Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: B73TqfyrlXEp/E/w80nyqsAb0zjFIG/3i89mD0PdVtA=
Subject key identifier: 23:AC:2C:10:75:8D:6B:1A:7C:48:CC:6E:13:E3:AB:AF:FA:54:7E:EC
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019EC336F41E8D9CF431F1D3ABF65F35A5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0BA7
Signing time: Sat 13 Jun 2026 23:00:18 +0000
Manifest this update: Sat 13 Jun 2026 23:00:18 +0000
Manifest next update: Sun 14 Jun 2026 23:00:18 +0000
Files and hashes: 1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: qoTZq/ACBzadOZNprlZ9l2Lx2m5iitwv/UyLvqq7bUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:36:f4:1e:8d:9c:f4:31:f1:d3:ab:f6:5f:35:a5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jun 13 23:00:18 2026 GMT
Not After : Jun 14 23:00:18 2026 GMT
Subject: CN=23ac2c10758d6b1a7c48cc6e13e3abaffa547eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:bc:7e:d9:87:3f:0e:8f:43:fe:c8:f0:63:
c0:26:57:cd:f6:3a:e5:0b:ab:ca:27:ef:66:2b:2c:
58:05:5e:fe:f9:a3:9c:37:ec:9c:aa:ea:16:5b:95:
4b:6d:ac:21:11:f1:27:ef:ff:95:04:72:66:88:a2:
75:bf:af:e6:fd:a9:f8:32:4a:ca:4a:10:ae:bb:29:
7d:34:e5:ca:9d:cd:09:98:fb:f3:a3:1a:cb:55:04:
8a:b2:5f:c7:31:8f:c4:35:80:34:b7:4c:e0:4c:8c:
b8:e7:af:60:f7:91:97:5f:be:f0:b3:ae:ce:1f:56:
8f:87:06:2d:dd:b1:f3:7f:24:d3:9f:b1:a7:6b:2a:
5e:66:e5:83:c4:8f:59:07:93:3e:82:ae:03:e3:47:
30:64:37:8d:be:47:cb:11:ec:b4:67:dd:09:16:a2:
42:45:b4:a0:e0:bf:1b:ca:ec:ac:98:d6:0d:64:f5:
fa:dc:aa:26:9b:ca:4e:e3:46:d4:82:1f:99:b3:06:
7d:19:57:2b:2b:93:ae:b4:72:c2:41:44:fc:70:47:
a6:22:e0:d6:9a:32:25:40:ca:22:f2:fc:9b:76:d6:
18:62:db:f1:d5:01:80:20:f3:8a:f4:2d:af:32:05:
d0:a3:b5:ec:9a:b3:32:a9:7e:5f:c4:e7:76:57:aa:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AC:2C:10:75:8D:6B:1A:7C:48:CC:6E:13:E3:AB:AF:FA:54:7E:EC
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c3:82:8b:58:aa:17:c7:e7:c2:7f:fc:89:ca:4a:1b:c6:f6:
46:4e:53:8e:f5:dd:12:3b:56:af:e0:36:b1:39:f6:b4:4d:84:
e1:10:29:ec:13:f4:dd:7b:d4:79:0e:0d:af:0f:86:46:5e:87:
2a:14:dd:dd:d3:9b:e5:81:9f:c9:45:bf:a4:cb:ae:07:c3:30:
4f:f6:99:c3:d1:fe:9b:28:4a:6e:a6:30:6d:e9:03:e6:b2:4f:
06:33:39:d8:7b:ad:cb:0b:d9:d3:ef:10:15:d2:17:7d:ce:4d:
bb:5b:c9:fa:11:7d:8e:3c:6e:57:20:3b:6e:de:d3:07:e1:50:
5b:02:9a:95:df:a7:34:dc:07:b1:4a:c2:df:8c:22:56:c0:d3:
7a:ab:f8:ea:0d:f6:77:69:91:47:98:42:34:40:ab:ad:57:9a:
39:6c:26:82:02:74:7a:2e:0f:ed:f3:3a:f8:00:c7:be:08:b9:
a1:03:57:ec:8d:59:7f:ba:65:18:dd:25:8a:06:21:e8:a5:f0:
4a:28:d5:21:cd:c2:b2:29:8b:fe:fe:d0:18:a7:86:61:5f:b9:
b5:6c:ac:e8:cd:32:7c:83:2d:05:d7:03:5a:6e:6f:6c:ca:f7:
7f:47:59:83:9d:d8:0a:56:58:52:53:55:49:ff:d9:db:f2:ae:
6e:f1:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:19:16 2026 by rpki-client