Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier: ojPKAedGElHiKkNAg9gO7ovea4DfUe9QdRjXX/juWzE=
Subject key identifier: BC:79:FE:B3:66:FE:87:2D:BE:E0:CB:D4:C7:CF:84:BC:AE:4F:CB:D8
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 019E1EA2DBEA3C8C215C9C4FD96D1896405F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number: 159C
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: E6VcUABJOgaDwD9RzJREvDXjkAM.roa (hash: qjoSCznyEiS7sQVKAn02kghNOIKy/+vPrXAKlA+IZs8=)
2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: WEedbPeaCjH/EajYTq5HtYgmM5jHmyXnOgTEFHTyjLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:db:ea:3c:8c:21:5c:9c:4f:d9:6d:18:96:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=bc79feb366fe872dbee0cbd4c7cf84bcae4fcbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:5d:12:45:4c:d6:97:cb:f7:2c:0a:2d:87:
59:37:7b:49:55:ac:7a:e8:81:e3:64:07:d2:cd:e8:
ab:79:48:c8:7a:9d:4a:2b:7d:4d:fd:65:31:46:ff:
19:6d:65:4d:ee:b2:cd:31:30:24:cb:a9:31:50:a8:
ab:4c:cd:90:99:e0:ee:d1:15:40:e3:86:fe:e5:cc:
ad:6b:06:f1:63:f0:ce:f2:09:37:55:df:30:7c:4e:
31:1d:6b:0f:c8:5a:c3:66:4a:63:3a:96:72:d7:fc:
df:e6:55:80:c4:28:82:06:92:fb:2a:23:07:8d:13:
d2:82:20:52:07:52:a7:dd:9b:ed:16:f0:d9:ff:5b:
c0:5f:2d:a2:63:6c:44:c4:b4:30:a8:ae:e5:b4:7a:
f3:eb:29:0e:b3:cd:e7:45:9f:f9:a0:6a:00:4a:c7:
51:c4:55:fa:b5:fd:b2:0d:4e:0e:f5:a7:07:e7:eb:
b9:94:3b:55:64:85:6a:fb:ca:98:cf:c5:8c:96:67:
3f:d7:e5:9b:b4:a7:9a:f4:ca:35:62:e7:14:f7:92:
03:ce:a8:4d:93:49:37:90:49:ac:b6:bd:60:7c:a3:
33:f3:24:49:7d:c9:2b:ad:f5:a9:0b:f9:ff:29:e5:
02:30:66:6b:13:52:8d:58:2e:83:90:67:3b:83:d6:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:FE:B3:66:FE:87:2D:BE:E0:CB:D4:C7:CF:84:BC:AE:4F:CB:D8
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5b:36:33:9f:fc:76:cd:98:43:58:2c:7b:ac:3b:ba:ad:8c:
97:44:cf:9c:03:3f:c9:0d:9a:ab:4c:a7:59:13:ab:a9:c8:5c:
69:97:fe:b2:36:93:da:3a:5b:19:4d:fd:22:3d:63:8e:ba:48:
7a:45:57:34:b1:9b:13:52:d4:75:82:81:82:bd:36:43:0c:08:
ba:34:84:0a:b8:c4:bc:f3:a5:2e:58:05:25:54:81:86:25:44:
af:2a:96:47:2e:82:9d:4c:8b:40:54:98:6a:aa:1f:fe:9d:5d:
12:d0:0b:9a:0b:9b:69:61:9c:10:fa:3e:ec:bf:6d:c1:dd:0b:
51:09:ba:63:18:31:f7:76:e9:e2:22:8a:2b:81:e6:cd:9e:4c:
c5:b0:8b:78:8b:79:be:0e:57:45:d1:17:4c:ac:73:84:6f:29:
58:69:c1:e4:56:98:be:f6:e8:4b:7e:69:75:a7:2a:d8:37:9e:
c5:1d:dd:64:85:58:e4:78:df:f3:ad:b7:f3:46:f5:92:e6:e4:
4c:70:30:7a:09:1a:39:1e:6c:9a:b6:b8:0d:ac:6b:e7:0c:2d:
e5:0c:9d:86:b0:57:70:cc:c0:46:97:9c:3b:03:11:0b:74:77:
41:0b:bd:dd:f6:a6:fb:bc:4b:18:54:7b:10:b0:f6:a2:61:14:
65:b2:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:50 2026 by rpki-client