
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: cZDr4LQd76XThyItUgZrlFLS4Aynfxha7GkbfAky4/4=
Subject key identifier: 79:41:40:1E:EE:40:38:F7:6C:7E:1F:26:B9:9A:31:4D:95:53:90:FF
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019E1FB5825CC7F7A0788B6A771BB62DCD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0A9E
Signing time: Wed 13 May 2026 05:00:49 +0000
Manifest this update: Wed 13 May 2026 05:00:49 +0000
Manifest next update: Thu 14 May 2026 05:00:49 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: K+s8aHgjDpbCvs5dW8+qQOLJyaQ5Yub0zwlf9Gc8Pno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:82:5c:c7:f7:a0:78:8b:6a:77:1b:b6:2d:cd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: May 13 05:00:49 2026 GMT
Not After : May 14 05:00:49 2026 GMT
Subject: CN=7941401eee4038f76c7e1f26b99a314d955390ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:83:f2:c2:da:62:9b:d8:5e:53:79:dc:62:
95:6c:32:c9:75:32:06:dc:16:2d:2f:b8:09:72:2a:
45:cb:a5:24:71:95:20:ad:99:9b:16:3d:9b:e6:5e:
4a:e6:df:74:ab:65:29:ab:18:ce:ae:5b:d9:4e:a4:
d4:eb:21:ec:bf:cb:02:17:c9:c5:2d:87:36:b5:64:
27:af:e8:0b:01:d7:96:45:2a:06:9f:32:42:0f:67:
31:27:e0:33:98:16:eb:f7:e1:ed:e5:0f:50:f2:86:
eb:80:b6:40:d4:fa:3b:bf:d0:32:1e:0d:25:cb:4a:
12:91:c0:1c:97:6b:f6:6c:e4:fb:ea:b3:3b:93:76:
51:3c:fc:0e:35:cd:d3:4e:58:6c:c7:1e:17:80:82:
dc:ed:53:b5:2b:0d:fc:d5:3e:93:4d:2a:ec:a9:76:
7c:02:a0:a4:6b:6d:f2:5c:d5:3c:d4:b6:17:8a:c3:
ad:2b:ae:6f:21:ef:0c:1a:fe:7f:a7:c6:cd:8e:7d:
82:5b:6e:d6:5a:53:31:69:2b:ff:07:83:32:76:0f:
b4:44:37:46:57:35:9d:77:dd:83:1d:1f:77:b7:15:
18:df:ff:0a:57:ec:04:6e:95:4a:28:85:9a:a5:9f:
05:b1:54:b4:9d:33:7f:6c:c1:b4:8d:4e:ae:ca:f5:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:40:1E:EE:40:38:F7:6C:7E:1F:26:B9:9A:31:4D:95:53:90:FF
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:95:d6:75:51:f9:44:69:30:a9:97:c1:a3:61:55:e4:62:7b:
ce:49:51:b7:ac:bf:de:c5:78:09:bc:1c:6a:6f:14:84:85:de:
4e:ad:e2:3e:23:b2:ac:81:2b:9e:0d:4a:05:e4:a4:1c:29:85:
71:c8:d4:cd:f0:1e:d2:fe:3a:46:59:11:1f:23:6f:5d:f9:4d:
14:9c:79:cd:b0:08:c6:ad:7e:07:1b:4e:13:48:64:9e:17:c5:
c3:3c:71:75:2d:f5:aa:de:2d:df:1f:f3:06:b6:1e:2c:96:1f:
97:fc:eb:db:56:2e:5c:0e:57:0c:d1:c3:f7:d0:f1:11:8a:b5:
69:9c:b0:06:0c:81:a6:c6:b0:16:b4:3d:4d:6b:26:d0:56:07:
8a:d5:a0:91:b9:81:f7:61:03:c1:a5:95:70:5c:b3:ac:33:4f:
9a:ad:d9:50:e2:dc:2f:c1:f8:ec:03:af:9d:d5:4d:b8:47:bc:
48:29:60:30:8b:fa:f3:7b:c4:ea:cc:9c:f3:8d:be:7b:da:9d:
16:84:67:16:79:99:19:c6:ae:07:48:dc:6a:e6:31:30:03:47:
ca:34:bf:c5:aa:b8:42:ef:73:2a:6c:f0:59:fe:5a:c0:85:a1:
a8:2e:2d:11:20:e6:ca:bc:78:ef:b5:c4:81:03:81:76:a1:40:
a4:66:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:01 2026 by rpki-client