Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
File: vWGQNE2etusMy5SON6oKqr4vLpA.mft (raw, json)
Hash identifier: hy45jMsfWcb538/omhc0lTFXN1iI1T7U2gbTYt5V5t0=
Subject key identifier: 4A:A8:FE:43:83:6B:BC:25:6F:85:E6:EF:A8:68:2C:EE:97:E6:C5:03
Authority key identifier: BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
Certificate issuer: /CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Certificate serial: 019E20912FEED3132034642121F598F8A2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
Manifest number: 0127
Signing time: Wed 13 May 2026 09:00:46 +0000
Manifest this update: Wed 13 May 2026 09:00:46 +0000
Manifest next update: Thu 14 May 2026 09:00:46 +0000
Files and hashes: 1: jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa (hash: 4Rm+AgcIx2QNLzodYb14yKwLv1JgZDJIFSxZdtp7HDw=)
2: vWGQNE2etusMy5SON6oKqr4vLpA.crl (hash: 3h65ebRhDL3u3MiU/D2JiKU9+rmVkl8QFpR/Oqndoec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:2f:ee:d3:13:20:34:64:21:21:f5:98:f8:a2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Validity
Not Before: May 13 09:00:46 2026 GMT
Not After : May 14 09:00:46 2026 GMT
Subject: CN=4aa8fe43836bbc256f85e6efa8682cee97e6c503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:2a:52:8b:8e:38:b3:88:68:ff:64:fd:bd:
2a:c6:8b:e5:37:a3:64:58:97:ec:eb:5d:2b:42:61:
1a:11:6e:8f:08:7f:82:72:52:37:ae:a9:b9:15:49:
b9:e9:c0:65:dd:7c:c8:b1:2d:f5:12:7a:c2:7c:65:
58:1e:05:9c:ff:b6:7e:f2:c0:0a:11:6c:b8:92:18:
b0:bf:cc:d7:9e:6a:e6:7f:54:5f:4f:f2:29:54:ff:
09:cf:ad:d4:e5:d3:86:e6:b6:71:6b:78:4d:e5:35:
08:29:47:e6:3e:31:0c:bd:c1:06:c4:cf:25:4e:f8:
3a:e3:c3:63:f4:69:6e:bb:6e:21:4f:12:e5:77:28:
ff:9e:8b:c4:6c:d4:8e:47:87:01:94:26:5e:c3:36:
8a:53:12:47:ea:b8:7e:48:20:e8:43:75:ea:cb:7c:
3d:2b:56:1c:66:93:f2:4e:b4:3a:d4:88:12:8f:18:
70:9f:3b:fe:69:84:22:8f:67:95:a8:c9:8c:c8:db:
38:a1:d6:68:49:0e:0d:8f:b4:b2:f8:d1:ea:b7:84:
2a:8e:1d:1a:83:de:cf:b4:45:39:2e:01:f6:12:71:
3a:08:35:26:bd:b7:f1:01:bb:3d:08:19:a7:f9:cd:
2b:9b:b2:2e:5b:73:76:b5:f4:f5:1a:b6:5f:42:d3:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A8:FE:43:83:6B:BC:25:6F:85:E6:EF:A8:68:2C:EE:97:E6:C5:03
X509v3 Authority Key Identifier:
keyid:BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:22:ea:36:c0:d9:2a:ba:5f:86:db:d7:a8:34:c9:72:20:44:
3e:6c:04:71:be:ee:59:bc:bf:cb:20:a5:3a:02:5e:9d:de:13:
70:14:a7:19:ab:11:4d:89:74:37:2f:96:fe:fd:c5:de:e5:5c:
87:4d:60:52:4e:c8:1a:53:bf:d6:3d:a2:b1:ae:d1:59:f8:dc:
78:9a:c1:d3:44:03:d2:f8:4b:10:62:d5:88:e1:d2:eb:4d:c5:
f6:5b:0f:1a:b7:8e:fa:5a:13:33:8d:b8:3e:34:bd:c1:4c:64:
85:11:5b:a7:fc:85:f5:45:3f:91:92:26:8e:62:41:07:07:a5:
6d:a6:08:88:ba:b5:22:a2:7c:c0:28:a4:7d:2a:ac:a8:12:e8:
77:25:d3:08:0a:22:92:2a:d9:8e:ba:3c:b2:66:a6:3e:85:70:
ea:c8:bb:37:4b:71:27:75:e6:d8:83:7c:26:87:ff:b3:f1:ab:
53:eb:72:cb:5d:0e:15:da:d0:e4:db:01:6e:d0:16:c9:93:e5:
fb:22:3f:0b:9b:37:2b:be:f0:6e:65:e1:7c:e5:a5:07:11:07:
55:d9:17:88:43:0f:7a:40:c6:d0:8e:5e:1a:06:9a:5e:b2:25:
98:b5:6d:b6:b3:3a:22:d5:f3:aa:ff:10:5d:23:b2:fd:be:2b:
12:75:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:36 2026 by rpki-client