Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: +izrvSDQhKQBP54+XvYydTQ7VIHSmPAIIq56AmUrSoo=
Subject key identifier: 61:50:7B:0D:4B:48:1A:25:FF:10:92:46:5E:56:DC:D5:71:6C:BB:FD
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 019E1F111A9DAE891E8F4AC8F0E68FBFBBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0C31
Signing time: Wed 13 May 2026 02:01:14 +0000
Manifest this update: Wed 13 May 2026 02:01:14 +0000
Manifest next update: Thu 14 May 2026 02:01:14 +0000
Files and hashes: 1: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (hash: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: Q5HO+ttA5m3tICRh6LU71oJofq1fgpJDuMjXcEOo6bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:1a:9d:ae:89:1e:8f:4a:c8:f0:e6:8f:bf:bb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: May 13 02:01:14 2026 GMT
Not After : May 14 02:01:14 2026 GMT
Subject: CN=61507b0d4b481a25ff1092465e56dcd5716cbbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:7e:dd:aa:47:e9:03:88:bb:8a:9b:df:63:
00:d0:40:8e:8c:b6:5a:32:ef:7d:c7:dd:a3:5e:4a:
e3:bd:3c:8e:b1:3a:74:b1:ec:f0:a6:b8:88:0a:6c:
6e:f5:80:a7:49:fa:5a:94:91:db:74:a6:f1:53:3a:
bb:4d:2f:9c:2f:bc:17:fa:6d:aa:42:7d:5c:c4:b0:
1d:51:82:d3:ba:c9:a2:22:d1:20:05:2e:58:5f:2d:
a1:88:9a:c9:ca:33:6b:9c:cd:82:1c:74:9e:25:59:
1c:26:f2:74:c1:a9:58:f5:1e:34:a6:bc:74:1f:06:
68:a4:fe:64:f0:1a:7e:f5:c3:aa:39:a5:d1:87:ed:
7f:dc:ca:89:ee:d7:ab:c8:58:06:c1:5f:d3:ee:a5:
0a:96:42:a7:0f:87:c4:78:37:2d:d1:08:a5:9b:28:
f0:0c:b2:45:45:14:1a:89:28:2f:e6:5f:f2:ff:e3:
17:85:e1:d0:42:3d:e1:7e:51:89:2f:76:d9:27:f3:
6a:51:0f:e4:c1:fc:30:6b:39:21:66:70:7a:d5:5f:
4f:ba:f3:0b:81:d9:19:e4:b0:b2:54:fc:dc:06:a8:
f3:8c:c8:b8:69:13:56:71:90:51:a4:95:6f:b9:5d:
9a:86:60:11:b3:1a:17:11:21:4c:6e:60:7b:35:ba:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:50:7B:0D:4B:48:1A:25:FF:10:92:46:5E:56:DC:D5:71:6C:BB:FD
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d3:47:0a:ca:3b:1e:0f:67:d0:a2:88:73:a0:45:55:89:50:
e9:5f:4c:83:0b:ab:9b:e0:9a:00:69:7f:34:72:84:33:51:9a:
bb:37:83:f0:58:cd:2f:d6:14:5a:c4:bf:db:64:4e:48:51:4c:
6d:c3:f4:87:ed:6a:86:eb:8d:d7:c8:82:f2:56:9d:59:19:bd:
21:ff:05:fd:27:e8:24:e4:92:6c:1f:e6:82:67:bf:c8:c2:89:
6c:a3:c7:e7:3c:da:75:e1:c8:8f:96:69:10:43:64:aa:ff:89:
6c:fd:bc:1e:3d:8d:64:16:7a:bf:0b:66:cf:63:f4:6e:3e:0b:
1f:b0:83:a3:4a:b2:68:c7:53:ce:06:6c:ec:99:14:33:cf:d4:
96:bd:85:9b:ef:aa:83:24:c5:ea:ab:5c:27:0c:5f:dc:f6:e4:
78:a2:10:0d:5b:8d:83:64:c0:15:2d:5a:4c:17:e3:11:81:87:
5c:9b:da:15:e6:8e:6c:3b:c4:63:9c:3a:e0:6d:b3:c2:82:6c:
cb:d7:a7:5c:ad:db:89:21:c9:de:a3:b9:9d:81:be:aa:44:07:
a3:99:12:f7:bd:ee:71:94:1e:d1:cd:d0:65:55:3c:1d:54:db:
46:1b:8b:63:65:a0:fc:0b:c4:1f:34:71:57:b0:f6:f5:18:f5:
76:27:79:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fERqdrokej0rI8OaPv7viMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkODUyNzJhNDA4MDkwNGY3NWUyMzVhNDdhZjBiNDEyNjZl
MmE2MDMwHhcNMjYwNTEzMDIwMTE0WhcNMjYwNTE0MDIwMTE0WjAzMTEwLwYDVQQD
Eyg2MTUwN2IwZDRiNDgxYTI1ZmYxMDkyNDY1ZTU2ZGNkNTcxNmNiYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw9+3apH6QOIu4qb32MA0ECOjLZa
Mu99x92jXkrjvTyOsTp0sezwpriICmxu9YCnSfpalJHbdKbxUzq7TS+cL7wX+m2q
Qn1cxLAdUYLTusmiItEgBS5YXy2hiJrJyjNrnM2CHHSeJVkcJvJ0walY9R40prx0
HwZopP5k8Bp+9cOqOaXRh+1/3MqJ7teryFgGwV/T7qUKlkKnD4fEeDct0Qilmyjw
DLJFRRQaiSgv5l/y/+MXheHQQj3hflGJL3bZJ/NqUQ/kwfwwazkhZnB61V9PuvML
gdkZ5LCyVPzcBqjzjMi4aRNWcZBRpJVvuV2ahmARsxoXESFMbmB7NbqRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFQew1LSBol/xCSRl5W3NVxbLv9MB8GA1UdIwQY
MBaAFL2FJypAgJBPdeI1pHrwtBJm4qYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yODJjYjAtOTFiZS00MjJhLTk1ZDMt
MjRmMjBmOTY3NWVjLzEvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yODJjYjAtOTFiZS00MjJhLTk1ZDMtMjRmMjBmOTY3NWVj
LzEvdllVbktrQ0FrRTkxNGpXa2V2QzBFbWJpcGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9NHCso7
Hg9n0KKIc6BFVYlQ6V9Mgwurm+CaAGl/NHKEM1GauzeD8FjNL9YUWsS/22ROSFFM
bcP0h+1qhuuN18iC8ladWRm9If8F/SfoJOSSbB/mgme/yMKJbKPH5zzadeHIj5Zp
EENkqv+JbP28Hj2NZBZ6vwtmz2P0bj4LH7CDo0qyaMdTzgZs7JkUM8/Ulr2Fm++q
gyTF6qtcJwxf3PbkeKIQDVuNg2TAFS1aTBfjEYGHXJvaFeaObDvEY5w64G2zwoJs
y9enXK3biSHJ3qO5nYG+qkQHo5kS973ucZQe0c3QZVU8HVTbRhuLY2Wg/AvEHzRx
V7D29Rj1did5lA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:22:31 2026 by rpki-client