Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: VweBFKHeNnbTAEPFPywFbnPquCOLvGlMtuOOQJgySn8=
Subject key identifier: 69:4A:71:97:1F:C4:36:3E:1F:73:DD:5C:32:7E:36:F0:03:F0:EA:45
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 019E1D22C52EFBD05842A2D67E20A77E148F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 17:01:18 +0000
Manifest this update: Tue 12 May 2026 17:01:18 +0000
Manifest next update: Wed 13 May 2026 17:01:18 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: Bv3J5plKrxueZ2yqf72JvcGAplcvv1mcwDqkTrP5MjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:c5:2e:fb:d0:58:42:a2:d6:7e:20:a7:7e:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: May 12 17:01:18 2026 GMT
Not After : May 13 17:01:18 2026 GMT
Subject: CN=694a71971fc4363e1f73dd5c327e36f003f0ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:01:74:19:be:22:45:12:ba:74:1a:ac:2f:
ef:20:84:25:4c:1e:7b:b3:6b:43:87:4a:0a:a6:f6:
d3:57:64:07:4a:e1:85:52:df:06:c2:be:3a:53:c2:
03:37:0a:25:cd:bc:5a:44:05:69:c8:07:79:5c:dc:
7a:10:5d:7e:e1:9d:22:6a:36:65:2b:e1:d0:47:f0:
c9:1f:02:1d:6d:f5:8c:21:6b:e1:36:1f:db:03:31:
d7:e4:eb:c6:e2:ce:62:2c:0d:f3:e8:0b:59:52:73:
58:62:f9:58:be:ac:a2:1b:98:a0:ac:af:73:bb:48:
da:9e:c0:5f:0b:0f:f1:11:bb:81:88:9f:f2:a1:30:
fe:3e:27:50:4b:e6:1d:de:9e:33:a5:22:85:8d:7f:
fd:8e:86:09:8e:e4:b2:e5:8b:80:94:01:ba:bc:86:
f1:f6:18:5f:fb:1f:15:00:c3:89:8d:f8:2d:91:a4:
1a:36:e1:99:8e:9d:f6:3d:03:51:d7:7d:9b:94:3d:
70:bd:30:c1:83:44:91:b1:06:1e:b1:95:22:10:dd:
b5:c9:45:6e:c1:28:2c:08:35:ab:ab:7e:44:c8:d8:
8b:ba:c7:84:9a:91:00:e9:8f:2c:95:fc:41:c1:88:
ff:da:66:56:48:6e:17:b9:cd:ef:1d:91:6b:90:f7:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4A:71:97:1F:C4:36:3E:1F:73:DD:5C:32:7E:36:F0:03:F0:EA:45
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2e:8a:3e:1e:26:12:39:11:db:3e:23:59:eb:6d:f9:e3:24:
5b:16:5c:01:1d:9e:68:cf:b5:bb:5b:c9:f3:42:0d:06:c2:33:
b1:06:1d:bf:fe:c4:70:cd:06:1f:ef:e2:56:05:b7:d9:e7:f8:
51:a1:97:66:13:9c:f3:e2:3e:3e:80:f5:47:51:e2:66:25:2d:
ef:bd:75:c3:35:c1:c8:bd:fa:47:2a:0c:c8:76:1b:28:2d:c2:
59:1b:7c:96:e8:aa:e3:ee:5e:85:1e:ff:17:41:eb:e7:05:c3:
59:29:d5:de:1d:9f:2b:7e:bd:01:8d:fe:62:47:37:5b:4c:fd:
48:e6:1c:f7:f5:57:32:88:ea:87:93:d2:71:13:b2:e5:ad:a1:
20:20:46:00:57:87:30:02:4c:41:f9:9e:a2:2e:d7:18:10:8b:
ce:17:c7:b1:d3:ae:7c:fc:0e:e0:79:00:7d:f0:1b:44:6c:0f:
94:71:21:4d:57:96:57:6d:d9:b8:8a:50:7e:cf:0f:a0:f7:c6:
93:aa:75:d5:9b:06:94:46:7b:4b:b3:74:03:c0:3e:22:1e:25:
0b:2b:67:16:61:c7:be:e0:b0:f1:60:a5:8e:72:ff:5d:87:13:
72:f3:a5:00:1d:5c:15:c6:33:fe:78:c9:84:8b:dc:82:74:2f:
95:1f:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:47 2026 by rpki-client