Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: SsxZkZfchZC6LE/XScPIttv7MPt7pO155ypRU5YhMgo=
Subject key identifier: 64:4E:2E:7D:F2:7E:A5:BA:73:50:19:16:7F:43:53:49:0C:21:5F:81
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019E1F7E7FA5EACFAF7D57D9A3EBC827810E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 04:00:44 +0000
Manifest this update: Wed 13 May 2026 04:00:44 +0000
Manifest next update: Thu 14 May 2026 04:00:44 +0000
Files and hashes: 1: 39SWcIru4OOLf3jMU1giDlE-804.roa (hash: VHGE9nOLuGsrrsrjhfRfN6xG0b3Ab1haHqJsSirwxJQ=)
2: q2Eizro8coJ0vQbXr19bHJH4bc0.roa (hash: tmAf20SndhrgKXo0idQ98M/X9oFaPmCTdoXsGpxVz5o=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: 4F9g1hBrQGTmbC2WnyZ4P/BfAxUe7vHx9h+u4iDh6ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:7f:a5:ea:cf:af:7d:57:d9:a3:eb:c8:27:81:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: May 13 04:00:44 2026 GMT
Not After : May 14 04:00:44 2026 GMT
Subject: CN=644e2e7df27ea5ba735019167f4353490c215f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:db:f8:fc:fb:04:f7:f0:a0:f7:56:8b:7d:85:
41:32:9e:27:77:1c:b2:87:56:5c:9d:c6:18:68:ca:
84:d5:83:0c:af:7a:d3:ce:04:86:6d:bc:f5:0b:51:
c2:92:3c:19:5e:ad:e9:a7:8e:78:2b:27:2a:d4:8f:
3f:6f:72:40:62:9e:74:0f:6b:c2:e4:67:56:a9:6f:
ec:cb:16:9a:51:25:3c:b8:c8:85:1c:f7:df:66:c1:
a2:a4:ec:23:6b:16:c7:8d:b5:c7:b7:67:3f:8c:d1:
0f:43:fd:c2:a8:b6:02:5c:3b:7f:53:d1:d3:22:a6:
c8:be:44:20:52:9f:d9:9c:4a:c3:bc:22:d4:54:70:
c1:2e:26:cc:18:72:df:41:da:81:20:52:98:bb:16:
ea:b2:9d:58:03:52:d1:0e:ff:f8:3d:75:ed:f2:c2:
e5:96:f5:60:0f:43:d1:e9:1a:09:86:24:c7:ca:aa:
13:74:52:dc:eb:57:92:a3:11:c2:72:b9:a5:33:4c:
d2:b6:e0:8d:20:70:9d:85:ea:e3:12:1e:7e:a9:8b:
16:00:1b:64:32:d6:8c:49:de:52:13:e3:23:50:a6:
8e:31:6b:d6:0e:e5:63:99:02:48:b1:1d:fe:5c:11:
76:cb:17:6d:23:c0:72:97:20:1d:b7:2b:d1:d7:95:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:2E:7D:F2:7E:A5:BA:73:50:19:16:7F:43:53:49:0C:21:5F:81
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:18:19:3c:9b:56:e9:82:1d:78:65:62:c4:98:d2:2a:72:75:
61:50:cb:20:85:fe:52:c6:7f:3d:7f:b5:c2:c8:d4:92:06:20:
a7:33:68:ff:da:2d:5c:9e:09:c7:38:e4:e1:e1:db:68:e8:02:
3d:56:a2:d3:5a:fb:a3:2e:62:16:d8:43:2f:bc:23:d6:ad:f9:
2f:2d:5a:76:46:da:7f:91:e3:8e:c1:1b:14:91:28:30:08:3e:
8a:e0:88:ae:6d:8e:99:1b:75:f4:ba:37:5a:fd:82:3b:19:df:
19:c1:a2:33:6a:c9:fb:bc:25:b4:33:fc:74:c3:7b:50:89:39:
3c:3d:2a:02:49:c0:29:3e:ad:00:a6:93:9c:4d:9a:58:2d:c8:
1b:45:d2:17:9e:6b:f7:d7:cb:07:ca:46:51:5c:5f:67:3c:2e:
00:8c:58:58:9e:40:d8:0d:6f:29:00:03:9e:44:38:69:f2:3c:
75:a2:f4:a4:39:77:61:6e:07:de:90:61:f4:79:21:73:4d:b5:
97:00:9e:ba:9e:ef:38:03:f9:95:75:03:3b:c8:5c:bb:9c:4e:
04:a6:8e:ef:34:b2:00:95:3f:7b:be:95:9f:1e:5f:b3:e5:74:
b4:6b:d3:0a:c5:4e:34:c7:39:af:3c:05:12:27:8a:72:ad:0f:
c7:61:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:13 2026 by rpki-client