Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: YgO7u0Q2hTtThmLFpzVBslrpYeKV0WS720Y0GfK8IQs=
Subject key identifier: 92:4B:C9:42:F7:FD:49:32:4D:9C:53:C2:FC:D1:65:32:3F:56:DA:0D
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019EC25BA9628179EB05E19DD2A9BEA6AF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 0445
Signing time: Sat 13 Jun 2026 19:00:47 +0000
Manifest this update: Sat 13 Jun 2026 19:00:47 +0000
Manifest next update: Sun 14 Jun 2026 19:00:47 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: 6ov5St2Y48mGGbDpjVR1ErW0HRAtkEMRFDh2YYVaAuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:a9:62:81:79:eb:05:e1:9d:d2:a9:be:a6:af:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Jun 13 19:00:47 2026 GMT
Not After : Jun 14 19:00:47 2026 GMT
Subject: CN=924bc942f7fd49324d9c53c2fcd165323f56da0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:e9:8e:44:53:4b:e8:04:3b:d0:6e:fb:c7:
90:9c:83:35:ed:31:85:23:38:2d:bb:03:b2:4f:69:
75:6c:28:9a:41:e7:e4:15:55:e1:84:ce:5b:9b:cf:
92:b5:83:e7:3f:6e:42:6c:d9:8d:75:f9:3c:ca:03:
9d:e2:14:6c:2d:74:ed:16:23:df:3d:49:db:d4:cb:
b6:3c:d4:57:64:10:4f:1a:e7:57:f6:8e:6e:42:7c:
f2:19:c7:0d:97:54:f0:5a:b3:76:43:34:86:4e:1b:
dc:ad:17:87:20:dd:37:e4:60:03:18:39:ba:52:4a:
b5:9e:d3:4d:65:3d:9a:e5:ae:e2:f4:10:d2:49:52:
a8:f2:3a:08:15:d8:46:ca:a4:93:6a:04:10:f7:10:
2d:22:d6:c8:5c:83:7c:f1:ff:11:88:5b:00:49:ba:
e0:0c:98:ee:60:f2:ac:08:aa:06:ae:23:7c:2e:b2:
30:09:b1:53:bb:61:bf:9d:ac:d2:5d:e0:cf:a2:4c:
f8:d3:9d:47:e0:82:37:e7:87:60:94:c3:03:26:a1:
02:28:27:dc:e4:20:ea:a9:3c:a3:cb:f8:e2:b8:bc:
04:dc:5a:a3:c5:f4:b3:8e:37:a2:65:ec:9f:74:1e:
07:b7:69:39:fa:d2:03:be:b3:56:99:09:3a:b5:2b:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:C9:42:F7:FD:49:32:4D:9C:53:C2:FC:D1:65:32:3F:56:DA:0D
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7b:8a:74:88:55:aa:84:9e:66:38:f5:30:fc:e6:43:c2:3e:
24:7a:86:59:be:5a:3e:a2:c1:04:57:10:a7:22:ec:2a:58:8e:
47:ac:02:2d:b9:5d:d1:f7:2e:8c:fa:ea:71:ad:6f:0b:2a:97:
85:e3:ae:e6:39:03:77:db:92:63:fb:40:dd:0b:56:dd:6c:f1:
ed:0c:c3:68:0c:31:cc:fd:d5:e3:b8:0c:3e:27:a3:6e:a9:c4:
32:95:b1:2a:2c:d1:4e:d8:60:32:40:e9:5c:4f:dc:3d:e0:51:
07:e6:bc:3e:59:08:90:1b:26:74:4b:da:17:db:62:07:87:31:
b9:49:b2:da:0b:ad:9d:81:ab:67:91:5b:74:3a:e9:9f:90:de:
2d:bf:24:07:77:4f:e5:7b:30:9e:7e:00:77:5d:91:0a:32:11:
71:d8:69:ed:1c:64:5f:d5:7c:a3:5b:d9:9f:99:89:1d:f5:56:
4b:81:b3:6d:4b:91:a9:8f:83:46:9b:c6:1e:c6:24:0e:e9:76:
b5:69:f5:7f:58:f2:4c:de:5d:b9:3d:b3:e9:4e:50:89:9b:44:
ab:46:d7:9e:d6:4b:0b:d1:f0:96:6c:e7:8f:9e:8e:ba:b6:bc:
a9:e1:e3:4b:2e:0c:c4:29:f9:93:a6:5f:91:4e:da:94:86:62:
25:e5:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:29 2026 by rpki-client