Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: YTzwKnJHALprEugOG+Y01AdzHpDKYo0NwlgFu6Sdbu8=
Subject key identifier: 7C:FB:3E:9F:0E:D5:A4:3F:CB:D6:8B:3B:51:68:25:07:79:AC:0B:33
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 019E1D59C933FAF33F047ACFC50C21383CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 06A5
Signing time: Tue 12 May 2026 18:01:23 +0000
Manifest this update: Tue 12 May 2026 18:01:23 +0000
Manifest next update: Wed 13 May 2026 18:01:23 +0000
Files and hashes: 1: EJFSOtkmc_lWhhNXUUs4nruRB1Y.roa (hash: mFAyY+U8ccrimuAI66qBOmKYa7OrPg3wRggOsTclU6Q=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: dzgpRM45DvKSFLbG6tHhBNB/ijEmR1d5RakcDvPxM/Q=)
3: zafpGp_sXGMh4yV6m5qLy7sLUpc.roa (hash: 2igpnziXWmq3SSWSag4FaHfVQQZsNnQ4/MO8icdVPHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c9:33:fa:f3:3f:04:7a:cf:c5:0c:21:38:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: May 12 18:01:23 2026 GMT
Not After : May 13 18:01:23 2026 GMT
Subject: CN=7cfb3e9f0ed5a43fcbd68b3b5168250779ac0b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:15:6c:d7:0d:09:df:22:74:30:87:63:61:
64:61:46:82:4b:61:8c:4e:9a:98:5f:6e:b8:95:39:
a1:d5:6b:f9:47:ad:68:8f:c7:6e:77:73:54:12:c1:
9a:86:9a:3d:10:58:65:f7:f7:65:c4:15:a9:71:9e:
a3:7b:e1:34:13:f1:f0:31:30:a4:a6:7e:e1:bd:73:
05:ac:1e:0c:38:80:e0:39:25:6e:0c:c1:46:84:41:
58:e1:36:a8:eb:41:c7:ff:20:3f:dd:b8:02:27:79:
f7:3d:5e:40:76:6f:80:fd:b1:b9:82:e7:27:06:72:
20:68:dc:db:4c:0d:cb:ba:73:f5:75:28:e5:0f:2a:
50:6b:49:e8:08:26:ac:93:8f:38:19:13:07:6b:96:
96:67:91:28:ca:25:df:cf:7f:d7:53:af:ad:d8:83:
1c:c1:55:95:00:75:fd:20:3e:ed:b4:ac:d2:4a:82:
ff:d9:cf:f3:1b:f0:df:45:a9:a5:f0:9b:dd:5e:af:
82:67:e2:90:ac:81:3b:70:f9:21:cd:d6:d8:2f:2f:
43:0b:01:e0:ba:23:7e:58:fb:e9:1b:8b:5b:72:59:
8f:5f:df:81:0d:1e:28:4e:b1:78:11:d8:14:82:1f:
d4:78:2b:59:a5:ad:f3:da:b4:0d:e1:71:01:08:7c:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:3E:9F:0E:D5:A4:3F:CB:D6:8B:3B:51:68:25:07:79:AC:0B:33
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:60:48:fc:f2:e6:0a:a1:d4:f1:f0:88:0e:5b:65:0a:14:b6:
4a:29:c2:36:4a:bd:d9:f4:ea:2d:4e:b9:f9:0b:94:c9:8c:d7:
b7:78:40:00:a2:d2:3a:8d:e0:ad:89:05:82:a5:bd:5b:d2:0a:
f5:73:ba:22:a5:bc:c5:3a:9b:7a:86:97:95:bc:04:93:4d:4e:
03:53:7b:3d:d0:57:ea:a2:3e:eb:5d:f1:07:38:fb:0e:95:97:
1a:cb:8a:c4:75:5d:de:ec:d5:0d:c4:3b:7c:90:d2:7f:da:7c:
4d:58:93:2c:23:d0:1d:d1:af:51:f2:45:9c:5b:4a:56:45:56:
40:14:1d:ae:7c:f0:55:4b:7f:76:ed:52:22:3b:8f:87:86:0c:
d9:10:06:f9:ba:74:26:cf:bd:d0:cc:f6:f3:9c:40:52:9a:f3:
4d:7f:d1:5c:b9:66:4e:c6:e6:b3:97:b9:03:7c:0c:ba:bb:e5:
85:b2:43:91:18:91:a2:8a:39:be:96:5d:e7:b8:f0:1d:e4:5c:
32:1a:01:16:b8:8f:35:e2:c0:96:f8:9f:01:a3:cb:56:1b:29:
27:27:05:7c:c5:86:dc:5f:7f:43:cb:76:a7:48:f0:33:fe:a8:
2d:b0:52:a0:79:bf:83:1d:56:07:55:17:e7:53:03:13:87:f4:
cb:bd:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:00 2026 by rpki-client