Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: fNkqlUZIBLiY+j0LA4mbgYT+9NhloysHlb7lLMn295Y=
Subject key identifier: 88:45:8B:0F:9D:0B:F8:09:1D:AE:B8:73:04:BF:B8:6F:0F:5D:F3:5E
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019E1DFE39FF9ADE130F42CB78BBA34F2B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:00 +0000
Manifest this update: Tue 12 May 2026 21:01:00 +0000
Manifest next update: Wed 13 May 2026 21:01:00 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: zc1Y/PrMzz+fD7zTHpfmZvIIv0lepecgU2AtohVh82k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:39:ff:9a:de:13:0f:42:cb:78:bb:a3:4f:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: May 12 21:01:00 2026 GMT
Not After : May 13 21:01:00 2026 GMT
Subject: CN=88458b0f9d0bf8091daeb87304bfb86f0f5df35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:45:1a:68:12:3e:b2:49:ae:04:84:79:f8:
97:52:b3:42:2c:85:dc:50:17:2c:ab:50:71:85:82:
bc:46:6c:1f:1c:be:c4:8a:eb:e2:8c:43:9f:8d:a3:
d1:64:b8:1b:b6:98:02:1c:62:49:15:46:e3:4a:8e:
ef:98:bf:14:0e:a8:ea:e9:ad:95:0b:93:af:2a:27:
9d:e0:9c:e1:1a:fd:6f:c6:07:9f:5f:08:60:ad:3e:
ff:3d:d3:6f:7a:24:9f:d3:ec:fc:91:ec:7a:fa:85:
dc:04:ac:b4:9e:e1:c5:74:06:d3:ac:3b:13:ec:06:
39:4c:a5:03:26:f7:92:0f:e1:e1:63:30:9d:41:93:
07:a2:56:f5:91:61:5a:cf:b4:65:51:f8:f6:5d:4e:
cc:ef:bd:ea:b2:3b:a8:91:c2:5f:22:24:36:0e:4a:
64:96:9f:54:76:13:68:7c:e3:bb:55:05:16:3c:79:
be:9e:64:7c:bb:d3:0c:96:4d:4e:e9:6b:c4:69:04:
13:50:91:ba:30:b3:b4:46:81:03:0a:2a:45:d1:9b:
31:fb:80:4f:da:ff:23:a7:0d:bc:7d:ef:57:d0:88:
a8:49:0d:a0:cc:db:33:d4:84:26:cc:d2:23:ee:47:
f4:8a:bf:bd:8b:1e:dd:f3:36:07:0d:92:d6:a1:9d:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:8B:0F:9D:0B:F8:09:1D:AE:B8:73:04:BF:B8:6F:0F:5D:F3:5E
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:45:5e:cb:f9:ae:77:53:eb:ae:a0:9a:13:03:64:7e:92:69:
65:33:4c:37:31:4c:b8:cb:ce:13:d8:0c:9f:5b:80:3a:23:39:
02:25:05:89:6e:51:c0:62:1f:c4:be:82:ff:30:4e:7c:47:b4:
ca:cc:06:70:c4:34:17:db:d3:61:63:b1:98:07:42:bf:c9:4c:
27:da:77:b8:17:ca:d0:20:56:b2:67:ff:78:d0:07:09:01:a8:
27:8c:d9:01:77:73:59:de:79:99:3e:a6:2f:9f:9c:fc:46:b3:
31:3a:72:ba:47:5f:87:60:ee:e6:bb:25:ef:58:3c:b5:3f:b6:
de:ac:cf:b4:0e:47:c4:c2:14:b7:85:05:4e:22:42:2d:f6:24:
07:b5:ff:1d:3f:83:25:bf:2c:ae:db:09:32:af:fe:e4:7f:c3:
51:b3:c1:6c:a0:c7:36:f7:df:74:50:a4:24:e1:92:1e:9d:ac:
d1:7f:07:dc:dd:d4:eb:06:4d:6f:f8:2b:9d:bf:fb:d4:86:d3:
d1:30:ba:ce:67:3e:02:af:75:21:18:72:c7:e1:fc:e2:35:6d:
59:91:49:31:52:bd:75:35:ed:c5:ce:6d:c2:84:15:fa:ed:39:
78:59:5e:62:85:62:91:8e:2d:69:20:88:a2:42:0f:e1:38:0c:
40:c6:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:04 2026 by rpki-client