Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: hWvWuRKnYfwNkU1s3LzoaQquptK9JD9fqQnGMtdNsvA=
Subject key identifier: DD:83:98:B1:FB:AE:60:0F:AF:9A:33:5E:3B:5F:CF:FA:83:8D:BF:AE
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019FA9AC0788EA45072C0E1779A4AE9A2676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 08B5
Signing time: Tue 28 Jul 2026 17:00:51 +0000
Manifest this update: Tue 28 Jul 2026 17:00:51 +0000
Manifest next update: Wed 29 Jul 2026 17:00:51 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: 7ZabGPCrxeYsd7daSxhAabTNN4bZxu6OM9SH9iTOte0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:07:88:ea:45:07:2c:0e:17:79:a4:ae:9a:26:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jul 28 17:00:51 2026 GMT
Not After : Jul 29 17:00:51 2026 GMT
Subject: CN=dd8398b1fbae600faf9a335e3b5fcffa838dbfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:8a:a6:fc:9f:3e:50:b9:27:c2:21:ae:85:
59:54:86:80:49:ee:3c:b2:cb:91:50:5e:25:80:0b:
3a:83:56:75:e8:98:ae:1e:30:0e:91:c1:92:e3:3b:
f1:72:9c:a0:e0:78:03:c7:3f:47:ed:6c:02:9f:5a:
1f:c6:10:6c:75:39:4a:3e:c5:c4:b2:93:c2:e9:6f:
5b:8a:52:62:eb:b7:e7:63:40:c3:c8:e3:c3:71:66:
a3:73:bb:76:68:db:25:f1:7e:bd:33:34:e5:71:b1:
a0:cb:af:3c:03:95:21:9d:1c:36:d5:4c:61:1b:0b:
36:38:c8:e4:5e:c6:74:3b:c1:e3:c6:43:08:c2:58:
d6:f3:70:dd:a6:52:91:f1:69:b1:f4:ca:29:67:26:
fd:97:ad:1e:74:cf:af:40:48:f3:03:bd:5c:6d:be:
f9:de:f6:6b:55:ba:cc:ef:9c:68:3b:19:1b:36:84:
85:07:03:5a:89:3e:8a:82:97:c3:ec:9b:0c:44:e8:
45:73:51:b9:9f:9d:8d:e9:78:99:ed:95:14:57:64:
e9:7c:c6:25:a9:db:7f:b0:64:a5:ac:4c:6b:12:c4:
ef:95:d0:41:63:d3:3d:da:c6:e8:27:a1:d5:42:2e:
f0:fb:38:4b:89:3e:6f:6f:9c:da:0d:49:d5:bb:4b:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:98:B1:FB:AE:60:0F:AF:9A:33:5E:3B:5F:CF:FA:83:8D:BF:AE
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:39:26:5e:1c:59:79:de:62:a5:cf:f2:10:b7:00:18:68:f5:
07:07:e8:18:58:d3:ff:59:ee:2b:2b:a3:99:7a:7e:5e:7c:66:
e6:2d:78:9e:b6:73:66:cc:9e:e2:ff:6c:db:30:fa:cc:9d:76:
7a:1e:41:b1:c1:9c:d8:9a:99:6d:08:1a:35:bc:03:1e:ca:0a:
fe:58:8e:98:00:5c:a4:ff:cb:1e:9e:01:0a:b0:b2:94:e0:1d:
4b:f5:56:ad:71:8a:49:2c:5e:fe:dc:a7:7c:f9:78:10:f5:b1:
2c:fe:1c:4b:7c:cb:1c:d7:34:98:11:0f:03:dd:53:22:1c:09:
2c:e8:63:8c:6d:35:32:aa:79:75:7c:72:bb:e8:34:f2:fd:82:
2f:95:df:0f:b5:83:db:a5:f5:58:a4:58:d1:79:1e:b6:17:5b:
9e:dd:f8:69:dc:7c:90:ed:dc:c6:ea:56:fd:2e:04:56:ee:4a:
70:d5:22:39:75:9c:b1:fd:61:e7:21:17:35:f3:79:f3:92:c7:
f4:32:95:93:b2:16:77:08:f5:80:80:9a:85:f3:4b:8f:2b:19:
2f:73:fb:2f:74:7f:b9:87:1f:24:5a:a2:05:f1:79:f2:e7:d9:
54:08:62:a2:71:52:7d:08:c7:96:41:c3:31:05:8e:07:b5:e6:
0c:12:8d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prAeI6kUHLA4XeaSumiZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3
ZTgxZTAwHhcNMjYwNzI4MTcwMDUxWhcNMjYwNzI5MTcwMDUxWjAzMTEwLwYDVQQD
EyhkZDgzOThiMWZiYWU2MDBmYWY5YTMzNWUzYjVmY2ZmYTgzOGRiZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J2KpvyfPlC5J8IhroVZVIaASe48
ssuRUF4lgAs6g1Z16JiuHjAOkcGS4zvxcpyg4HgDxz9H7WwCn1ofxhBsdTlKPsXE
spPC6W9bilJi67fnY0DDyOPDcWajc7t2aNsl8X69MzTlcbGgy688A5UhnRw21Uxh
Gws2OMjkXsZ0O8HjxkMIwljW83DdplKR8Wmx9MopZyb9l60edM+vQEjzA71cbb75
3vZrVbrM75xoOxkbNoSFBwNaiT6KgpfD7JsMROhFc1G5n52N6XiZ7ZUUV2TpfMYl
qdt/sGSlrExrEsTvldBBY9M92sboJ6HVQi7w+zhLiT5vb5zaDUnVu0vX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2DmLH7rmAPr5ozXjtfz/qDjb+uMB8GA1UdIwQY
MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt
MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl
LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDkmXhxZ
ed5ipc/yELcAGGj1BwfoGFjT/1nuKyujmXp+Xnxm5i14nrZzZsye4v9s2zD6zJ12
eh5BscGc2JqZbQgaNbwDHsoK/liOmABcpP/LHp4BCrCylOAdS/VWrXGKSSxe/tyn
fPl4EPWxLP4cS3zLHNc0mBEPA91TIhwJLOhjjG01Mqp5dXxyu+g08v2CL5XfD7WD
26X1WKRY0Xkethdbnt34adx8kO3cxupW/S4EVu5KcNUiOXWcsf1h5yEXNfN585LH
9DKVk7IWdwj1gICahfNLjysZL3P7L3R/uYcfJFqiBfF58ufZVAhionFSfQjHlkHD
MQWOB7XmDBKNuA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:26:02 2026 by rpki-client