Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: 4ASXwE5DX61RJ6Nu79lwZ0HJxIcry3jwqLLLXK5Tjpc=
Subject key identifier: D5:1C:05:0B:23:A8:68:9B:EC:0D:17:D2:73:E0:73:3A:D6:95:2C:2F
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019D9A07109FDFBD9757C6BD92581B2D55D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 1241
Signing time: Fri 17 Apr 2026 06:00:47 +0000
Manifest this update: Fri 17 Apr 2026 06:00:47 +0000
Manifest next update: Sat 18 Apr 2026 06:00:47 +0000
Files and hashes: 1: C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa (hash: 6iHK7B3B74ju73Bu4UIi5X39juU33AzJxjN7DE2wqoc=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: K5C+dbrzjQ1vRt9LtIEbvT470PaWcfjfMY5Ebkx6UMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:10:9f:df:bd:97:57:c6:bd:92:58:1b:2d:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Apr 17 06:00:47 2026 GMT
Not After : Apr 18 06:00:47 2026 GMT
Subject: CN=d51c050b23a8689bec0d17d273e0733ad6952c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:c8:9e:c7:5c:dd:f6:97:c6:a3:d6:71:a0:
11:e5:fb:90:0c:3b:04:13:a3:2e:f6:28:eb:21:dd:
62:c5:f1:f2:90:06:b7:77:40:ff:c2:ad:11:9c:84:
02:fb:e9:1c:44:17:d6:23:cf:f1:f4:85:ce:ed:f0:
2b:90:60:28:91:01:10:1d:ec:fd:12:f2:d5:3c:b9:
02:e8:fb:3f:df:84:2d:b8:9b:ad:bd:d6:06:3e:b6:
f7:fc:5d:84:b3:82:4b:6c:a7:83:0c:42:f4:2c:ca:
4c:56:7e:aa:69:c0:08:dd:20:b3:89:65:be:77:9c:
ae:ab:c8:22:bb:56:4e:09:a7:1f:44:69:5d:52:10:
be:69:84:35:d1:cc:9d:18:a8:fa:8c:05:00:b5:f3:
7e:a8:21:67:fa:2f:99:74:5c:3c:b8:c0:c4:48:2b:
c0:c3:0e:55:b6:03:cc:f5:18:fc:42:9d:fe:9e:28:
91:71:d4:89:a1:d5:71:e0:c2:f8:ef:13:c5:30:9f:
4e:13:42:2b:6d:4c:26:55:b9:29:58:0f:3e:ac:b8:
1f:24:f0:75:28:2f:11:7a:7b:c4:19:cf:30:0b:f7:
9e:10:71:de:5c:30:5f:95:56:2a:54:1b:50:e3:fb:
47:fa:33:90:dc:23:9f:a4:00:79:ef:37:1a:fe:81:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:05:0B:23:A8:68:9B:EC:0D:17:D2:73:E0:73:3A:D6:95:2C:2F
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b3:c7:78:23:32:ba:ed:83:71:e8:8e:d7:21:94:f1:21:bb:
60:bd:22:67:c6:de:3c:57:e1:fe:73:ba:31:cc:58:1c:1f:a2:
f6:70:e0:d6:f5:b7:e7:8b:9f:11:29:0b:eb:98:79:81:89:b6:
a6:ac:b7:c6:02:c1:bf:73:2e:06:2f:07:fc:55:23:a3:95:28:
9c:9a:d3:96:f0:75:50:cb:4a:2f:a8:3b:b5:12:26:11:95:4d:
75:59:37:27:34:cd:26:03:21:57:14:74:2f:88:fd:e9:a4:2f:
e4:09:5e:6a:b5:c8:08:18:1b:a8:05:43:43:24:b1:be:40:5c:
da:96:84:a5:9a:51:5e:f4:5c:d4:e7:f7:6e:b3:e0:19:71:61:
80:76:79:fc:ae:de:7e:b0:1c:71:7f:e4:64:14:a2:c6:94:ce:
4c:69:a4:4c:d1:9b:4d:96:65:d8:d8:d6:77:5e:22:12:3a:24:
83:03:c5:c7:31:8a:31:f5:17:32:d5:fa:f5:a3:42:8c:18:78:
d4:4c:cf:e3:38:19:aa:d4:9e:fe:9e:3a:b4:b0:d5:66:b0:80:
9f:e1:73:f4:4f:5d:47:59:b3:82:f9:f2:c5:60:39:96:57:96:
71:6b:44:8b:8a:7c:63:2b:50:76:f9:f7:76:4a:92:e6:86:29:
d3:70:3b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:27 2026 by rpki-client