Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: d8Dzs1OmMZFOO6iTDdbP2sb7CVZJiFvP1ZM/98RBcaI=
Subject key identifier: 12:E3:8C:28:42:8A:7F:93:B9:6C:9B:35:04:64:B8:24:96:08:0F:EA
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019E1D90DBA11A4B37E5FFC947A74F1EDE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 19:01:33 +0000
Manifest this update: Tue 12 May 2026 19:01:33 +0000
Manifest next update: Wed 13 May 2026 19:01:33 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: kRt/wJWRMX4wJF2U77TVzeNxDgPXCzYBD14EzN7tvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:db:a1:1a:4b:37:e5:ff:c9:47:a7:4f:1e:de:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: May 12 19:01:33 2026 GMT
Not After : May 13 19:01:33 2026 GMT
Subject: CN=12e38c28428a7f93b96c9b350464b82496080fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:e1:ae:49:54:7d:91:31:e2:3d:96:49:82:
82:09:16:1b:a5:c7:69:3a:01:3b:dd:ef:4d:b3:bc:
31:e5:38:9d:d3:2c:ad:4f:61:9e:28:55:ca:63:2a:
cd:91:97:8f:23:27:c2:a8:f3:25:e9:88:13:0a:5f:
e9:61:6a:fe:7b:1e:d4:7c:9a:b9:3d:c1:3d:44:91:
ad:9d:5f:78:45:19:5f:fe:9d:3f:fd:fa:a7:38:f8:
bb:26:d0:dd:c2:70:e4:ff:13:21:2a:41:92:85:ae:
ca:50:26:3a:bb:9f:4f:29:5a:9e:ac:93:ad:5e:00:
a6:23:16:99:94:0a:27:d0:e6:5d:81:ba:02:4a:15:
dd:65:59:cf:75:d2:65:b8:86:21:21:fc:f0:9e:f7:
d3:ab:84:7e:fa:5b:cc:58:f9:d9:4b:7a:74:a8:d9:
66:e5:52:b5:f5:e4:0b:fe:19:da:ab:81:48:fa:f7:
78:59:b8:a9:98:d3:cd:41:f3:d4:34:8a:d1:4e:fc:
5c:ab:e7:d6:0d:65:1b:2f:a8:35:1d:e0:76:bd:d6:
b6:95:00:48:63:ff:9b:9e:ff:69:ee:b4:64:aa:78:
4a:22:b2:5c:01:24:f0:1c:dd:86:e1:ea:8a:bd:21:
9e:ce:e6:3e:4f:35:2b:51:f8:26:44:3e:d1:c8:b9:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:8C:28:42:8A:7F:93:B9:6C:9B:35:04:64:B8:24:96:08:0F:EA
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:73:96:50:de:30:d2:c6:28:ec:d6:09:27:e4:e8:19:92:
2b:93:03:4e:82:76:b3:4d:f8:c4:40:42:18:96:73:72:a4:f4:
17:5b:31:f9:33:6f:85:68:f9:b4:4f:77:ad:f2:86:82:78:57:
4f:46:de:c8:86:6f:81:42:99:21:4f:19:c5:4c:e9:b8:b2:de:
80:fd:02:47:36:e7:7a:ce:76:08:0b:65:f7:7c:9b:eb:1d:d4:
bf:1c:bc:5a:45:56:6b:a5:51:37:d2:f9:54:9c:8f:0e:66:0e:
38:cf:ef:08:a8:04:79:b4:93:d4:91:0f:46:32:7c:f6:9a:78:
86:7f:c5:c3:a2:03:5c:33:d2:86:43:48:e2:35:78:11:ee:d8:
32:83:b1:c4:2e:29:c6:e5:79:c0:85:ac:17:c4:d5:c4:eb:72:
09:ae:fc:4e:a3:de:fe:a7:7f:3e:f8:a1:f5:d5:57:7d:6d:40:
c5:d2:04:3d:61:72:f5:c1:2d:a4:d7:0c:18:22:51:04:96:1a:
c6:13:2c:6a:a2:1e:54:0a:1a:5d:5e:66:30:1d:81:db:b5:ca:
ee:95:6c:77:97:d6:65:a1:5b:00:60:62:84:9f:1c:a1:ce:e7:
a5:5e:20:71:35:cb:9a:8c:90:37:95:07:19:dd:a1:4c:21:59:
91:a6:3a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkNuhGks35f/JR6dPHt5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDZhZjgwNGVmNWE2MzZmNDY0ZTcxYThkNDFlOGQ0MDFh
N2Y2OTcwHhcNMjYwNTEyMTkwMTMzWhcNMjYwNTEzMTkwMTMzWjAzMTEwLwYDVQQD
EygxMmUzOGMyODQyOGE3ZjkzYjk2YzliMzUwNDY0YjgyNDk2MDgwZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vThrklUfZEx4j2WSYKCCRYbpcdp
OgE73e9Ns7wx5Tid0yytT2GeKFXKYyrNkZePIyfCqPMl6YgTCl/pYWr+ex7UfJq5
PcE9RJGtnV94RRlf/p0//fqnOPi7JtDdwnDk/xMhKkGSha7KUCY6u59PKVqerJOt
XgCmIxaZlAon0OZdgboCShXdZVnPddJluIYhIfzwnvfTq4R++lvMWPnZS3p0qNlm
5VK19eQL/hnaq4FI+vd4WbipmNPNQfPUNIrRTvxcq+fWDWUbL6g1HeB2vda2lQBI
Y/+bnv9p7rRkqnhKIrJcASTwHN2G4eqKvSGezuY+TzUrUfgmRD7RyLk+bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLjjChCin+TuWybNQRkuCSWCA/qMB8GA1UdIwQY
MBaAFFQGr4BO9aY29GTnGo1B6NQBp/aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQt
MWNhOWQyNTllMmFkLzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQtMWNhOWQyNTllMmFk
LzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgr1zllDe
MNLGKOzWCSfk6BmSK5MDToJ2s034xEBCGJZzcqT0F1sx+TNvhWj5tE93rfKGgnhX
T0beyIZvgUKZIU8ZxUzpuLLegP0CRzbnes52CAtl93yb6x3Uvxy8WkVWa6VRN9L5
VJyPDmYOOM/vCKgEebST1JEPRjJ89pp4hn/Fw6IDXDPShkNI4jV4Ee7YMoOxxC4p
xuV5wIWsF8TVxOtyCa78TqPe/qd/Pvih9dVXfW1AxdIEPWFy9cEtpNcMGCJRBJYa
xhMsaqIeVAoaXV5mMB2B27XK7pVsd5fWZaFbAGBihJ8coc7npV4gcTXLmoyQN5UH
Gd2hTCFZkaY69w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:26 2026 by rpki-client