Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier: ng5JKnnY2wnGKjYYFEOUtAhSHT2sVPc1b9wNVz1khCE=
Subject key identifier: 6C:4D:32:E7:06:A9:7F:BB:A5:71:6A:05:73:14:0C:9A:E2:B0:85:64
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 019D25BAB330AB899339DA1D93F576C56711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:01:25 +0000
Manifest this update: Wed 25 Mar 2026 16:01:25 +0000
Manifest next update: Thu 26 Mar 2026 16:01:25 +0000
Files and hashes: 1: PVBeyZKlBQT3Dc48StGzvLmkgLs.roa (hash: RIyf6kHbIC+ixB0VU+3PzontAfCdCIipNxhHFNviEwg=)
2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: Mv5bb9dqWT4J3RfIL3E6/D4gyP/zOe6zgUASynW3loo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b3:30:ab:89:93:39:da:1d:93:f5:76:c5:67:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Mar 25 16:01:25 2026 GMT
Not After : Mar 26 16:01:25 2026 GMT
Subject: CN=6c4d32e706a97fbba5716a0573140c9ae2b08564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:66:89:19:03:ce:ac:10:0b:0b:04:b5:68:
dc:74:f0:6b:f9:cd:37:4d:f8:2b:7b:31:6f:c5:36:
7d:8c:e5:bb:95:65:fe:9a:09:b2:d3:fa:8c:97:8f:
a5:6c:0f:62:dd:39:68:23:c3:e3:24:65:ee:ee:01:
08:e3:ec:7a:65:34:70:78:11:f4:cb:c5:3d:a2:f0:
cc:94:5c:ba:66:93:98:73:79:d6:48:cc:dd:33:84:
45:d1:e2:07:68:6a:19:18:05:bb:98:ee:85:a8:fe:
35:e8:8b:67:02:27:0d:df:90:b7:52:3c:7d:56:63:
c5:26:0e:36:0f:d0:ac:31:14:0d:71:0e:26:80:34:
04:d0:2b:73:44:bc:9e:4a:47:bd:0a:21:22:d1:08:
cb:69:32:a2:d8:4c:ea:00:d2:40:13:6d:82:c2:9c:
d8:dc:3e:74:91:b1:dd:65:75:54:e4:5b:6e:8a:e7:
28:bb:0f:5b:63:3a:e9:97:4e:21:47:50:c7:42:e5:
15:d6:6a:38:e9:89:1d:03:c8:bc:c5:52:b8:69:de:
8d:6b:c0:e8:99:10:ff:a8:72:c8:6e:94:7d:67:ec:
69:19:60:f5:5f:fd:3f:16:ac:df:0f:da:14:4a:43:
e6:b1:15:6b:a2:80:f0:ae:b0:65:ea:7b:b4:2a:e7:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4D:32:E7:06:A9:7F:BB:A5:71:6A:05:73:14:0C:9A:E2:B0:85:64
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a3:e0:3e:1c:2f:0c:51:b3:1f:58:9c:54:0c:5a:71:1f:3f:
3d:74:4e:a8:90:98:54:48:76:4b:eb:bd:59:48:a6:cc:89:ef:
ff:4b:92:86:c3:71:30:de:b5:e2:34:d3:b1:80:68:9c:60:86:
2a:48:d7:ae:76:af:e5:f8:94:00:2a:f2:27:78:ee:09:ea:66:
10:d1:54:01:b7:68:b4:4c:1b:dd:f8:f8:ff:be:23:c2:ba:4c:
a3:11:6c:79:26:d0:c9:be:9c:52:1b:10:4f:ed:1b:61:23:1d:
b0:71:7e:23:e9:ea:78:19:e6:5d:65:8a:bf:a3:38:fa:5d:5d:
31:97:23:f7:a0:d7:e9:3b:ec:68:ce:74:f7:d1:c7:ab:48:3b:
72:fa:80:ab:e4:08:a0:d4:cc:e9:d8:32:20:f1:c5:11:d9:43:
80:b3:c8:fd:fa:56:6d:99:8e:4b:fb:fe:7e:9b:b2:16:c4:1a:
00:38:c0:f9:81:d0:22:3c:cc:39:09:b9:e9:ea:56:c8:e1:a5:
87:9a:9f:ff:63:e7:ba:84:6c:4d:12:b4:53:23:7d:3f:ee:8d:
98:50:a1:e2:2d:58:50:35:ff:95:6a:09:a5:f9:1b:70:7d:f1:
ec:69:a9:a1:be:17:16:d1:83:47:13:f4:53:81:85:5f:fa:17:
8d:8b:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:17 2026 by rpki-client