Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: JjCcYGgXKAC0Vcx4ulMTZI2kGEEDJK+rd3qs54pI1XQ=
Subject key identifier: C5:A8:98:4C:82:6F:82:EC:80:63:E8:73:0E:92:71:71:9F:67:6A:D2
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019D9A3EDDBB9EBFC89F2B237EBC4B362006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0BB8
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: 5M_KwgEpGB_wTUnEs5KgK0u-puM.roa (hash: 1WXrU5af8c9IUXVeRilbTvTk9Z0TVLWoEf8fzrPe7J4=)
2: Ve6c2IT4Y4KWt1y8vOlimM_P9Vo.roa (hash: JZ/bRjpJCHl5nEUS59KBB6ePkjyLJVz3d6ZPz9DGR/E=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: OdICA+B+uFCANW6tkOK1a6z7Qh2gsWNDPAWkGHnVj2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:dd:bb:9e:bf:c8:9f:2b:23:7e:bc:4b:36:20:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=c5a8984c826f82ec8063e8730e9271719f676ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:20:35:cb:40:05:d6:f2:d3:f5:6a:aa:b1:
2c:cc:08:15:60:ea:d5:c3:ab:3c:4f:a1:14:f1:9b:
cd:c7:f2:1e:eb:76:af:95:0d:c3:eb:8a:35:b8:07:
cb:fe:f0:95:84:29:0e:78:74:0b:e0:8a:c6:1c:5d:
af:5d:8a:b3:2e:34:b1:5d:da:dc:b6:83:d3:5f:0e:
cf:66:62:2e:ba:b0:92:6f:04:a8:2b:07:83:33:d2:
fe:8f:75:e4:fe:37:25:62:81:49:86:39:76:c0:60:
1b:23:af:fd:85:7a:bf:74:d3:51:6e:86:47:b5:f4:
e4:0c:c7:62:e7:be:57:45:f4:53:1b:2d:23:b4:f9:
3f:8d:f4:84:d3:f9:41:58:c9:c8:4c:89:ce:a4:fc:
0c:0b:4c:07:fe:21:87:47:5e:1c:cb:31:49:49:5c:
8f:e6:e4:b7:4e:f4:ba:94:e9:d3:cb:9e:1e:91:0b:
7e:a2:f8:af:ff:c3:4f:f1:cb:6c:ba:3d:ae:e8:42:
01:25:ea:3d:5c:54:f6:0e:3f:39:a5:61:f6:62:ef:
89:19:c9:82:09:40:57:25:a6:8e:10:d3:18:e5:0b:
2a:da:83:b8:a0:b2:41:45:6e:a4:9a:3f:4d:78:ad:
d8:96:17:43:5a:11:28:0b:bd:68:03:86:6a:1e:e4:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A8:98:4C:82:6F:82:EC:80:63:E8:73:0E:92:71:71:9F:67:6A:D2
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:87:d8:e0:6f:bb:0c:15:3d:4b:8b:c4:6d:40:90:d0:1e:9f:
a4:8c:b6:37:d9:51:57:e0:2e:a1:19:74:61:9a:d5:6c:81:6f:
dc:6c:04:34:50:c2:9e:0c:e5:92:ae:c1:e5:28:c6:a5:8a:39:
28:ca:87:4e:5f:45:87:fd:37:55:49:fc:ac:c3:8c:06:f8:52:
e1:5e:b0:6c:5b:d2:92:70:d9:51:c0:29:a1:56:b1:cc:0a:50:
c4:89:40:2e:4c:bf:32:03:0a:a2:01:e8:c2:1d:cd:14:48:b2:
2d:83:ad:20:ed:33:8d:28:cc:d1:c6:68:25:ee:69:fe:fe:2d:
1c:48:39:4f:3a:81:e2:34:c3:6f:bb:f8:78:f1:c1:9e:2b:12:
aa:56:7a:d5:62:13:7b:cc:4b:9e:2f:7f:97:60:94:f1:dc:ad:
cf:75:62:7e:a5:42:09:c2:b9:c3:f8:7a:6b:1d:2d:ae:93:8f:
c2:ee:08:0b:a2:e6:ef:45:17:ce:30:fd:ab:64:67:37:18:59:
ef:8f:30:9d:35:22:31:39:05:9c:83:2c:e6:c4:73:01:82:61:
30:64:71:fa:2e:8d:d2:6c:43:7d:aa:c9:ec:25:81:45:7e:b8:
cf:7a:15:fb:3f:4f:90:51:6a:31:63:b2:7b:bb:d7:93:a4:f7:
90:6b:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:20 2026 by rpki-client