Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: c9gM61vpge9ekBSubURGY9gGwEBzIVBHrBBvQb2LBtI=
Subject key identifier: 75:66:26:5A:1C:37:EB:C9:C0:48:8E:2E:64:19:91:F6:01:9B:A5:24
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019EC0A411B45913ACCDB8D9ED31CFD93A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 09D6
Signing time: Sat 13 Jun 2026 11:00:38 +0000
Manifest this update: Sat 13 Jun 2026 11:00:38 +0000
Manifest next update: Sun 14 Jun 2026 11:00:38 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: H0s1WLGO+SFk3enR2HOoI/aqmrr+ZkKBsh1+LAkzljI=)
3: xd89191APrZOUVHG3uZycN3SZ0g.roa (hash: IG6q5I2/G1oD/WZjTUVQ36euEC71avJGwrJIV9eTw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:11:b4:59:13:ac:cd:b8:d9:ed:31:cf:d9:3a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Jun 13 11:00:38 2026 GMT
Not After : Jun 14 11:00:38 2026 GMT
Subject: CN=7566265a1c37ebc9c0488e2e641991f6019ba524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:c3:cf:b4:6e:de:9f:a9:15:a4:fc:e6:10:
45:4c:68:33:93:df:d7:62:7b:dd:e5:fd:53:34:32:
92:97:67:2a:29:81:69:49:1b:f3:39:77:49:85:ea:
43:92:9c:de:e6:84:c0:b3:88:34:38:03:ea:04:38:
a8:17:d7:70:f0:75:6b:86:1b:46:94:03:96:70:a1:
f2:e0:dc:08:8c:11:bb:2f:74:08:8a:c3:90:c4:dd:
f9:57:08:1e:b9:fe:02:e9:51:cd:c2:56:a1:b6:a9:
9f:3d:47:e7:88:5e:e4:19:da:78:f0:a6:2b:76:88:
35:6e:f6:c8:a3:81:88:0d:b2:6d:32:40:b3:66:d9:
0b:24:55:39:64:19:51:6a:a8:0a:ef:f4:3b:33:ad:
20:cd:ca:d4:2b:38:2c:87:8a:08:67:c0:09:e5:02:
1a:b2:0b:4d:cc:38:6e:20:d9:a0:65:ae:aa:85:e4:
69:04:0c:1a:d3:64:05:b2:09:93:3d:6e:4e:61:01:
ce:6e:8a:78:eb:e5:c2:fe:10:a0:19:f9:49:ca:f1:
33:06:58:0a:31:18:a9:9b:f1:22:70:b6:3c:87:a7:
da:ee:ec:10:d4:48:75:6b:9c:45:4d:51:25:59:c7:
04:54:68:14:6a:51:16:47:98:70:8b:32:4a:45:c5:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:26:5A:1C:37:EB:C9:C0:48:8E:2E:64:19:91:F6:01:9B:A5:24
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9f:ec:65:61:f9:b4:42:41:e6:6e:ce:70:6a:a6:3c:38:6d:
89:f2:f6:0a:12:56:4b:12:b5:87:a4:b5:e6:c7:3b:f8:b8:15:
5d:26:3a:60:a3:2a:a5:c5:d7:48:41:b8:54:f2:6c:25:f9:16:
d3:19:93:8e:99:b7:ae:aa:80:01:9e:e2:ed:e2:f7:00:a4:53:
81:8b:59:50:3d:80:00:7e:ab:25:b1:00:a3:89:97:78:2c:f7:
59:ab:16:2c:02:25:bf:0f:c2:d3:cf:6f:5d:c2:1c:91:53:b4:
ad:bf:03:04:d3:f6:39:6d:2c:bf:b9:4a:78:c9:bc:10:73:ac:
05:65:eb:ad:b0:35:cc:7f:6a:23:b0:30:29:df:fb:90:81:5f:
52:d0:40:da:7b:11:4a:4b:07:30:87:6b:bd:15:ab:8d:8f:b5:
c5:40:00:a7:49:e1:be:2a:1d:34:80:ce:a7:bb:d3:6e:b3:47:
44:0d:3c:6e:3b:9c:5c:66:26:56:69:db:f6:9c:1e:29:6e:64:
5f:6c:1b:55:e8:2a:be:35:bc:8e:34:0f:a2:e3:45:32:67:47:
b6:d8:41:54:54:d7:3c:c2:f5:f8:07:cf:c0:d6:b7:95:35:9c:
5a:d9:d6:69:6b:35:97:83:85:73:c5:b3:5b:19:f2:76:ca:8e:
09:b0:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:00:20 2026 by rpki-client