Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json)
Hash identifier: BKGLTg6PSTm3a8Fr7wy4g2cym0DGBaqH+gaYN/zKUhc=
Subject key identifier: DA:F2:20:3F:27:0B:32:B5:F9:90:32:3B:F3:8C:AF:06:60:CD:05:63
Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Certificate serial: 019DA52F82BDF4C3BCCE3DE23884D7191430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
Manifest number: 086B
Signing time: Sun 19 Apr 2026 10:00:47 +0000
Manifest this update: Sun 19 Apr 2026 10:00:47 +0000
Manifest next update: Mon 20 Apr 2026 10:00:47 +0000
Files and hashes: 1: D6FT3UwTdLs9gC1WiQiwIa_7mEs.roa (hash: Jy9CPzSOcDSc04gWq+va5Hkkp73DOKaunLfx7olDL2k=)
2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: ION6dEXhRkXn3r3WF1NWz0xhK9rah74Xu2FiE8F6Oew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:82:bd:f4:c3:bc:ce:3d:e2:38:84:d7:19:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Validity
Not Before: Apr 19 10:00:47 2026 GMT
Not After : Apr 20 10:00:47 2026 GMT
Subject: CN=daf2203f270b32b5f990323bf38caf0660cd0563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:fb:5e:6f:bc:fb:92:34:03:8d:8a:70:af:
3a:a3:58:71:fa:af:f4:ea:1b:06:b2:f6:51:ea:80:
bc:83:fc:de:11:3e:93:3e:17:c8:4c:de:93:ca:b4:
db:ec:62:1d:b9:3c:38:ef:9f:b5:a9:a5:e0:bf:e8:
0b:24:b3:5b:97:e6:ab:e9:a3:c6:95:66:e2:f3:d1:
0b:9d:cb:35:91:ba:93:eb:f1:e0:24:2c:a3:aa:dd:
60:6d:0b:b0:de:d7:89:91:c6:6a:9e:c2:10:83:40:
d6:95:84:03:2a:9a:a6:5f:f1:7e:fe:fe:23:02:fd:
1f:16:71:09:7e:9d:68:04:c8:b0:86:10:e0:1f:ed:
dd:30:06:ea:9b:8d:d8:9b:85:a0:2b:73:46:c4:c2:
1e:ac:12:d2:62:5c:06:73:d4:ea:cb:4a:a1:4d:75:
22:31:48:b4:6a:46:e3:d6:ce:5c:e0:49:a2:71:63:
29:6e:8b:17:d8:3e:ca:be:28:9c:99:0a:04:8b:5b:
ef:16:ab:48:05:c8:7f:61:95:f2:98:a6:c1:a7:ab:
34:85:a4:e4:8f:eb:49:75:a1:ed:c5:c3:ec:7d:d9:
b3:66:b8:db:07:90:29:72:ae:5b:20:37:64:a4:db:
8d:23:27:1f:1d:5e:35:f7:8a:bf:0d:63:73:9d:2a:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:20:3F:27:0B:32:B5:F9:90:32:3B:F3:8C:AF:06:60:CD:05:63
X509v3 Authority Key Identifier:
keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:a6:9a:f7:69:47:7c:80:30:21:c6:ec:76:cf:f6:0b:34:ff:
27:28:1a:40:18:1e:bb:f6:cb:2b:3b:d5:18:a5:bd:27:70:46:
df:a1:ec:56:2e:ee:c2:cf:ae:36:33:b9:2d:bb:8e:54:0f:6e:
e8:96:2d:f7:10:fb:7e:bc:21:60:42:87:11:2f:7e:6d:88:b6:
fe:d0:36:c0:f2:4d:24:a5:9f:9d:c6:52:b8:d7:72:1d:9e:30:
19:93:0e:83:65:35:66:12:1a:f8:bf:63:85:3c:e5:d3:7a:82:
f2:0a:68:18:60:0e:ab:6d:77:f6:31:51:4e:1d:c2:85:8d:85:
5c:36:0f:36:27:db:6a:24:1c:29:3a:7b:e1:4e:2b:15:ee:c2:
86:7a:d3:79:76:94:fb:40:b1:20:8c:f9:e5:b0:8a:7f:95:b5:
a9:88:78:d8:33:e0:71:25:05:f5:9b:8a:c6:bb:ee:5c:7b:3d:
d8:47:61:78:59:6e:c5:9f:71:d0:4c:0a:fb:2f:dd:d2:00:58:
9a:b1:e5:7c:f8:6d:29:fa:3e:5a:f9:eb:67:e4:32:0e:b7:b9:
0b:1b:36:9e:1f:bf:38:9a:ea:8e:82:9f:06:cd:60:a0:95:b9:
1c:52:71:c0:4d:90:7d:fe:cb:3f:82:73:0b:e6:7f:f9:3d:56:
e2:59:b1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:24:00 2026 by rpki-client