Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: 0aYTZ2FZ6a3Wsh25rQKvxiEV1NfU1gw2gPi4IFoTQsk=
Subject key identifier: C9:42:21:0E:6F:3C:56:8F:CE:31:88:EF:53:63:7B:74:A2:08:23:6C
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 019D9A74BD1214D9A6B498B34A76148443CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 07A4
Signing time: Fri 17 Apr 2026 08:00:34 +0000
Manifest this update: Fri 17 Apr 2026 08:00:34 +0000
Manifest next update: Sat 18 Apr 2026 08:00:34 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: FloXXUC9zt7U394XGXkBlCL2DpbF9ApKm5uuGLoVkxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:bd:12:14:d9:a6:b4:98:b3:4a:76:14:84:43:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Apr 17 08:00:34 2026 GMT
Not After : Apr 18 08:00:34 2026 GMT
Subject: CN=c942210e6f3c568fce3188ef53637b74a208236c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:4f:ff:69:10:d8:7d:24:80:83:4c:45:a8:
c7:93:0f:db:c1:c3:aa:34:03:2b:32:8d:06:cc:67:
fc:0b:d0:d0:2d:f3:9e:a8:18:e1:f0:14:1e:7b:3d:
40:c2:ea:89:62:51:06:24:ca:3a:3e:55:4c:e2:d3:
c2:84:bb:32:d5:54:77:53:85:5e:55:6a:ac:32:7c:
c1:0f:c9:38:c7:1a:39:34:d5:57:67:59:75:8b:b2:
ad:96:7c:05:62:ab:ba:9c:c3:98:b1:c3:17:fe:6c:
c2:6c:3f:a3:b6:9b:2b:b0:eb:6f:fe:18:9b:47:e7:
15:96:0e:33:09:70:db:0b:8d:a9:7a:48:ad:fa:99:
73:cc:65:7e:83:46:a8:1d:ec:0f:ed:fa:a3:71:50:
1a:07:a6:4a:b3:e1:07:22:0d:62:fe:b7:e7:b0:3c:
13:44:63:ff:90:24:e0:98:35:73:c1:ef:de:97:e7:
cb:5e:2d:15:f3:0d:11:89:21:6d:ce:30:f7:93:3c:
aa:e0:ec:ce:a2:7b:ff:41:cc:51:ee:90:88:98:40:
33:41:10:ec:e4:76:eb:5e:db:b0:2a:26:c7:f9:6d:
56:f5:72:97:7e:60:67:80:00:32:4f:2f:31:2b:ae:
65:71:77:84:12:90:c5:52:8a:74:38:5e:03:d3:cb:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:42:21:0E:6F:3C:56:8F:CE:31:88:EF:53:63:7B:74:A2:08:23:6C
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a5:ea:0c:d1:8b:27:13:45:ca:f6:85:3f:e6:c1:9b:f7:61:
01:02:e3:9e:18:f0:40:89:a0:0c:3d:d5:ac:9d:fb:2e:12:a8:
a2:57:10:99:1c:30:ac:d1:2b:7e:32:b1:f4:b4:e8:3c:de:9e:
03:fa:a8:69:d8:9c:e6:ce:b9:3b:9e:c5:a1:0d:0c:ca:a7:0d:
bc:bb:2b:4f:91:4d:f1:a1:37:73:5b:25:de:1d:58:5f:fa:59:
d6:34:d2:e7:03:58:22:9d:33:c6:b7:44:b0:4a:54:63:0e:99:
9f:da:8c:c5:1d:61:2f:19:77:c0:a0:e2:0a:a7:29:dd:1c:b2:
c2:84:f0:22:c0:5a:4f:d0:e5:98:a6:e6:5d:b3:6a:e8:81:ac:
79:e0:ae:3f:e7:c1:14:d2:ac:96:5e:06:89:9d:d3:d9:bd:49:
bf:3b:76:7c:f5:f5:86:28:1f:5c:0e:fd:3a:25:94:f3:69:d1:
52:ec:5d:32:e3:69:46:98:0f:48:71:86:95:33:80:23:e7:db:
d4:6d:6c:13:2a:13:f2:9b:00:4a:75:2b:dd:68:bd:69:3b:31:
6b:0f:f9:d2:a0:d4:88:c8:ff:ba:c2:41:b8:ef:2b:68:9b:c1:
83:2a:19:fa:a4:bc:f8:0f:6a:0a:f7:9d:5c:e9:80:ac:10:43:
12:00:98:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:22 2026 by rpki-client