Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
File: vVXPhK_d4xgniNwAdjqCMINM7FI.mft (raw, json)
Hash identifier: UGpPThoQWpvx9nZgYwI630VxfdyOot2cKPOq8FnhztQ=
Subject key identifier: 0E:1D:08:F3:42:AB:92:97:40:3D:2C:1E:36:B8:44:37:5A:4D:CF:5F
Authority key identifier: BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
Certificate issuer: /CN=bd55cf84afdde3182788dc00763a8230834cec52
Certificate serial: 019E1D905140176D9F0004038EF9AEA9B681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
Manifest number: A9
Signing time: Tue 12 May 2026 19:00:57 +0000
Manifest this update: Tue 12 May 2026 19:00:57 +0000
Manifest next update: Wed 13 May 2026 19:00:57 +0000
Files and hashes: 1: m2i02yDWoa9OicV27GMj8Y2x37c.roa (hash: PcpljpVFgub8o7xEhsLEYIzvRxfNpdllqdeZVEQzjwg=)
2: vVXPhK_d4xgniNwAdjqCMINM7FI.crl (hash: YtJnxzKdgW6KVURhT08uVzpRHR8Qwbf2IphXiWTvJSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:51:40:17:6d:9f:00:04:03:8e:f9:ae:a9:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd55cf84afdde3182788dc00763a8230834cec52
Validity
Not Before: May 12 19:00:57 2026 GMT
Not After : May 13 19:00:57 2026 GMT
Subject: CN=0e1d08f342ab9297403d2c1e36b844375a4dcf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:05:c3:61:39:e9:97:52:da:10:f3:37:43:
0e:04:7f:f1:60:2a:b5:b2:99:26:06:d2:a1:bc:64:
8d:95:1c:91:d0:96:9b:57:b9:6f:a0:28:19:b5:4a:
b7:9a:f3:b4:a3:c4:e1:f1:86:f0:e9:3f:b7:3c:29:
15:ac:2f:3e:4d:23:2f:36:29:da:22:21:a3:c4:74:
d1:06:38:ad:7a:4f:01:24:d5:6b:d7:98:ac:7f:da:
a1:06:2d:80:31:45:d4:28:06:cd:8b:d6:64:80:ad:
3a:c4:e9:31:12:84:a7:6e:7d:fc:30:65:4f:2d:68:
b8:d1:9d:12:4c:b6:69:0a:de:e4:6e:ad:d9:58:f6:
06:e8:88:08:c3:95:f1:c1:92:71:af:fe:be:50:66:
d0:cb:9d:1f:d0:c4:73:f9:ac:da:6a:d4:3c:48:a2:
79:91:2a:6d:61:0c:e9:08:e0:ce:22:5b:85:86:f4:
f2:78:d2:f4:11:f2:14:64:0d:b7:83:5c:ef:1f:d7:
4a:5a:94:aa:9c:f4:4b:36:47:a3:96:af:6d:bf:90:
50:b4:0f:b2:cd:2f:14:2d:99:57:f0:ff:cc:18:90:
6e:a6:ff:67:01:cd:d0:80:01:d1:37:5f:43:cf:16:
dc:5e:4d:9d:7c:4d:11:4b:bd:90:19:04:e3:e6:81:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1D:08:F3:42:AB:92:97:40:3D:2C:1E:36:B8:44:37:5A:4D:CF:5F
X509v3 Authority Key Identifier:
keyid:BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f5:6d:35:78:98:80:35:92:e6:0b:a4:4e:5b:0f:e5:c9:e9:
52:14:4d:ce:60:12:23:4f:a7:72:bf:c9:61:7d:7e:82:73:83:
40:7a:2c:36:e7:5b:50:a6:ba:cc:3e:1b:15:0c:8b:68:04:5e:
c0:c6:ab:a2:20:19:31:14:6f:e3:24:47:31:32:a4:68:c1:cb:
4e:e1:9d:aa:b2:1a:2e:8d:d1:2e:00:e7:2e:48:fd:b9:c0:4f:
6f:1a:3b:87:3f:64:0b:e9:89:4d:c1:8e:bb:94:ef:74:d8:ef:
95:72:53:46:f6:ab:6f:b4:54:69:b3:01:ba:30:a7:86:9c:1b:
93:fc:d2:12:05:23:75:b5:bb:45:ff:fd:a7:d2:72:4a:6f:ff:
ca:7b:e5:35:02:4d:f3:06:75:38:6e:b3:9f:c7:2a:4b:98:2e:
7e:e9:99:7b:66:54:10:ca:e7:29:2d:4e:18:ed:6c:a2:bc:04:
ad:ae:f7:71:15:28:9c:fe:49:1a:b5:ed:9a:a8:26:d6:9b:8f:
f6:81:e8:c0:e3:df:a9:5d:9a:64:f6:46:6b:b4:8d:fc:7c:d3:
5f:91:fc:52:c9:4a:4f:c5:2b:24:b8:70:d1:be:f9:da:cb:56:
f5:7c:03:09:c5:a4:63:ab:05:71:2d:50:20:59:e8:c2:58:37:
dc:1b:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:19 2026 by rpki-client