Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: j8s+BsUS7XptqWJ3Yvp0sWtgbR+avqYn5HMw50da5kU=
Subject key identifier: 3A:AC:70:C9:A3:98:AD:EF:C3:BC:29:3E:A1:FC:4E:E9:96:17:8F:2B
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 019E20922CC8EA9464DBD97515BD302D6D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 1715
Signing time: Wed 13 May 2026 09:01:51 +0000
Manifest this update: Wed 13 May 2026 09:01:51 +0000
Manifest next update: Thu 14 May 2026 09:01:51 +0000
Files and hashes: 1: PYuODH0zBuvAiK-JKuXaExSuhvY.roa (hash: j4fDEw0K8kYxrAUmB58fcgklFQjA7X3SeZOjGCv6B9g=)
2: r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa (hash: q8BWxYBDwimUfBX5rZs0mS3SnxWzlL9k3GvkEkEzIbs=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: 1eIt2ulhE+CqnxXX4HB+oCldBqjgKW+X1/TXWj3n2oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2c:c8:ea:94:64:db:d9:75:15:bd:30:2d:6d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: May 13 09:01:51 2026 GMT
Not After : May 14 09:01:51 2026 GMT
Subject: CN=3aac70c9a398adefc3bc293ea1fc4ee996178f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:2f:7b:6c:7a:4c:e2:90:c3:53:2a:05:70:
a9:ec:fa:a6:bd:3d:f8:4a:69:67:6a:0b:11:27:12:
cd:39:b5:05:dc:27:a7:20:32:0f:5f:5a:2b:8e:56:
4b:ac:37:81:58:f8:36:43:09:c6:02:00:86:56:0a:
3a:db:8f:46:9e:ce:bf:88:39:81:cd:87:4a:f4:cb:
78:54:be:eb:9a:37:91:62:35:9e:b6:66:27:98:2a:
a2:89:ff:88:a1:d3:44:ff:c3:45:4d:8c:12:9c:1e:
00:b7:72:fe:f4:e3:40:f3:9f:ff:a1:55:99:6e:bd:
9b:66:5a:69:79:0e:49:cd:44:d0:77:04:4a:39:09:
08:cd:91:1d:00:67:5d:3a:f3:99:76:b9:af:e7:1a:
49:47:db:b0:8d:12:8f:d0:0a:93:9e:c7:50:56:83:
47:88:8e:fc:6e:48:e3:cb:95:f3:13:21:93:18:69:
75:fd:25:2a:8d:c8:93:44:bd:55:6e:c6:83:35:dd:
b9:00:37:01:b4:4b:98:ef:fb:8a:ba:f9:d3:a6:c7:
64:8d:1f:e3:12:5d:83:ee:3e:90:0b:ab:5f:69:4e:
e3:d1:1c:91:4c:26:ca:ab:f7:a7:40:36:50:c9:56:
a5:46:64:ee:d2:2b:23:17:70:80:b6:a1:d9:94:32:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AC:70:C9:A3:98:AD:EF:C3:BC:29:3E:A1:FC:4E:E9:96:17:8F:2B
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1f:ff:96:11:db:46:04:a0:d3:e0:a6:a9:28:f1:93:76:70:
d8:f8:47:9d:48:f1:c7:ea:55:8d:6e:52:7d:27:b8:99:8f:f7:
c8:02:94:39:4f:b3:b2:a9:3e:82:90:de:3a:eb:5c:73:7d:c3:
29:84:f5:3c:82:a7:8a:75:01:32:72:9b:35:05:02:63:a7:7f:
ce:66:b4:59:dd:01:44:23:53:8f:88:93:c0:6b:e4:29:5d:f8:
f2:1d:b6:6c:b1:7f:72:e2:3c:12:f0:bc:e4:d3:b5:14:57:6b:
13:9a:7d:93:84:ab:27:b6:4b:88:41:1a:90:7c:9a:d4:3d:39:
8a:49:43:0b:f7:2c:2c:68:37:0c:ce:39:86:58:b0:bb:15:57:
52:4c:e9:6f:17:90:9a:f8:f1:81:04:31:f0:cf:34:fd:9e:24:
e8:b0:38:1d:fd:c8:ec:95:d7:32:f7:3a:68:3b:fc:2f:20:a3:
8f:9d:6b:6f:d5:34:38:92:02:35:5f:99:2f:c4:b6:b1:8a:4a:
5a:9c:e5:9d:ec:95:0b:e1:2a:2d:10:42:c8:81:8a:3f:91:f0:
10:3c:bb:7c:a6:cc:f3:08:40:85:47:2e:f5:8d:18:0f:ca:e6:
bc:b8:d4:d4:2b:50:d8:5c:55:29:66:ac:82:77:32:62:8e:1c:
5f:e9:32:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkizI6pRk29l1Fb0wLW0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzM2NGJjMzhmNzViMThkNmY2ZWVmMjAzMjA5ZjcxYzI3
NjhkODUwHhcNMjYwNTEzMDkwMTUxWhcNMjYwNTE0MDkwMTUxWjAzMTEwLwYDVQQD
EygzYWFjNzBjOWEzOThhZGVmYzNiYzI5M2VhMWZjNGVlOTk2MTc4ZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykgve2x6TOKQw1MqBXCp7PqmvT34
SmlnagsRJxLNObUF3CenIDIPX1orjlZLrDeBWPg2QwnGAgCGVgo6249Gns6/iDmB
zYdK9Mt4VL7rmjeRYjWetmYnmCqiif+IodNE/8NFTYwSnB4At3L+9ONA85//oVWZ
br2bZlppeQ5JzUTQdwRKOQkIzZEdAGddOvOZdrmv5xpJR9uwjRKP0AqTnsdQVoNH
iI78bkjjy5XzEyGTGGl1/SUqjciTRL1VbsaDNd25ADcBtEuY7/uKuvnTpsdkjR/j
El2D7j6QC6tfaU7j0RyRTCbKq/enQDZQyValRmTu0isjF3CAtqHZlDIWVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqscMmjmK3vw7wpPqH8TumWF48rMB8GA1UdIwQY
MBaAFL4zZLw491sY1vbu8gMgn3HCdo2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTct
MWE2YWM5OGFjNmY5LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTctMWE2YWM5OGFjNmY5
LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB//lhHb
RgSg0+CmqSjxk3Zw2PhHnUjxx+pVjW5SfSe4mY/3yAKUOU+zsqk+gpDeOutcc33D
KYT1PIKninUBMnKbNQUCY6d/zma0Wd0BRCNTj4iTwGvkKV348h22bLF/cuI8EvC8
5NO1FFdrE5p9k4SrJ7ZLiEEakHya1D05iklDC/csLGg3DM45hliwuxVXUkzpbxeQ
mvjxgQQx8M80/Z4k6LA4Hf3I7JXXMvc6aDv8LyCjj51rb9U0OJICNV+ZL8S2sYpK
WpzlneyVC+EqLRBCyIGKP5HwEDy7fKbM8whAhUcu9Y0YD8rmvLjU1CtQ2FxVKWas
gncyYo4cX+kyyw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:48 2026 by rpki-client