Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json)
Hash identifier: CkSk3h3sBuFdJTgtklmF+N+BgrDDCOemy6L6VgSSbtU=
Subject key identifier: 9A:2B:95:7F:5E:71:CE:C0:78:D6:97:15:F1:0B:CC:C4:78:A1:F9:49
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 01A0C77D1C0F7F6DF25AFA7382D296A08BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
Manifest number: 0949
Signing time: Tue 22 Sep 2026 05:01:00 +0000
Manifest this update: Tue 22 Sep 2026 05:01:00 +0000
Manifest next update: Wed 23 Sep 2026 05:01:00 +0000
Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=)
2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=)
3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: tvX2p7vplqhoy2X3rl1TtIph/IWufwzMxTMa8Vl9Y0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:1c:0f:7f:6d:f2:5a:fa:73:82:d2:96:a0:8b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Sep 22 05:01:00 2026 GMT
Not After : Sep 23 05:01:00 2026 GMT
Subject: CN=9a2b957f5e71cec078d69715f10bccc478a1f949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:b9:1f:8a:2d:e9:43:7d:81:15:cc:b6:28:
64:ec:d9:2b:f6:9e:09:0c:80:e6:fb:35:9e:75:33:
60:09:b3:29:a7:00:93:2c:fd:35:1c:37:57:6f:32:
85:1b:b6:ca:26:1d:99:26:39:09:84:43:61:84:9d:
5e:bd:be:99:d2:74:ac:44:d6:49:b9:68:ef:c7:05:
61:a1:19:dc:e4:8f:93:fe:b0:1b:f2:e5:34:e2:5b:
98:ca:e7:88:2b:ea:5c:69:80:0f:22:db:48:92:cb:
94:ab:8b:a7:f5:17:39:35:21:63:2a:65:e9:11:da:
f9:ae:57:4b:23:6a:18:d4:e0:b8:ac:69:72:ea:ed:
45:22:65:9f:5f:f7:a4:0d:d5:93:52:4d:3b:f8:29:
6f:1c:47:38:97:8c:0f:53:89:10:d6:ea:5b:39:e5:
d6:78:d5:95:7a:db:67:f3:42:4d:11:da:fb:a9:69:
09:cf:e2:a8:5b:bf:df:df:b4:83:8a:ee:7b:5a:63:
4e:e0:69:12:d2:3f:cf:5e:1f:4a:66:9d:7a:e8:c9:
d4:b8:0d:0e:5e:47:e1:f0:ce:f8:86:9d:c5:bd:7c:
7d:c5:14:ed:cf:c5:78:3c:6d:70:07:68:4c:11:35:
23:c9:2d:57:c4:ad:75:3d:6b:3b:a1:20:43:d1:5b:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:95:7F:5E:71:CE:C0:78:D6:97:15:F1:0B:CC:C4:78:A1:F9:49
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:12:7d:58:c5:45:65:ad:fa:7a:ec:9b:99:e2:ba:3f:6d:c3:
18:a0:ef:c5:ae:16:dd:72:52:d6:1d:f6:c6:1c:a1:38:4d:cf:
79:e8:e9:ff:cc:4d:be:92:cd:31:be:cf:37:85:1a:47:bf:55:
70:fc:9c:1e:cf:1d:3e:e7:66:cf:d8:67:59:58:92:c3:98:b4:
d7:f8:91:e6:dd:d0:95:80:d9:99:27:4e:11:0e:d4:91:86:74:
3e:ae:84:47:d9:80:bd:31:8f:9a:9d:ba:39:fa:88:97:9c:81:
5f:1b:a8:a0:64:f7:c0:79:bd:2d:87:3e:79:88:05:bb:dc:86:
d2:6f:21:cf:54:44:df:a8:f5:1d:d3:0f:c9:cb:0e:7d:cf:6a:
49:47:cc:ec:b9:cb:1d:e9:03:d1:69:a4:4d:c3:f8:50:58:cc:
8f:d5:d9:98:fe:38:37:f2:19:a5:e5:80:09:8f:4b:bc:fa:ff:
a5:34:3e:17:34:2b:11:0a:ff:a7:46:4f:69:e6:0f:29:d6:ab:
ce:27:c0:b3:fa:17:f2:7e:a2:3a:65:ad:02:b2:17:b5:84:45:
18:0c:d5:ce:b5:56:93:9e:52:17:09:32:ad:a2:ed:33:be:c6:
4b:6a:02:95:0f:c2:1e:43:7e:dc:86:32:9e:36:2e:36:ef:9c:
d5:dd:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:44:45 2026 by rpki-client