Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: aWKppFfa2QIxShfuuZdnQp4XH0FEo8CsFVfeJvcLQmE=
Subject key identifier: 8D:CE:80:94:5A:A5:C6:33:84:98:FA:FA:9B:50:A3:3C:5D:44:2A:A6
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 019EC3A5AA194BA2193E70049BB16D4BCDE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 0411
Signing time: Sun 14 Jun 2026 01:01:14 +0000
Manifest this update: Sun 14 Jun 2026 01:01:14 +0000
Manifest next update: Mon 15 Jun 2026 01:01:14 +0000
Files and hashes: 1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: rBumSezQ1nND+a17ntRCt69TGs41/if6xFQb+QSrDes=)
2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:aa:19:4b:a2:19:3e:70:04:9b:b1:6d:4b:cd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Jun 14 01:01:14 2026 GMT
Not After : Jun 15 01:01:14 2026 GMT
Subject: CN=8dce80945aa5c6338498fafa9b50a33c5d442aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:df:a7:f8:5e:10:c6:64:c6:44:ac:11:71:
a9:6c:64:bc:13:01:5b:2c:ec:58:f8:81:81:29:f9:
39:d4:5c:4a:2a:b1:bd:b6:33:7c:18:c5:f7:47:93:
cc:14:af:7a:06:da:f1:b4:87:2a:50:10:be:ab:69:
44:de:a6:d8:5c:2e:50:94:9a:1c:64:de:51:ce:38:
0d:34:54:e7:7f:2a:b8:dd:cc:ae:2a:81:20:2a:e7:
3b:7f:43:c1:8d:87:b9:e5:d9:8e:62:b1:fe:31:65:
f5:dc:3a:76:d0:7f:0f:47:97:1a:b0:ca:35:03:37:
49:57:4b:2f:58:c1:05:cf:c9:53:da:b2:18:98:de:
8f:fc:76:d5:21:ce:b2:07:ae:29:4b:10:10:77:f8:
a2:05:b7:75:3c:46:79:f1:3b:86:9b:49:59:0c:a6:
fa:57:d0:91:cb:3b:12:10:f4:e7:f1:38:58:22:c1:
36:e0:6e:09:23:4b:3f:a4:f5:e2:7a:c4:75:1b:1d:
54:81:8f:5a:2f:4b:da:6b:30:06:b7:12:cb:ba:c2:
a3:33:e7:7b:2e:46:b3:bc:a9:e8:4a:a2:c5:93:09:
eb:b1:2c:41:74:20:83:e4:48:a5:20:62:70:ec:ac:
3c:f6:1a:48:f0:10:af:83:d9:3a:07:c8:2e:9d:98:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CE:80:94:5A:A5:C6:33:84:98:FA:FA:9B:50:A3:3C:5D:44:2A:A6
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:72:0b:f1:2e:22:1a:54:49:88:c2:30:63:20:46:6d:e7:49:
11:6b:93:ae:ac:88:4b:d3:cb:bb:d1:bd:bb:e5:fc:a9:0a:45:
4f:81:b9:b8:88:58:9f:8b:42:ca:6d:62:72:88:f2:7f:6b:42:
5a:1b:4a:0c:d4:2e:cf:fe:f9:2d:fa:34:c9:31:2b:43:22:fa:
ca:bc:38:6a:55:da:45:46:00:b3:8b:b7:c5:ad:bc:9a:a2:a2:
60:cd:6f:59:0d:da:cd:94:81:8c:4e:91:a2:8b:be:4e:47:4c:
71:ff:9f:56:d8:64:e1:81:8f:89:68:18:85:6e:3d:d4:9e:e0:
ed:1c:ad:ca:17:93:7c:b7:9c:2a:59:fa:e2:6e:15:ef:80:68:
91:c1:3f:0e:d7:09:0a:93:08:0b:1d:94:a3:d4:7d:ae:cb:be:
d8:01:45:35:aa:be:c5:68:ae:f3:d3:ad:e3:17:0c:49:4b:e4:
1f:89:da:63:7b:58:41:09:55:ca:0c:db:fd:ef:f5:1b:f2:63:
e5:90:d6:b0:42:98:5d:35:7c:03:1e:79:7e:8e:f1:48:e0:65:
56:ff:18:72:a3:9e:74:6e:d3:58:d1:bc:72:80:3c:3a:c7:ba:
d9:3e:d7:55:ab:85:82:11:94:e0:c2:18:8c:52:0d:6d:0f:cc:
cc:1b:15:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:45:07 2026 by rpki-client