Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: sz8mEBSXSLA6CpFmkc+HwCpuH+avZrOVE+MHz4N7zLk=
Subject key identifier: CE:B0:02:58:65:87:FE:AE:DE:48:3F:5D:6E:D4:48:7F:0A:2F:10:C0
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019EBEEC5A9FC9FE129D6FDF6EF840A74361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0DE6
Signing time: Sat 13 Jun 2026 03:00:21 +0000
Manifest this update: Sat 13 Jun 2026 03:00:21 +0000
Manifest next update: Sun 14 Jun 2026 03:00:21 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: ZUtAU7vFdZda/9PhgQMhNHwzzppQE/21XUQ3JN0kNrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:5a:9f:c9:fe:12:9d:6f:df:6e:f8:40:a7:43:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jun 13 03:00:21 2026 GMT
Not After : Jun 14 03:00:21 2026 GMT
Subject: CN=ceb002586587feaede483f5d6ed4487f0a2f10c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:f7:3c:74:2f:7e:a5:91:2b:d9:3d:13:cb:
bb:fb:08:60:8a:dc:3f:38:3a:d2:bd:e8:68:a0:99:
2b:65:34:b5:57:31:a8:56:ce:e1:7e:76:77:e9:e6:
34:fb:ed:78:30:f1:38:8b:9a:d5:c2:61:24:12:d4:
d2:e8:03:2b:27:67:bb:3e:bc:fc:2f:98:87:64:cd:
3e:cf:77:27:a9:46:98:46:ab:04:18:66:47:0d:52:
70:cc:bc:1e:b9:b1:ea:f1:a4:32:aa:09:a7:77:03:
82:06:d7:0c:72:bc:f6:e9:db:5e:f3:96:14:8d:aa:
4e:79:05:e9:3c:41:f6:7c:d6:6a:e8:fc:e1:f6:15:
58:57:4e:b8:4e:00:f5:1c:e2:c3:90:23:cc:a7:fc:
aa:ef:ce:95:c9:9c:e0:a7:d7:57:33:0a:57:4d:33:
5c:65:64:a9:13:55:ef:c0:de:1f:63:a9:8b:ea:db:
20:9a:a5:b5:e3:08:32:44:86:ce:a5:92:3d:24:46:
ab:a1:97:b0:30:6f:4c:b1:da:84:16:32:ae:ba:72:
af:c3:9c:cd:12:3a:83:6f:05:e3:b0:01:bc:30:6b:
d8:12:08:43:6d:de:a0:27:33:32:be:69:af:bb:c8:
c6:21:6b:de:59:1f:47:49:0a:6f:67:e1:15:7d:fa:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:02:58:65:87:FE:AE:DE:48:3F:5D:6E:D4:48:7F:0A:2F:10:C0
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f6:5d:9c:9e:44:ed:ce:79:4f:f2:44:f1:7b:a4:dd:d0:48:
e5:69:53:bf:21:d2:eb:0f:2f:03:07:47:af:fe:4e:65:16:3c:
11:81:6f:69:f1:59:93:ec:eb:ae:31:fa:e7:2b:65:89:6f:43:
50:49:37:b2:58:17:b3:6b:6b:a2:8e:5f:74:b1:c8:5e:7a:dc:
64:fe:db:43:65:39:81:08:01:48:fa:b5:49:9d:fd:51:30:79:
41:ef:a6:ce:28:a8:22:d9:9f:93:64:54:f2:12:08:6d:ca:13:
a5:99:ca:b6:65:cb:0b:26:e1:e1:e6:6d:df:6a:52:95:03:0e:
92:10:d3:e6:41:58:cc:e9:0f:14:49:2d:ef:93:bb:53:ec:16:
59:4b:3d:e8:5b:26:89:64:2d:82:33:cf:b1:53:04:30:63:0a:
d1:2e:88:60:e6:2c:06:01:02:e2:9e:c4:a4:43:94:d7:12:96:
28:5d:d5:ed:f9:de:a8:c7:4a:b1:d8:89:06:b3:a2:4f:ca:3b:
c6:32:c4:23:20:d5:1d:05:36:32:1c:ed:0c:1a:36:39:e8:e6:
4d:e7:4b:6f:e3:90:2b:c6:c9:22:bb:28:09:ee:7a:5a:0c:0c:
26:9b:7f:c6:49:24:76:bf:9c:ad:f6:33:11:1e:2d:27:5e:c3:
46:5e:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:29 2026 by rpki-client