Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier: 0cUoY0xiZei/mWKHeMrra2D/E43+YfNLjVp7EIJKY2Y=
Subject key identifier: DE:2E:55:26:0A:2F:01:37:69:B7:D4:62:BF:70:EC:02:9A:A7:0A:A9
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 019DA3AF1391D7365D933D427466FCC7EBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number: 0AF0
Signing time: Sun 19 Apr 2026 03:00:53 +0000
Manifest this update: Sun 19 Apr 2026 03:00:53 +0000
Manifest next update: Mon 20 Apr 2026 03:00:53 +0000
Files and hashes: 1: p9RxkxEDg3zhOEBmGSkuGg-Qp1g.roa (hash: Pzg3LR/Kx5u+U4xpCocEsCBgxEMmX7bZWZgvVSP3EX8=)
2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: /VGLMNnz7e7EQDWTrWaKN0oWXuG/TcKhVsuNE7atskI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:13:91:d7:36:5d:93:3d:42:74:66:fc:c7:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Apr 19 03:00:53 2026 GMT
Not After : Apr 20 03:00:53 2026 GMT
Subject: CN=de2e55260a2f013769b7d462bf70ec029aa70aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:7f:3d:60:b3:72:45:b3:db:df:cf:7b:7c:
c9:bd:d6:37:19:f1:4a:31:77:b3:2d:2f:ca:13:8c:
f1:38:3a:57:8b:bf:3e:d8:ea:ec:e4:c0:69:bf:01:
c6:88:52:c4:9b:9a:d0:c2:e1:d0:47:46:9f:a1:b6:
7e:b9:a3:bd:57:ac:a5:d0:12:26:6b:99:fd:db:23:
cb:dc:9e:df:ff:9f:21:d3:4e:3f:cf:a7:07:cd:31:
1a:da:7d:9a:8c:bd:ff:5b:3f:9e:28:3c:d0:d2:0e:
70:80:4d:e4:31:a2:16:5b:11:c6:2c:3b:cd:0d:92:
26:df:b1:ef:2f:3d:2c:ab:9e:39:86:fa:f9:87:53:
ba:8d:8d:f4:5f:4e:9f:8b:ba:bb:c7:62:6b:2c:6b:
87:65:14:cb:58:31:94:a9:cf:01:8a:6a:85:79:69:
76:81:69:3f:36:31:15:87:16:4a:12:44:79:c2:d7:
04:8d:89:e3:cc:4e:f5:49:d8:8f:3c:0e:d7:39:4e:
97:31:e9:00:58:c6:b9:9f:ad:34:26:4b:89:72:66:
8c:4a:ed:9d:fd:71:fa:b6:c1:f5:dd:5e:de:ea:7a:
5f:42:46:cb:28:bc:82:72:1a:b8:59:7d:95:6a:02:
70:48:96:eb:6e:4e:cc:56:24:04:44:67:df:0b:10:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:55:26:0A:2F:01:37:69:B7:D4:62:BF:70:EC:02:9A:A7:0A:A9
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f1:9d:51:3f:28:fa:50:ca:2a:37:b8:42:bd:56:4f:15:d1:
83:cf:0b:55:eb:70:8e:81:b5:68:cf:6a:2d:5f:3b:43:19:28:
41:80:04:3d:88:e3:02:41:a2:ca:64:2e:62:ea:05:39:79:61:
b5:6c:e6:b8:2d:94:89:e3:a8:6d:68:de:cc:67:6e:a4:08:93:
9e:1d:c0:54:6a:ad:1b:44:93:79:0f:d9:e4:92:49:c6:77:8f:
dc:9e:8f:9f:cc:21:1d:7e:f9:92:3d:ce:d6:ca:d6:c9:7d:d6:
1b:fa:ca:03:5a:a5:19:f7:e9:0d:4d:89:d0:36:35:70:b2:bc:
a2:3d:fb:a4:ec:ba:5c:aa:a5:38:2f:5a:82:fc:1a:26:be:5b:
a1:75:63:a6:f0:fa:94:3d:27:ed:76:09:a8:6d:c6:45:81:a2:
52:e0:80:e4:5b:44:04:23:f7:33:27:5e:18:57:57:28:30:fd:
18:8f:0d:8e:ab:90:85:a9:63:42:76:ff:4c:a1:80:45:24:43:
30:c5:7f:7c:8c:45:9b:a2:83:f4:58:1b:97:43:fa:76:e0:28:
20:51:25:36:fb:d5:d2:7b:97:82:04:63:5d:b3:bc:79:f8:57:
4d:90:b7:f3:f4:e9:40:3b:6a:10:91:df:81:a2:ff:cc:58:10:
86:b9:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:23 2026 by rpki-client