Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: gRnU+p+daOW5pTofFQU5Zpfv/YmeeVkBddoNo7JhZsE=
Subject key identifier: AE:3C:DB:10:55:EF:AB:6E:0B:71:36:61:4D:B5:6F:D4:AA:91:AA:BC
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019CACEBBB75DD99374E4B7B83DFAC794B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 0729
Signing time: Mon 02 Mar 2026 05:00:55 +0000
Manifest this update: Mon 02 Mar 2026 05:00:55 +0000
Manifest next update: Tue 03 Mar 2026 05:00:55 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: LTaO26SV5Uh9oo2DEKktDP6KiQzILLkMykJqbeoRZz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:bb:75:dd:99:37:4e:4b:7b:83:df:ac:79:4b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Mar 2 05:00:55 2026 GMT
Not After : Mar 3 05:00:55 2026 GMT
Subject: CN=ae3cdb1055efab6e0b7136614db56fd4aa91aabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1d:75:91:3c:3c:c3:70:cd:8a:5f:a3:e0:aa:
9f:4f:35:ce:a5:66:cf:d7:04:86:7f:7e:60:67:fa:
f0:69:a3:bb:78:a8:a5:30:47:e4:40:4c:dc:9e:9c:
5a:4d:7c:04:cf:bb:c4:2e:2c:cc:f0:66:6d:64:a0:
2e:e5:17:71:64:88:53:e7:d1:ed:0c:79:ee:e4:51:
9a:2b:34:1a:47:c8:af:0c:88:36:10:6d:80:8d:20:
91:38:1f:f3:b8:9f:9f:45:26:13:fc:59:fb:ed:3f:
a9:f9:be:2d:fb:51:a8:67:c7:cf:d7:97:1b:0c:a3:
22:4a:36:2a:90:77:f2:f8:86:8e:c1:e0:05:b4:4f:
29:bf:16:53:3e:a1:20:4f:38:f9:a9:68:11:c2:77:
e5:2b:f6:92:fa:af:17:55:e8:9f:a0:2a:0f:53:f4:
82:10:20:cc:2c:20:de:e4:af:4e:ef:94:d8:c7:cf:
c5:24:77:2f:be:00:3d:93:c5:6e:df:7c:0a:f7:02:
d5:c6:7f:ae:25:3f:54:35:68:40:5e:67:aa:fe:e1:
87:13:6c:22:c3:a3:44:80:97:58:e3:6d:e2:d7:86:
c1:67:a4:7d:91:56:c7:a2:27:f9:55:e7:61:f1:75:
01:73:62:f8:3a:fc:6b:a1:0b:7f:f2:62:47:b7:11:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:DB:10:55:EF:AB:6E:0B:71:36:61:4D:B5:6F:D4:AA:91:AA:BC
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d4:fb:86:01:64:96:9b:f6:61:cd:39:a0:26:ec:e0:cb:7d:
0e:d7:c7:f4:51:08:1a:1b:95:85:b8:82:b1:0f:c4:ce:78:a0:
86:30:1e:58:22:89:12:0c:b2:ad:8f:0b:82:dd:ab:56:38:ee:
a3:8d:90:49:e1:0f:36:c5:af:64:ee:9d:2d:8b:ef:ca:79:9d:
3a:e3:60:cc:54:15:77:d8:0e:8e:cf:fd:7a:96:4f:7a:af:f0:
eb:3d:39:18:2c:6e:00:7a:cb:ab:86:e9:5a:eb:7f:7c:28:6a:
24:2c:03:b5:52:bc:58:62:60:39:da:7f:ae:69:d5:6c:b4:89:
32:c3:59:d5:61:a2:a2:01:0a:36:f5:0d:96:b7:7f:27:a9:e8:
64:3e:79:99:29:c8:7b:66:47:59:84:a0:0b:68:99:d6:b6:3c:
ac:f5:02:ba:09:fa:35:6d:f9:11:fa:cd:8f:fc:e0:9e:6a:27:
5b:2a:99:d9:e4:1f:9b:ab:c4:93:6f:5f:ee:1f:0b:22:cd:e3:
5a:cb:79:38:f0:f0:f4:7e:a4:f4:6b:9d:67:61:96:2a:34:19:
70:27:ce:70:d5:b6:82:27:2e:66:63:99:29:6a:dd:00:10:17:
29:1b:6c:30:cb:b6:55:f1:b5:81:c1:59:8a:58:ea:5b:e0:59:
88:f4:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:34 2026 by rpki-client