Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: EKo4/coSfG4bLEuWpdeXZXvijiLkWr0NzH0DRD2Bllk=
Subject key identifier: F4:85:17:E5:70:58:75:32:71:69:AB:CF:B0:D7:A3:C9:8D:12:A7:49
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019E1E6C81308FF900C4247AF2C11703D458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 0982
Signing time: Tue 12 May 2026 23:01:27 +0000
Manifest this update: Tue 12 May 2026 23:01:27 +0000
Manifest next update: Wed 13 May 2026 23:01:27 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: fSK435NkKpAJtbvMDVir7v+6AcfJx/u+sFbqTr0rarU=)
3: xd89191APrZOUVHG3uZycN3SZ0g.roa (hash: IG6q5I2/G1oD/WZjTUVQ36euEC71avJGwrJIV9eTw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:81:30:8f:f9:00:c4:24:7a:f2:c1:17:03:d4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: May 12 23:01:27 2026 GMT
Not After : May 13 23:01:27 2026 GMT
Subject: CN=f48517e5705875327169abcfb0d7a3c98d12a749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:a1:d6:0a:8a:41:0a:49:36:ff:0c:27:2f:
ae:2e:fe:b6:df:45:66:f1:b5:2d:a3:2b:3f:80:ce:
5d:a6:a5:65:8c:6f:d5:56:38:cf:57:f9:36:4e:06:
b9:83:91:14:4d:f3:4b:31:92:ec:a9:d9:a7:e1:1a:
0f:59:bb:f0:b2:b0:8d:29:75:d3:cb:f1:04:1d:28:
b9:2e:1f:07:ac:0f:9f:5a:fb:d2:6f:be:f2:33:eb:
7e:13:b7:3c:19:a3:73:04:7a:c2:8d:85:c0:dd:55:
b5:41:fc:ce:0a:f0:db:4b:80:d3:16:10:91:11:14:
43:b7:36:0c:54:70:e7:7f:c3:0a:ee:a6:d5:56:db:
50:c7:f7:a7:6a:2e:45:18:71:7a:39:b5:16:c7:f5:
79:f8:2f:a1:79:63:5d:58:8f:6a:5c:2c:83:6e:15:
59:11:88:9b:8f:f0:e8:e4:c7:7f:1b:48:21:e0:f6:
35:24:2f:d1:c2:b9:e3:62:67:f5:41:8a:3b:c9:e9:
34:45:69:29:33:ad:4e:ed:e8:c9:cd:f9:10:17:08:
88:79:a0:97:bf:6f:58:7a:d1:34:89:f4:c7:79:16:
e3:fa:12:ce:d5:67:44:ae:a7:d7:4a:e9:2e:f9:34:
19:92:09:11:de:6d:db:2c:da:cc:8a:12:a9:31:b1:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:17:E5:70:58:75:32:71:69:AB:CF:B0:D7:A3:C9:8D:12:A7:49
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:f5:12:b0:8c:5a:e3:bf:e8:bc:2d:87:c6:10:6f:cb:92:
6c:00:dd:3d:25:57:e8:75:9a:18:3c:f5:1e:d9:03:98:88:14:
5c:6a:38:2d:32:d4:92:d0:4c:31:41:76:8c:47:4f:65:8d:5f:
c7:c8:1f:ae:17:d6:ff:33:94:c4:03:26:04:a2:21:f1:92:da:
23:4e:55:2f:0f:76:64:37:7c:4b:ec:3b:65:a6:f8:d7:16:2a:
96:bc:a7:8b:d1:b6:05:d2:59:5a:9b:c2:8a:8d:ef:ad:02:65:
14:71:f3:c5:7e:85:88:a9:00:7e:bb:f6:4c:d8:c8:57:f2:8b:
86:b5:bd:2d:df:81:ac:1d:67:50:80:13:e4:3f:f3:c5:6e:ed:
7f:88:ca:3c:07:05:ae:ec:b5:79:90:74:64:d5:27:3b:51:78:
9d:95:41:fd:f4:dc:73:57:40:d1:47:e1:62:a3:6d:e5:1c:3a:
56:e5:35:01:41:94:6c:cc:a9:d8:ae:e2:ad:1f:64:f9:4c:32:
7b:15:1a:99:94:73:c1:6e:e4:f1:39:27:6f:0c:45:07:39:9a:
22:4e:dd:97:5a:c1:9c:91:87:1c:e4:05:89:30:cf:25:b1:44:
f7:92:5f:6e:fd:c4:c1:95:90:2e:d8:b7:fb:09:62:c1:52:c8:
71:f8:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:46 2026 by rpki-client