a:98:e4:df:54:96:f4:06:ac:8e:7a:
20:5e:6a:50:90:e2:b9:1b:d8:99:7c:a6:89:03:8c:
91:b7:72:e7:82:96:b6:6e:90:a7:b0:7a:88:69:fb:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:89:9B:09:55:1E:D9:88:DF:93:96:FF:D2:80:1E:29:9C:62:E6
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f0:e5:a6:ef:87:52:25:44:74:60:42:df:89:e0:8b:63:bb:
e6:ea:3f:22:ff:17:32:7c:e1:52:ad:27:57:5f:78:35:87:1e:
72:d8:ac:26:7d:c9:c1:08:76:78:99:f2:5a:3a:36:63:57:e1:
e9:11:bb:ed:01:af:de:ed:5d:1f:9c:dd:5a:5b:ed:ac:41:ad:
e3:57:4e:3c:f8:14:28:0d:1c:9c:06:ce:0c:cb:06:d3:d6:d0:
e8:ef:40:1e:b3:3f:35:77:f5:62:88:fe:8a:ef:2b:dc:c9:74:
57:08:b0:cf:f3:fb:b7:0a:19:75:3f:ce:38:e7:18:de:95:29:
17:ce:c3:ed:0b:80:ab:53:ba:78:e1:59:52:0c:cd:76:04:66:
42:69:27:06:e8:cd:d4:53:d9:01:48:61:63:09:95:64:90:bf:
0d:87:28:e3:f4:0f:4c:47:b2:a6:14:53:cb:55:94:8a:fe:92:
b3:92:65:30:96:dc:fb:9b:33:09:c7:7d:d0:75:54:db:57:2f:
33:22:4f:73:3d:bc:a1:ba:03:3f:fc:51:5f:f2:32:d3:52:13:
92:2a:a2:8f:92:b6:74:f5:c2:9e:92:d6:9b:63:2a:e6:c4:a1:
f0:55:7c:5f:e1:52:10:6f:91:39:7b:ca:17:68:c6:d1:a2:60:
c9:d6:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:59 2026 by rpki-client