Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: OaNQgcU1DY5aR50JMzSvtVQr3Bh/i08fxV2mQH9wBHo=
Subject key identifier: 19:00:7E:E8:01:E3:E6:9B:4D:D8:60:C4:45:84:6F:67:23:31:B3:C9
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019E20C7FFCF7070C04A7EEF5CC95875DD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 10:00:38 +0000
Manifest this update: Wed 13 May 2026 10:00:38 +0000
Manifest next update: Thu 14 May 2026 10:00:38 +0000
Files and hashes: 1: hBfOWNz8aB-uKsUJCSf2XACnmmc.roa (hash: 5Y5YLQETtQumGJBT9gG5Cwrp98Yqiy17fOUfKzajf7c=)
2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: i3CYyM3nGhn8TuMOalvgcIMwAbCMZKAOcZlsYr+CemE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c7:ff:cf:70:70:c0:4a:7e:ef:5c:c9:58:75:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: May 13 10:00:38 2026 GMT
Not After : May 14 10:00:38 2026 GMT
Subject: CN=19007ee801e3e69b4dd860c445846f672331b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:3f:66:9b:1b:30:d5:1f:f8:21:3b:8b:e5:
42:32:94:d4:86:c7:02:94:fe:6c:44:0a:47:b4:be:
49:78:65:0b:37:29:59:51:24:fb:a2:d9:c6:34:19:
9f:43:60:78:96:52:0a:ea:d3:da:fb:12:b4:c6:24:
43:23:78:bb:35:7e:77:08:71:f1:7a:a2:f3:82:3b:
f1:62:41:45:88:0f:70:8d:56:5e:39:3b:67:73:6c:
48:cc:64:cc:b3:46:8c:8a:bf:5e:1a:76:41:1b:9f:
11:52:48:6d:ca:fb:86:f4:8b:3a:59:a3:5a:77:5f:
c3:f6:72:cc:bc:33:ea:c9:b5:b8:53:af:ee:7d:17:
13:d8:b3:3f:d4:29:d6:b0:16:d6:4d:d5:a6:7d:38:
5f:25:e0:6e:cf:33:f8:4f:09:98:e9:1e:4a:6f:69:
1b:69:da:24:c3:73:db:32:3f:50:c1:da:26:aa:5d:
bd:0d:cc:a1:2d:41:78:06:85:6c:ab:a5:f2:48:53:
c7:8c:d5:24:0a:6e:97:6a:71:a0:fd:32:28:99:58:
3d:41:48:be:f8:7c:49:44:6f:7a:ee:3e:c3:bc:e4:
42:99:2b:74:6b:f5:ec:3f:54:1c:82:67:96:b0:47:
44:56:7e:75:d0:f6:3d:3b:a5:e5:50:fc:70:0f:c8:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:00:7E:E8:01:E3:E6:9B:4D:D8:60:C4:45:84:6F:67:23:31:B3:C9
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:53:66:ae:f5:ed:85:75:c6:a9:24:53:b0:79:50:65:9c:81:
91:c9:03:7f:fd:1d:46:ab:fb:49:2d:05:87:6b:e1:a7:4c:ec:
c5:47:de:fd:10:43:d5:94:ad:5e:c5:e5:c3:9b:a9:c1:bd:06:
a8:46:8b:c6:71:03:70:78:ae:62:75:f6:95:2e:fc:fb:bb:5c:
ac:c5:e2:f7:89:07:eb:e4:5f:ae:4e:b0:77:b5:19:d0:aa:97:
0c:e0:2f:82:79:65:e9:79:0a:9c:6d:56:af:2a:37:56:20:60:
93:1b:34:43:ae:23:35:1d:4e:b9:19:a7:d6:94:4b:e9:7c:5d:
ea:d6:62:35:98:49:09:4f:c3:04:07:3e:3b:1f:05:c6:14:b0:
ad:cc:3a:b4:f7:d3:24:00:53:f9:d2:a0:84:58:48:e6:e5:d0:
77:61:1e:5a:ab:7c:0c:b1:19:c3:72:75:e7:45:11:5e:ad:00:
96:8a:62:f1:f7:76:56:dc:c2:ed:48:cc:36:26:58:f0:09:45:
0e:ff:de:d7:09:a3:27:47:7b:fa:0e:39:39:2e:07:e2:3a:1a:
52:bd:0e:d4:d4:68:dd:c9:9b:29:c4:8e:97:f3:df:ed:fa:eb:
c3:36:2e:50:96:8b:35:4b:b6:10:98:80:c8:09:96:cd:e9:19:
bc:d3:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:38:20 2026 by rpki-client