Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier: lpcO+30Mi0990ubvWuHjGbUrlSOf83pB4PugmF5SXwY=
Subject key identifier: 3F:E1:75:54:F7:5A:A7:AC:D1:4E:D5:EF:84:10:29:2F:DD:3A:16:0B
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 019E1EA2C229F243B9AAFF98948BE12245D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number: 0674
Signing time: Wed 13 May 2026 00:00:43 +0000
Manifest this update: Wed 13 May 2026 00:00:43 +0000
Manifest next update: Thu 14 May 2026 00:00:43 +0000
Files and hashes: 1: DP6W5mZd2SOB-Uj8tbt4V4TsScc.roa (hash: 525uqcMQrlLx8hMHVZRXLc6TEI5O4/DeN/yL3pcseB8=)
2: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: Q0WJrMFbVH9ads6ir11U5UsWvCBusgICID7zY5PiMDY=)
3: vQqnvARNn1FXtEGfZ3CHw5z70o0.roa (hash: +SKN+m/Zy5SnpDyhDQfSEvZM8oK3F3dFeyWqxYSrWok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c2:29:f2:43:b9:aa:ff:98:94:8b:e1:22:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: May 13 00:00:43 2026 GMT
Not After : May 14 00:00:43 2026 GMT
Subject: CN=3fe17554f75aa7acd14ed5ef8410292fdd3a160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:01:ad:46:c0:07:2e:ce:eb:88:80:01:e2:
ff:72:d1:2c:92:55:61:bd:da:51:df:cc:46:72:69:
83:1c:20:e7:5e:f6:00:fb:fe:50:fd:54:1d:5a:21:
b5:4a:e1:0e:c3:75:fb:5e:49:0a:10:58:f2:8d:f4:
d1:c1:ef:a0:bc:f8:15:07:17:b7:80:30:6b:fb:a5:
7b:c3:57:c4:8b:a2:6b:14:65:22:68:c2:f9:82:9e:
02:1a:6a:30:20:99:1c:61:1b:5f:bf:84:98:dc:ba:
4f:6a:3c:3b:51:6e:4b:0e:dc:ab:ee:9c:1c:a7:bc:
d4:06:8c:95:9d:04:b9:89:05:56:21:51:67:95:19:
16:34:d8:a5:31:7b:83:42:2e:e5:bc:d0:a2:d5:0a:
bd:3e:89:54:57:fd:a1:07:f7:d5:54:f8:95:b3:ef:
fe:c4:46:f3:c8:ab:f5:03:f3:b8:ec:15:92:e1:f4:
58:23:b8:76:d3:36:0d:18:03:ad:23:a4:43:05:e5:
3e:50:96:42:9a:b2:25:2c:ad:cc:30:9a:c6:6b:fe:
a5:f6:5d:8f:4e:da:f4:24:76:cb:f6:ec:c5:83:00:
25:5b:18:57:3d:ea:bb:12:f1:6c:0b:af:fd:69:39:
0a:0e:9c:d0:a6:54:40:1e:ea:33:a1:19:92:10:01:
80:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E1:75:54:F7:5A:A7:AC:D1:4E:D5:EF:84:10:29:2F:DD:3A:16:0B
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7a:39:d9:a6:49:e8:3d:3d:1a:ef:23:bf:37:e1:2f:7c:92:
fc:d7:b8:18:d4:c6:15:b7:e9:13:7e:24:bc:46:05:59:b2:7a:
c4:48:53:8e:53:78:35:e5:ff:cd:47:9f:65:49:8b:f6:a0:c3:
58:d0:3a:e1:87:b3:3c:83:08:88:a4:28:d4:2a:46:f3:15:60:
24:e3:4e:6b:4f:9b:92:aa:1f:eb:77:bd:f6:82:28:e1:d8:e0:
f1:41:f8:03:75:f5:64:90:80:3c:a9:cc:4f:6d:f7:8d:2a:b8:
82:05:42:c4:f8:ec:cf:a6:2f:54:83:c0:dd:63:ca:8a:51:02:
86:ad:a9:97:69:ea:1a:e7:62:ac:bd:44:35:25:de:98:0d:a7:
91:f8:44:bc:77:43:e1:d8:fb:00:0a:19:09:af:bb:a8:75:6f:
ca:21:19:4b:87:4a:b8:2b:85:ea:24:e3:a2:17:6f:6e:61:75:
86:87:c5:06:6c:f4:bd:65:32:9e:1b:e5:f5:6b:d2:51:4c:29:
5b:f7:6a:be:53:0c:21:73:dc:e8:32:66:02:3c:47:07:1b:0c:
66:d0:f1:9a:e8:71:e2:7e:d6:71:39:4e:eb:5a:ec:7d:d1:9a:
70:77:1c:9d:f2:74:1a:f4:77:a1:a8:68:3c:19:0f:6d:83:49:
72:a4:a0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eosIp8kO5qv+YlIvhIkXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1
MTc4ZmIwHhcNMjYwNTEzMDAwMDQzWhcNMjYwNTE0MDAwMDQzWjAzMTEwLwYDVQQD
EygzZmUxNzU1NGY3NWFhN2FjZDE0ZWQ1ZWY4NDEwMjkyZmRkM2ExNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDABrUbABy7O64iAAeL/ctEsklVh
vdpR38xGcmmDHCDnXvYA+/5Q/VQdWiG1SuEOw3X7XkkKEFjyjfTRwe+gvPgVBxe3
gDBr+6V7w1fEi6JrFGUiaML5gp4CGmowIJkcYRtfv4SY3LpPajw7UW5LDtyr7pwc
p7zUBoyVnQS5iQVWIVFnlRkWNNilMXuDQi7lvNCi1Qq9PolUV/2hB/fVVPiVs+/+
xEbzyKv1A/O47BWS4fRYI7h20zYNGAOtI6RDBeU+UJZCmrIlLK3MMJrGa/6l9l2P
Ttr0JHbL9uzFgwAlWxhXPeq7EvFsC6/9aTkKDpzQplRAHuozoRmSEAGAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/hdVT3Wqes0U7V74QQKS/dOhYLMB8GA1UdIwQY
MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct
NTBkNmJhNmFhY2I4LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4
LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXo52aZJ
6D09Gu8jvzfhL3yS/Ne4GNTGFbfpE34kvEYFWbJ6xEhTjlN4NeX/zUefZUmL9qDD
WNA64YezPIMIiKQo1CpG8xVgJONOa0+bkqof63e99oIo4djg8UH4A3X1ZJCAPKnM
T233jSq4ggVCxPjsz6YvVIPA3WPKilEChq2pl2nqGudirL1ENSXemA2nkfhEvHdD
4dj7AAoZCa+7qHVvyiEZS4dKuCuF6iTjohdvbmF1hofFBmz0vWUynhvl9WvSUUwp
W/dqvlMMIXPc6DJmAjxHBxsMZtDxmuhx4n7WcTlO61rsfdGacHccnfJ0GvR3oaho
PBkPbYNJcqSgIQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:40:13 2026 by rpki-client