Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: brJkzIebds/K2gG0kTggXRTkf/DmxqXeKGn+Ovd69yM=
Subject key identifier: BA:5F:1A:69:E8:35:16:37:4A:ED:78:94:93:23:A3:1E:93:C6:EF:7E
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019E216D4600A36E7BD5047BE12121F188F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 13:01:09 +0000
Manifest this update: Wed 13 May 2026 13:01:09 +0000
Manifest next update: Thu 14 May 2026 13:01:09 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: U+wCm+lKafpMvki+tNQ6oo94OAliNpEKOBhrggdIqBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:46:00:a3:6e:7b:d5:04:7b:e1:21:21:f1:88:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: May 13 13:01:09 2026 GMT
Not After : May 14 13:01:09 2026 GMT
Subject: CN=ba5f1a69e83516374aed78949323a31e93c6ef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0b:32:26:6c:ef:a5:a9:3b:77:87:76:dd:e2:
2b:a8:ad:3e:ad:1d:84:6b:97:df:be:5c:40:4f:d3:
be:24:35:5f:cb:0d:c9:d9:3a:6c:a0:f4:00:2e:55:
69:22:b0:49:1c:56:da:d1:33:a8:7d:cf:10:5a:7d:
95:00:c9:d6:f6:6b:6a:b0:ec:d9:c6:b5:30:f3:a7:
56:8a:39:f9:b6:b3:72:f0:6d:fa:bc:c4:26:d2:8a:
b2:cd:0d:c8:17:8c:3e:e1:90:7c:4d:f4:bd:c8:4d:
00:86:31:4e:06:d1:30:3f:16:a9:2c:14:9e:58:4e:
22:23:44:01:82:d5:70:ac:60:86:10:05:0c:ea:87:
0d:c7:50:10:f4:d6:cd:71:76:34:f5:1b:5c:18:76:
00:f3:f2:6c:88:e7:f3:ba:8c:ce:d2:65:1a:c0:3c:
03:1a:75:9f:40:d6:f3:b7:ab:0b:c5:8f:4f:3c:94:
26:0c:2f:fb:f7:22:f3:c2:e2:fa:ed:2b:bd:52:dc:
bf:e8:44:82:a5:10:b4:43:e2:07:68:da:f3:b8:bf:
c5:c0:e5:53:2c:4e:82:7d:66:27:95:25:a7:90:41:
5f:39:7a:cf:54:cf:cc:1b:53:77:05:b2:61:29:fb:
1a:52:b0:7a:ad:ef:c1:bd:c0:bf:21:95:97:43:70:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:1A:69:E8:35:16:37:4A:ED:78:94:93:23:A3:1E:93:C6:EF:7E
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5c:3b:2a:be:2f:71:09:24:08:cd:1c:8d:e6:ec:09:e6:f3:
69:37:1e:9f:40:cb:db:ea:35:d2:26:70:28:08:d6:e8:f2:ad:
83:cf:1a:15:be:e0:56:d5:62:f1:2e:a8:87:4d:f4:ed:31:ff:
b3:07:c8:97:ef:ff:36:2b:b0:71:7f:a3:4c:72:1e:af:de:76:
32:d4:c1:45:dc:07:23:b2:93:21:a1:0c:6b:03:12:30:5e:4f:
3c:e6:7e:d9:ef:ec:f4:01:63:93:1c:75:7a:d0:12:14:98:ac:
fe:e9:ae:67:9f:d9:81:59:18:a8:30:45:12:50:37:3c:f9:ac:
53:3d:8e:4c:0d:55:db:1a:6c:7e:39:9b:68:f7:87:89:43:04:
97:58:b8:10:2f:1f:17:a4:11:52:ca:06:ed:be:9c:75:4c:0b:
da:f2:71:3c:92:23:8f:26:4a:03:f6:9e:47:31:c5:a9:c8:92:
fa:fe:d5:b1:5a:5f:90:7d:56:02:0d:ec:18:54:6c:55:4a:1b:
ce:fc:51:f5:da:9b:c3:05:dd:25:f0:c2:30:98:c9:14:d6:c2:
8f:ec:2f:3e:64:47:14:f5:4f:f0:35:7c:95:53:8a:e9:25:46:
a4:1f:6c:83:34:dc:f6:51:fc:e1:81:ff:ec:c5:9c:7e:f7:46:
9a:18:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:58 2026 by rpki-client