Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: DHwf/vuRl+GQ8t85jxu8dexUj+ER5/GscLGEj+N3cpU=
Subject key identifier: A6:A9:04:94:C4:F8:97:95:D2:A0:4E:81:11:C2:DA:5B:7F:E7:BB:8B
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019EC1EE29D78EEFBEDC82F4B20AC97F6B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0AF2
Signing time: Sat 13 Jun 2026 17:01:11 +0000
Manifest this update: Sat 13 Jun 2026 17:01:11 +0000
Manifest next update: Sun 14 Jun 2026 17:01:11 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: QJhRarhud/tVJDGjLL7wctTKG9CRjkjEe/3roeJ6ZmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:29:d7:8e:ef:be:dc:82:f4:b2:0a:c9:7f:6b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jun 13 17:01:11 2026 GMT
Not After : Jun 14 17:01:11 2026 GMT
Subject: CN=a6a90494c4f89795d2a04e8111c2da5b7fe7bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:81:e3:dc:34:ad:c2:44:3b:c6:6b:27:c0:
8f:07:ea:3d:60:d1:e7:81:a6:a8:c4:23:3c:83:ce:
30:9d:f2:81:e0:42:ee:24:81:8e:3a:fd:01:b2:a2:
62:9c:68:b0:28:96:cd:89:80:ea:bb:b7:8b:e7:00:
07:c5:21:51:14:c1:f3:db:56:b2:ff:33:25:8c:49:
04:52:f4:39:ad:4d:ee:cf:57:5a:8e:bf:f9:8c:e7:
a3:0f:b0:be:6e:0d:9a:5c:c2:69:b2:3c:5d:53:be:
64:c8:03:ad:cf:f5:d5:c5:16:f0:66:ad:44:00:00:
6f:1c:2a:69:19:4d:df:fc:6b:09:b9:ef:94:ca:c0:
7e:16:1e:7d:0f:17:f4:a3:f2:75:ea:24:0f:d9:1e:
64:3c:ef:3b:89:6a:8a:8d:71:db:93:bc:e7:5b:ba:
5b:86:92:51:80:da:8f:36:c4:34:55:8d:24:bd:e1:
d2:c6:d2:50:12:c6:ac:bb:52:57:34:eb:f1:1a:34:
0e:1e:81:aa:8c:d8:55:9c:a6:53:9c:a0:ba:8d:e8:
39:cf:a4:b9:b1:72:06:1f:6b:a0:ee:32:b8:4a:ad:
4a:54:ba:aa:76:9d:8a:94:59:75:e3:7b:89:0b:b1:
bc:5b:55:9c:de:e0:1f:06:0a:a8:3a:b8:1e:92:68:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:04:94:C4:F8:97:95:D2:A0:4E:81:11:C2:DA:5B:7F:E7:BB:8B
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bd:aa:27:30:b5:d0:0e:6f:cf:30:f9:55:71:fe:69:0f:cb:
94:b3:87:64:1d:24:59:0a:92:dd:ec:8e:fb:a4:86:a0:61:65:
55:ce:7e:45:5f:4b:15:31:de:d7:1c:00:00:24:33:96:46:c2:
0f:ab:66:53:56:4b:09:fe:95:2d:c9:a9:4c:dd:84:e9:fe:20:
98:b3:4b:fe:f1:5a:d9:9f:91:c1:96:6b:cf:e1:a6:e1:fa:08:
47:29:a4:40:a1:32:19:9b:06:ad:fe:bf:d0:f6:d5:5b:93:74:
9c:38:ba:c3:16:fe:7e:60:0d:05:39:68:e9:2b:fd:61:92:ee:
01:ac:8c:01:72:41:37:3e:d3:45:2d:8c:22:81:4e:a5:15:b1:
53:ed:85:ed:80:84:96:d8:99:ff:82:02:b0:4f:2c:f3:78:97:
71:03:f9:ad:0e:eb:71:db:9b:5f:80:c5:19:c8:c0:66:50:32:
fa:26:21:e9:f6:33:32:f2:cc:9e:ad:fc:f4:5f:b4:4b:39:f1:
06:ff:dd:92:6f:56:93:35:dd:15:99:62:4f:57:40:c4:63:4f:
b1:0b:1e:9e:2e:1d:db:87:e0:7f:4e:52:f4:8f:89:9e:c3:85:
28:1c:02:91:5d:34:ac:e7:c3:2e:30:69:8f:2e:6e:92:ce:be:
a4:e1:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:38 2026 by rpki-client