Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: IKZDE5AATDuvEDGJRoY+L97OyhltJQlFJHmrR/vCvI8=
Subject key identifier: 3A:A3:8C:28:B1:72:93:A7:56:08:79:C2:C9:08:5E:7D:05:2D:1D:74
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 019EBE7FCD8A1DAE4F823FC24484462DE72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1955
Signing time: Sat 13 Jun 2026 01:01:47 +0000
Manifest this update: Sat 13 Jun 2026 01:01:47 +0000
Manifest next update: Sun 14 Jun 2026 01:01:47 +0000
Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: i4OPttGX+OgSDuVuOD4UIu5qAurn9+RZi+Zz9X++7EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:cd:8a:1d:ae:4f:82:3f:c2:44:84:46:2d:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Jun 13 01:01:47 2026 GMT
Not After : Jun 14 01:01:47 2026 GMT
Subject: CN=3aa38c28b17293a7560879c2c9085e7d052d1d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:83:aa:e0:58:b5:de:9d:ad:3e:b3:79:52:
81:c7:d4:75:8b:f3:99:3d:04:ec:c9:4d:3a:f9:78:
c3:d8:44:76:69:05:8f:f0:ab:17:f3:52:eb:38:ab:
80:96:bd:b1:bd:4c:6b:18:9e:c6:a8:22:88:57:72:
26:f3:fb:a0:70:ac:09:3b:85:ee:80:f6:29:2d:26:
2d:a3:81:c2:ef:1c:f4:58:52:df:d9:6f:97:e4:ee:
e7:e5:0e:9e:e8:f7:3f:61:b4:80:a1:ce:16:73:3f:
52:e7:3c:ca:ac:7e:42:8d:4a:76:eb:c1:b5:d0:c5:
16:0a:8d:b5:28:a4:85:12:03:a0:0b:b4:3c:66:9a:
42:1d:66:98:d0:6f:07:e5:fd:76:23:e9:fd:f5:9b:
d2:f7:c3:ec:79:91:fe:aa:31:61:c5:49:69:7c:01:
12:85:26:d8:8f:16:c0:48:fb:63:c7:7e:3e:fc:e2:
b9:3e:74:28:ed:4a:ee:45:b5:25:a0:e1:4f:c3:3d:
89:52:c1:ee:88:12:b8:c2:a2:cb:53:0d:09:09:b8:
0b:39:27:2e:61:d2:ac:c0:11:1e:af:b6:16:f8:a8:
8e:3f:2f:9d:4d:94:38:f0:1e:52:11:f2:8b:32:99:
18:19:00:00:e3:0c:19:e1:6d:d4:54:aa:a6:83:db:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:8C:28:B1:72:93:A7:56:08:79:C2:C9:08:5E:7D:05:2D:1D:74
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:19:4c:6b:7d:17:be:c2:58:d8:50:54:cf:e2:7a:16:1e:55:
30:ef:a7:b1:0c:89:4e:79:d4:90:79:20:9a:58:36:ef:ca:2d:
cf:8b:66:d0:9a:c0:27:60:de:8f:51:63:87:ac:ae:a7:5f:01:
59:a2:f6:71:2f:12:66:1e:09:ec:1d:bc:ab:e2:c3:5d:58:a6:
e9:1e:4f:6d:da:dc:14:dd:76:35:d3:f2:fe:7f:db:2d:4b:77:
57:94:87:2b:b9:54:67:82:59:d0:7f:aa:9a:ec:6d:13:a9:4d:
38:03:40:26:e3:5f:37:fd:76:80:0d:60:1a:34:6d:60:8b:27:
c7:b1:ed:79:02:db:8c:4e:eb:7b:48:5a:1c:ed:45:67:b1:1e:
d4:73:e4:cb:cc:e3:b1:e8:a2:c6:23:6b:d8:7c:19:67:72:89:
ef:3d:b9:90:60:f5:38:66:7f:00:ce:30:03:93:5f:7f:52:7c:
c6:e2:f0:8d:92:1a:76:cf:9a:90:7f:2f:66:9d:33:d4:c3:a9:
17:24:48:e9:fe:40:30:d5:21:f2:6c:8e:fa:c2:f4:5a:09:5d:
36:76:9f:55:c6:46:23:56:06:6d:a5:3a:6a:8c:ec:aa:25:3e:
80:15:9a:2d:7f:5e:46:e8:b9:83:91:66:37:9b:d8:5c:12:40:
f4:c9:e5:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f82KHa5Pgj/CRIRGLecqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli
NDcwYWUwHhcNMjYwNjEzMDEwMTQ3WhcNMjYwNjE0MDEwMTQ3WjAzMTEwLwYDVQQD
EygzYWEzOGMyOGIxNzI5M2E3NTYwODc5YzJjOTA4NWU3ZDA1MmQxZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fuDquBYtd6drT6zeVKBx9R1i/OZ
PQTsyU06+XjD2ER2aQWP8KsX81LrOKuAlr2xvUxrGJ7GqCKIV3Im8/ugcKwJO4Xu
gPYpLSYto4HC7xz0WFLf2W+X5O7n5Q6e6Pc/YbSAoc4Wcz9S5zzKrH5CjUp268G1
0MUWCo21KKSFEgOgC7Q8ZppCHWaY0G8H5f12I+n99ZvS98PseZH+qjFhxUlpfAES
hSbYjxbASPtjx34+/OK5PnQo7UruRbUloOFPwz2JUsHuiBK4wqLLUw0JCbgLOScu
YdKswBEer7YW+KiOPy+dTZQ48B5SEfKLMpkYGQAA4wwZ4W3UVKqmg9ux5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqjjCixcpOnVgh5wskIXn0FLR10MB8GA1UdIwQY
MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct
YjU1MDNhMzJlZGZlLzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl
LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoBlMa30X
vsJY2FBUz+J6Fh5VMO+nsQyJTnnUkHkgmlg278otz4tm0JrAJ2Dej1Fjh6yup18B
WaL2cS8SZh4J7B28q+LDXVim6R5PbdrcFN12NdPy/n/bLUt3V5SHK7lUZ4JZ0H+q
muxtE6lNOANAJuNfN/12gA1gGjRtYIsnx7HteQLbjE7re0haHO1FZ7Ee1HPky8zj
seiixiNr2HwZZ3KJ7z25kGD1OGZ/AM4wA5Nff1J8xuLwjZIads+akH8vZp0z1MOp
FyRI6f5AMNUh8myO+sL0WgldNnafVcZGI1YGbaU6aozsqiU+gBWaLX9eRui5g5Fm
N5vYXBJA9Mnl6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:53 2026 by rpki-client