Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: ivg+HZdMoGkYGh6xjezY0AazKtfXbrXyGsIXZrNwwG8=
Subject key identifier: 2E:52:33:9E:B5:BC:E6:0E:54:28:9E:AF:0E:AF:23:66:21:15:66:98
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 019FA9ABD2A777ECDCD59F27B93EBD5ADA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 17:00:37 +0000
Manifest this update: Tue 28 Jul 2026 17:00:37 +0000
Manifest next update: Wed 29 Jul 2026 17:00:37 +0000
Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: /SqcxDLIBP0SjnqQ4Srp3NnkiRPIzHharmBdZoQMvqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:d2:a7:77:ec:dc:d5:9f:27:b9:3e:bd:5a:da:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Jul 28 17:00:37 2026 GMT
Not After : Jul 29 17:00:37 2026 GMT
Subject: CN=2e52339eb5bce60e54289eaf0eaf236621156698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:33:d5:b7:4d:cc:a7:b9:bf:58:5f:2a:e6:
ae:e1:b6:68:bc:33:80:52:c8:46:75:c8:f9:1d:d4:
39:8a:f6:47:de:ac:0a:8f:d4:1a:57:75:ec:5c:5a:
77:ac:98:70:6e:ca:98:c3:e5:71:a5:b0:7e:12:c0:
75:2f:28:86:d3:88:1d:cd:17:ee:ab:9b:b1:37:c5:
93:ba:53:b3:dd:b6:d5:67:25:06:d8:5c:e5:36:50:
0f:c6:25:a0:2a:3a:36:39:d7:da:97:11:4b:56:ae:
67:58:72:3c:63:ac:25:48:38:2d:a5:b5:c6:80:c9:
51:39:20:63:65:dc:59:23:c8:4d:c4:69:fe:0f:06:
e5:02:a6:a1:5b:0b:ba:50:da:19:54:d6:8b:1a:db:
57:c9:80:f8:5a:88:59:da:70:c6:24:9d:50:a9:f3:
d3:bd:3f:02:77:e7:a5:dd:69:af:c8:0b:cb:14:e1:
e2:8b:88:26:61:2e:e9:ac:12:71:23:1b:d0:2a:98:
45:9f:16:92:e9:e2:82:19:90:16:97:f8:fb:e5:8d:
45:59:ef:3b:85:b8:2b:f0:cf:97:5a:55:4f:ec:64:
a7:8a:c2:81:67:54:0f:d0:8f:70:9a:0d:f5:5f:92:
5e:83:e3:01:08:a8:5d:27:b5:50:6c:6a:9f:a5:b9:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:33:9E:B5:BC:E6:0E:54:28:9E:AF:0E:AF:23:66:21:15:66:98
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:63:5c:9d:4c:52:e1:ce:c3:fe:4f:15:8b:ef:4b:8b:c7:d4:
e3:0f:43:52:78:45:f2:3a:e0:88:02:5c:2a:ac:66:51:18:b3:
79:16:b5:8f:e3:04:1e:05:34:c6:71:da:96:9a:ba:31:af:65:
81:ef:79:bf:78:c3:20:b6:80:ba:ef:e7:5f:45:10:6f:ed:6a:
4b:90:cd:a0:cb:58:3a:7c:b8:05:16:f9:43:3a:7b:b2:ee:72:
82:ae:a9:fc:54:ad:9f:d7:1a:25:ef:e1:db:b2:3a:ef:0a:03:
8f:53:c6:c0:00:19:b3:2f:99:96:de:69:48:cd:a1:6b:c4:7b:
b1:84:d1:ea:bd:53:8f:a5:ba:8d:15:49:5d:06:52:89:de:74:
f6:fc:22:ad:fb:7c:ca:79:c2:f3:79:1b:e4:a5:91:ab:b8:b7:
89:c7:65:63:7d:fe:f3:06:87:db:de:8e:5c:43:9e:fc:c2:72:
5a:db:51:24:8c:c9:c4:24:ad:e6:8d:fe:0b:f6:56:86:70:b9:
8d:33:a8:b9:62:be:d5:0e:64:55:f2:c7:22:a9:66:a9:73:65:
07:eb:79:12:f4:72:34:c3:ae:79:5c:c6:43:7a:28:10:18:33:
83:14:ee:bd:4e:6d:1d:1c:72:ce:af:f0:a3:00:0f:39:d5:68:
aa:a2:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:53 2026 by rpki-client