Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: iLgM3tSUloOqRBCwjjyXVJB4rURK24YAvK7kZKeIrgY=
Subject key identifier: 25:82:22:E8:43:3A:1C:0A:6E:E1:9C:26:40:7A:CB:EB:9E:23:58:BC
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019E1DFE96311814AD8729912D4C3D88270B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: 38bXB9htkqFDMkt/ysUtA8SyS1sEulwoULDwBfDtjjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:96:31:18:14:ad:87:29:91:2d:4c:3d:88:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=258222e8433a1c0a6ee19c26407acbeb9e2358bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:2e:0a:7a:f1:67:e2:07:f2:79:5a:9b:6c:
73:c8:0b:68:18:fc:6a:36:32:39:fa:eb:20:72:c0:
78:0b:4f:da:94:f4:fb:bf:5e:e3:62:65:9d:be:0f:
dd:e2:5c:a4:6d:57:2f:01:c3:47:d0:cd:14:ee:e5:
ad:e7:5b:51:77:51:55:0a:8b:f8:ad:78:2f:60:28:
65:22:06:25:bd:1d:79:f2:89:dd:92:3a:cc:c3:88:
0f:09:d3:a4:5e:d7:29:48:ce:87:55:8d:66:d9:1e:
14:6d:1a:f0:89:d3:09:fb:4c:84:6a:77:52:8d:bf:
c9:0f:31:33:7a:a4:9d:42:d9:b5:4f:72:91:c0:3d:
87:d2:91:4f:21:84:55:81:9b:d9:21:1f:06:55:56:
a8:d9:44:8d:c5:a9:93:f4:b9:ec:76:a6:23:78:9a:
c3:d7:50:37:1b:b0:36:5a:a0:ab:98:39:1b:f5:b7:
75:fc:9d:a1:1e:e0:e7:5d:b1:00:ed:19:98:fb:b0:
16:d3:a8:07:d8:bf:67:41:70:80:a3:23:85:a5:24:
b2:67:27:da:7f:10:6c:2e:07:f2:01:eb:a0:79:02:
73:1a:03:f7:63:4d:61:1f:a7:93:b2:28:79:7a:3c:
e7:a2:78:86:4e:09:de:b1:7d:09:b9:99:38:2d:d2:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:82:22:E8:43:3A:1C:0A:6E:E1:9C:26:40:7A:CB:EB:9E:23:58:BC
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:69:8b:fb:73:f7:d3:ec:2c:fa:7a:83:7b:90:c3:58:b9:6e:
27:07:d5:b5:8b:5f:d5:04:d1:aa:64:b7:7f:ec:13:da:24:d0:
13:f0:55:68:ff:58:4f:ae:cc:eb:97:c2:cb:8e:58:f1:ae:5b:
6e:8d:93:0c:72:2e:82:c3:dd:92:24:09:9c:0d:08:e8:0c:2d:
81:ad:8b:1e:af:80:ad:7d:f4:58:db:64:f4:91:e7:55:a5:76:
b4:48:2e:c8:68:bb:7e:ec:bd:05:36:c3:63:c8:d5:5f:85:50:
8f:fd:e1:7d:a6:95:7e:27:b5:b6:8d:88:fc:12:c8:f3:e4:f9:
24:fb:ca:b2:9d:19:dc:8f:88:3f:8e:e4:84:91:4c:ee:c3:c0:
d1:b0:03:2c:bc:3d:af:db:34:55:a9:a2:2a:7b:19:74:1f:2b:
1c:5d:9f:69:ef:47:89:0b:38:31:39:b3:e5:4e:36:84:e4:7f:
3b:a9:f9:9d:b8:62:1e:9c:4c:8a:f4:62:43:9b:14:8a:a7:3a:
46:75:2f:4c:2b:ae:b9:0f:bc:1b:f6:4f:32:2f:7d:84:ca:40:
db:b7:69:d9:1d:e0:48:47:94:de:a4:6a:ef:a7:eb:84:3c:4f:
e6:fb:db:87:12:54:a7:98:81:19:a8:34:d5:07:a8:b0:95:cf:
6b:5d:7a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:56 2026 by rpki-client