Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: lDthrgDcBL30kr14/9quDO4umYJoFYu9IwWgOD+O4eU=
Subject key identifier: 6A:1A:80:49:89:9E:8E:CE:52:92:7D:A3:A2:10:6C:CC:4F:90:15:0D
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019EC1EDEB37502A7420B46EE6FED85AF720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 083D
Signing time: Sat 13 Jun 2026 17:00:55 +0000
Manifest this update: Sat 13 Jun 2026 17:00:55 +0000
Manifest next update: Sun 14 Jun 2026 17:00:55 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: 448oO057Llv4YxMVLz/MvTNfF2Je/OHoO1mOQ2zVmY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:eb:37:50:2a:74:20:b4:6e:e6:fe:d8:5a:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jun 13 17:00:55 2026 GMT
Not After : Jun 14 17:00:55 2026 GMT
Subject: CN=6a1a8049899e8ece52927da3a2106ccc4f90150d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:98:00:6e:f3:ef:93:8d:d0:84:6a:10:2e:
94:19:7a:79:a8:80:41:79:c3:53:c0:71:b1:08:c3:
ad:0b:c3:0f:c6:08:5b:9d:02:98:bb:7b:c1:23:46:
de:1f:5a:6d:8d:4a:16:58:42:e9:51:78:fd:32:b2:
b2:61:41:38:ea:72:ad:73:6d:52:09:63:8a:9a:3f:
e0:6b:b9:9c:91:8d:62:83:29:2b:e2:ed:5f:d5:f6:
03:f2:c2:01:74:68:d8:f0:2f:4b:f5:7f:5f:2e:38:
35:92:01:c7:2c:ba:2d:de:fb:51:15:68:9f:9c:bf:
36:fc:cc:e8:87:5f:ce:0a:a4:0a:de:c1:ba:bd:33:
30:c5:8b:b6:56:98:f7:d2:59:97:66:47:e6:9a:35:
df:33:71:76:6b:7c:1b:4d:91:1a:00:1e:80:50:64:
d5:93:3e:48:50:d2:a4:8c:c3:60:06:1b:03:c5:fe:
10:27:0c:06:1a:2e:4a:09:a6:e5:2c:7b:e2:05:7f:
82:03:a6:08:ff:59:bb:57:a4:cf:16:2c:00:57:f2:
6c:dc:bc:fb:2b:82:a4:1b:2c:32:c8:87:1f:aa:03:
3e:df:b9:4d:5f:8e:12:4f:df:e7:9e:da:e7:f8:d9:
f8:be:ac:7a:d7:ef:45:dc:ec:46:2a:7b:d4:9c:34:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1A:80:49:89:9E:8E:CE:52:92:7D:A3:A2:10:6C:CC:4F:90:15:0D
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d0:08:ec:b6:08:69:35:b6:7a:87:fa:42:20:c0:24:5a:f4:
64:34:01:f7:19:1f:2d:c0:31:f7:7d:9e:7a:ee:ba:1d:6a:08:
c7:f1:37:c3:43:99:92:eb:fc:8b:fb:1d:e6:7c:97:61:1e:7c:
c9:c5:d0:97:35:54:02:ff:21:32:5e:cc:93:17:f3:4e:c9:12:
de:1b:1d:97:fa:ba:51:96:2a:bd:9a:97:bf:94:84:fe:8f:4a:
36:00:2b:4e:e7:ff:d4:3f:bc:6e:f9:d0:19:8e:8f:91:4f:30:
1f:a5:b8:b6:d4:4b:0d:d2:b4:2c:ae:46:dc:6f:09:a8:78:7b:
58:10:2a:e8:b2:cc:ea:c4:24:90:f0:09:f3:e6:55:12:76:9a:
a1:8c:ba:30:98:e3:d7:4f:4e:f2:86:b8:ee:3c:ff:64:82:e7:
cd:eb:35:71:51:a8:fc:cf:48:31:09:2f:94:24:e7:8f:45:9b:
28:bb:5c:20:48:cb:ff:cc:47:62:0a:1e:ac:96:29:bf:d0:0d:
cb:20:83:3b:ae:e8:fe:d2:ed:56:bd:9a:2c:10:99:06:85:58:
61:0a:9a:8e:ab:e7:84:45:1c:6e:37:7c:6f:71:be:47:66:44:
c7:e7:e7:26:ab:d5:3c:16:a3:50:8e:3c:0f:61:bb:1e:3e:a7:
34:67:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:31:46 2026 by rpki-client