
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: Hr6sP1stIIXMcdIX/u6BgUreF8WpAtsfISK9+934OBI=
Subject key identifier: AA:8C:3C:22:27:0C:6E:E5:F7:DF:81:62:F5:3C:BD:4D:85:63:87:A1
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019E216D836C7112C7D3FF1A6F9094348695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1654
Signing time: Wed 13 May 2026 13:01:25 +0000
Manifest this update: Wed 13 May 2026 13:01:25 +0000
Manifest next update: Thu 14 May 2026 13:01:25 +0000
Files and hashes: 1: 341ViOQdsNCW-En8QgEMghW3CrA.roa (hash: ZDMhvpmhtSILebU2dF818x+O1gwwEqpIPXCs7VmgQH0=)
2: EwqvsuzaZqidzerK9hCEUFqmQ00.roa (hash: GDEyHKgpCdUpHrUWgA6Yr0loRQV7nfKi6qOOjAkX3eQ=)
3: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: SFUxoubo4BMA4dgyPk/qI43ZrFw2c9me59Ies6nO1o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:83:6c:71:12:c7:d3:ff:1a:6f:90:94:34:86:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: May 13 13:01:25 2026 GMT
Not After : May 14 13:01:25 2026 GMT
Subject: CN=aa8c3c22270c6ee5f7df8162f53cbd4d856387a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:a1:e7:9f:dc:71:90:a8:ea:35:da:79:1e:
c6:75:98:75:70:3b:97:7a:03:bf:70:ff:f0:da:68:
72:2d:33:d6:b1:c7:1a:0c:ec:11:f1:2e:45:8c:1c:
2b:e9:a4:c6:39:61:88:d2:4b:be:5a:bb:2d:26:87:
3e:56:f9:69:9b:25:8f:4f:e3:2e:d7:b9:a5:9e:c7:
68:1b:4a:9f:c7:ee:b5:1c:43:e5:25:8e:60:06:96:
22:dc:6a:69:63:fb:9e:4b:3e:df:87:00:dc:88:d8:
75:1a:6c:b3:a6:26:7e:0e:97:08:54:55:49:84:ce:
cb:a7:cc:84:a9:84:65:e0:88:cf:c3:db:be:c3:a0:
89:d1:72:3e:20:51:1d:ad:db:f2:62:54:5e:4d:d1:
ce:f5:51:db:54:6b:02:e3:fa:72:3b:63:44:ca:26:
0c:a3:8e:50:14:61:01:7f:3f:e3:e1:55:c1:21:12:
1a:1f:e6:e9:a2:23:5f:c8:0c:4a:5e:78:24:7a:9b:
f1:1a:49:0e:f6:56:ea:31:2c:a6:5d:8a:aa:1b:7b:
da:5e:4e:65:70:af:b6:bb:85:46:a0:69:a2:aa:fe:
df:67:71:d0:84:31:fa:cd:20:28:6c:46:5f:56:ed:
65:c4:fc:df:ee:52:aa:14:01:d9:ef:03:ca:4a:c6:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8C:3C:22:27:0C:6E:E5:F7:DF:81:62:F5:3C:BD:4D:85:63:87:A1
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ea:dc:e5:1e:01:77:ff:ac:31:01:8f:7c:2b:ff:60:1f:c7:
bc:26:c8:92:bc:a4:1e:50:12:c3:bf:6f:7f:8e:23:40:4f:7e:
c2:c7:dc:05:d8:a3:39:ab:b2:29:26:30:36:b5:10:bf:a5:c9:
a2:f1:3a:6b:64:46:8e:3b:65:5a:62:0f:55:44:0b:0f:13:53:
82:39:62:17:37:32:94:ba:77:cf:05:87:c8:11:55:c6:18:64:
67:d0:1b:eb:82:a4:8b:49:49:ad:50:6f:ba:69:f8:62:10:a7:
29:f2:a0:ff:27:e5:4f:89:91:8d:0a:08:93:05:df:10:b6:9e:
f3:03:fb:bc:fd:ce:e1:b2:83:5b:fb:5b:bb:e5:60:c5:55:98:
99:81:db:b3:c9:e9:40:42:51:cb:a9:79:0b:4d:59:3b:aa:d1:
a3:96:1e:3a:f5:d3:85:6e:24:38:25:fc:c7:42:69:5a:1c:a2:
67:ab:5c:a3:46:0e:ef:e1:0c:1d:35:af:8c:9e:98:6f:aa:b2:
59:23:c4:30:2e:d5:d3:c6:7d:81:2f:49:c3:40:d0:09:49:88:
a9:10:3b:00:8b:82:ff:a9:ee:82:64:10:82:36:28:6c:74:29:
5a:02:65:e3:3e:2a:2d:6e:11:b8:c0:e2:4d:06:3e:15:12:4f:
04:e4:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:28 2026 by rpki-client