Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: b9w7m+GtVWC/Rp6XIAMDDqDKiSTYYywtbf9U+onao8A=
Subject key identifier: D8:12:2E:02:14:EA:ED:29:BA:DB:61:D0:2A:63:84:55:97:6A:3B:13
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 019EC1B6BEBF0D96B32D204DE228D1C20010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 16:00:39 +0000
Manifest this update: Sat 13 Jun 2026 16:00:39 +0000
Manifest next update: Sun 14 Jun 2026 16:00:39 +0000
Files and hashes: 1: JH9XT1NUV14_SKsiiCKlHziQ9DM.roa (hash: 04vIJ1yQ8bNTRGDpE43oQ18qFJ2VyqPCHwJQW+bmQgI=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: d1IZzXJ+73NBNKGAbmI0CaixyqkVq3XqqWC2lNzIFX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:be:bf:0d:96:b3:2d:20:4d:e2:28:d1:c2:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Jun 13 16:00:39 2026 GMT
Not After : Jun 14 16:00:39 2026 GMT
Subject: CN=d8122e0214eaed29badb61d02a638455976a3b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:2e:07:13:cb:31:a6:e2:94:62:83:49:89:
d1:c5:03:5f:ad:36:ce:78:02:37:28:7d:ce:15:e6:
a8:36:c6:22:14:8a:15:ca:dc:11:7e:27:9a:34:f1:
1d:93:14:f4:d2:5f:8d:a8:de:85:46:f4:3a:17:93:
2a:c2:20:0f:c6:50:62:10:03:6a:36:87:44:8a:80:
06:4d:cc:00:13:33:e1:44:49:28:a1:d9:fc:63:de:
9f:3f:15:9f:bc:7d:fb:f1:e8:cc:32:d4:6a:4e:56:
99:aa:64:bf:86:0b:0b:45:9c:93:21:1f:94:22:8e:
69:3a:d1:d5:af:4d:fb:e0:23:a6:3a:c4:ee:6b:80:
54:04:81:ea:a3:00:33:1b:a0:49:f4:22:f1:5b:b0:
c6:60:3e:d6:05:fd:ba:ed:c6:83:8b:11:a7:83:37:
2b:8c:9f:85:1a:63:59:8a:eb:ab:05:26:1b:6c:56:
ec:8a:c0:4e:b0:4e:99:57:c1:f8:77:7b:b7:4d:c8:
24:11:41:83:87:b7:e0:6a:f5:e3:a7:11:d3:23:90:
ff:5e:bd:a6:cc:1d:a2:4e:7a:b0:c5:ad:84:ea:44:
bc:b6:e8:f0:9a:10:f2:fb:c7:c3:60:51:53:4b:7a:
42:c7:9a:30:9c:c8:45:a5:ba:d4:11:f4:4d:5a:d4:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:2E:02:14:EA:ED:29:BA:DB:61:D0:2A:63:84:55:97:6A:3B:13
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:30:a3:b7:64:d9:c3:94:8b:60:7e:a0:ab:8f:64:1d:1b:
78:22:ad:82:48:d4:ee:12:a6:de:55:b5:b8:c9:af:e7:6a:55:
be:0b:39:0b:41:39:7f:5a:3a:e8:0f:0a:fc:22:1d:7d:a4:29:
33:d0:af:de:fd:2c:1a:18:25:76:e4:4e:c9:24:65:c1:a2:0b:
24:2a:24:ad:b9:ee:7d:35:80:51:94:e3:a3:ad:5d:f6:89:4e:
fa:5a:95:1d:f1:50:37:e8:07:10:3a:86:20:9b:c9:5e:9b:f7:
9f:57:bc:df:9f:d9:37:78:28:07:f0:9f:64:e5:53:b4:07:17:
ff:a6:25:12:f9:37:5a:41:f4:fb:0f:9c:42:6e:75:77:7b:a9:
62:93:46:b5:2b:ae:bb:26:d9:fc:9b:fb:07:17:e9:43:1f:c3:
44:3f:f2:c2:ea:9b:31:69:25:ed:cb:eb:a3:44:ce:75:93:0c:
d7:4a:43:57:5e:2c:37:6d:1e:e2:98:a0:0c:df:fa:4c:ef:1a:
e2:ed:39:9d:f1:90:56:10:c3:d0:bb:98:60:8e:32:ff:01:25:
8f:9c:bc:8d:9f:a2:b1:54:fb:a7:81:4a:2f:77:f0:9b:66:8c:
47:ce:45:3c:12:66:7d:c3:d1:8b:a9:86:00:54:ac:67:1d:11:
9e:6e:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:10 2026 by rpki-client