
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: dpecprujcXqcAihHCd4KgMoOf/2BGqTIXTlxNn5+vWk=
Subject key identifier: C1:22:56:2E:CA:83:0A:1C:54:40:3E:FB:BC:36:75:30:90:C4:0D:0B
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019ED5AC03E7EFCE03BC018CF9E35E59FF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 02DC
Signing time: Wed 17 Jun 2026 13:01:20 +0000
Manifest this update: Wed 17 Jun 2026 13:01:20 +0000
Manifest next update: Thu 18 Jun 2026 13:01:20 +0000
Files and hashes: 1: 2751EE97ZUX46PuQKd5VXZi8NQ4.roa (hash: ttrLfXYMhhaOogoOW1E72PyGhahP9uiFnKhfYUnBtRs=)
2: 92O93VxDU4pUVWr7dnT1Y4KqdI0.roa (hash: 27cPDTqD5XdPrxS6jGsrQqv1l0PeJCPzXimQBRdpqQ4=)
3: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: g8ypnZCo4HXOGpCRohVmjfhPSey8o9vsg+TwHft9AKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:ac:03:e7:ef:ce:03:bc:01:8c:f9:e3:5e:59:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Jun 17 13:01:20 2026 GMT
Not After : Jun 18 13:01:20 2026 GMT
Subject: CN=c122562eca830a1c54403efbbc36753090c40d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:f3:0a:3a:af:af:89:12:5c:05:96:38:11:
52:b4:2c:b5:2b:4d:14:4c:fd:5f:18:42:1d:94:7a:
e0:68:2d:af:d9:4b:d8:38:3c:6f:29:8d:6d:bc:4c:
bb:b1:ce:22:ab:51:ca:f2:54:8e:38:05:75:41:c4:
19:c7:92:d8:78:00:2b:0b:f8:55:f0:75:a0:82:88:
5a:b6:30:9d:69:b1:ff:2a:08:6d:05:6f:ac:21:9e:
27:e6:37:fb:92:eb:65:99:da:72:6d:5b:a6:52:8d:
2f:e9:ef:67:90:cc:54:6d:c3:65:7e:43:b0:26:4d:
5a:7f:0b:42:79:ed:dc:eb:f7:bd:10:4d:89:dd:40:
e5:d1:f2:f7:40:ae:6a:7c:8a:24:40:7d:1b:59:87:
96:cd:31:38:45:44:2c:92:87:8c:ca:29:7a:84:b4:
5b:b3:ce:f4:05:c3:a9:7e:5f:70:0e:22:65:8b:bd:
5b:00:72:c2:d5:6a:fb:93:9b:a7:0a:c6:62:0a:9d:
d1:ba:08:b0:4e:a6:15:56:fd:e6:03:99:2f:36:5e:
7d:c4:61:c6:2c:64:49:14:a8:d0:ec:0c:2c:da:8c:
f3:bf:31:ae:20:39:35:3e:1a:9c:4a:fa:a1:30:fc:
38:78:25:be:dc:ca:0d:1f:27:b9:aa:f3:a2:51:83:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:56:2E:CA:83:0A:1C:54:40:3E:FB:BC:36:75:30:90:C4:0D:0B
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:55:46:d6:4f:85:d6:80:7d:d3:7c:67:de:c9:54:e6:05:2e:
f1:b0:6a:7b:c3:06:42:6c:bd:c5:ac:2b:50:d5:cc:7d:68:52:
94:b0:97:d2:54:dd:c1:fa:1f:41:db:53:1c:e8:c9:6e:48:85:
9e:6d:46:cf:63:2d:f3:f3:76:8f:e8:ee:a3:fb:27:fd:59:d9:
22:bc:ae:82:fe:f2:ea:61:cf:64:57:45:7d:bd:92:90:75:20:
93:51:03:69:a6:a1:ed:36:fd:e2:4f:84:19:23:87:f4:3b:e7:
68:16:7a:b5:aa:5c:05:29:c7:e8:40:bf:e3:16:dd:98:85:9d:
c7:90:1b:f5:4f:1a:9f:e1:dc:54:3b:f1:e1:37:ee:41:52:8d:
ae:96:60:b0:c2:d1:ba:d2:ae:72:a1:f3:34:c0:6f:25:b1:de:
35:16:28:91:33:4f:88:2c:81:34:cf:fb:dd:cc:bd:47:26:b4:
bd:60:6d:16:92:86:f0:fe:48:ef:2d:1f:bc:d4:30:cc:b0:8b:
36:5c:93:e8:aa:97:9f:ef:e4:e7:cd:0a:65:f2:51:83:da:81:
f1:9f:dc:7e:1e:72:49:f9:a3:24:57:8b:37:f4:10:b8:96:15:
05:15:e4:e4:ca:46:80:2d:72:4a:2c:a3:34:5e:17:c1:ea:0a:
e8:df:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 17:17:33 2026 by rpki-client