Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: t1o22H7ovyr9QUUa55qpar+PBVio5YFZTnykrrlQjFY=
Subject key identifier: 42:A6:F6:8F:44:D1:51:0A:14:06:0F:E8:06:A9:CE:A0:2F:39:A3:48
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 01A1DF82CCCFF65B2547BBF9916C853BEE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 14:00:53 +0000
Manifest this update: Sun 15 Nov 2026 14:00:53 +0000
Manifest next update: Mon 16 Nov 2026 14:00:53 +0000
Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: dOjYzTeriQoAXUQbg4fZpvIOEHDo2j3r4WBelsv5Peg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:cc:cf:f6:5b:25:47:bb:f9:91:6c:85:3b:ee:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Nov 15 14:00:53 2026 GMT
Not After : Nov 16 14:00:53 2026 GMT
Subject: CN=42a6f68f44d1510a14060fe806a9cea02f39a348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:b2:61:ee:00:03:58:91:9a:2b:74:b3:07:
9e:af:76:5a:24:5f:6e:a7:48:44:35:76:df:f6:37:
67:9d:82:d0:4c:bd:b7:ba:cb:f7:33:0f:66:96:ef:
ce:eb:be:20:c5:08:e6:bd:d1:e4:b2:a8:27:48:a7:
ff:8e:b4:ba:ab:57:f7:af:c6:67:e5:dc:1e:a8:fe:
d8:57:e1:b6:e4:63:5b:a7:c2:43:a6:a4:e1:f8:a6:
ea:56:73:95:cc:e0:4c:0f:d5:9a:f3:7b:8a:4f:26:
44:c4:c9:15:a3:3c:0c:1b:c1:16:60:51:89:b8:0f:
9d:3a:a1:3a:9a:74:80:d4:26:c7:e6:5a:36:94:6c:
df:94:2b:39:11:76:f6:5c:68:91:6f:99:0e:e4:da:
c7:5c:51:56:06:58:f3:d7:5b:e0:72:15:c8:15:9d:
ac:3a:74:aa:74:66:b8:8e:64:57:7e:ee:c6:d0:fa:
5c:aa:bc:e4:e6:d6:e0:32:9a:f2:7c:cc:f2:de:aa:
45:90:ea:95:b8:a9:55:13:11:a3:41:f2:83:16:f1:
99:96:e5:78:6b:03:f0:41:ba:00:44:fd:35:ac:a0:
b4:73:a6:80:7a:66:0a:b3:78:0b:e5:5e:73:bf:75:
46:f3:13:bd:44:f8:bb:f3:21:80:66:59:71:d0:27:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A6:F6:8F:44:D1:51:0A:14:06:0F:E8:06:A9:CE:A0:2F:39:A3:48
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:18:58:64:fa:60:f0:5d:a2:1a:45:96:8a:55:b3:c3:de:85:
f4:08:0d:97:74:0c:69:00:a5:9e:45:25:9b:40:28:ea:a2:df:
65:2f:5e:84:c9:d8:35:d4:d3:26:91:c6:6a:38:84:8d:90:40:
b7:84:69:de:0b:75:cc:37:dd:c9:b2:db:03:c8:ad:b3:f1:94:
10:3a:5f:b3:da:90:26:7d:dc:ae:e3:80:0b:0e:12:a3:29:23:
1e:2d:0e:4e:77:0e:33:66:3e:26:c8:9b:9c:ed:f4:12:9d:5f:
4d:c5:ce:1d:72:53:8e:3c:dd:59:d2:ea:4c:15:f0:9e:1a:3b:
70:de:34:16:ba:dd:bf:b4:a3:f9:ab:0b:5a:a4:d5:d4:9e:e1:
64:85:7c:8f:1e:f9:95:20:90:aa:d5:de:c7:2a:93:b3:fd:45:
e1:19:a8:13:85:9b:b9:41:80:5a:3f:11:9c:53:cd:d0:e2:20:
62:80:90:d7:54:9a:fe:df:00:de:f9:7d:2d:44:fe:24:ec:25:
ee:2b:f9:57:45:0f:7b:d8:46:1c:cd:a3:fc:18:1b:62:42:08:
39:10:ae:4b:e1:84:57:f1:49:38:29:10:66:38:35:61:d4:44:
0e:db:f5:6c:cf:c7:23:77:29:88:a8:e4:12:47:9a:09:a4:25:
34:b6:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:15:54 2026 by rpki-client