Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
File: vnApzozJt4fZQyPgyg0U3R4AQ-w.mft (raw, json)
Hash identifier: t03+jxF4prFRWgpb7GFkwIHcvhQ0y1GV+eekomRF6K0=
Subject key identifier: DE:12:64:EC:9C:C4:65:12:0B:11:D3:D9:17:AA:42:47:33:1E:3A:BE
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 019F91A3AFD74523512FD99D219CC872E116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
Manifest number: 8B
Signing time: Fri 24 Jul 2026 01:00:51 +0000
Manifest this update: Fri 24 Jul 2026 01:00:51 +0000
Manifest next update: Sat 25 Jul 2026 01:00:51 +0000
Files and hashes: 1: T6rrJ0wdjoVVckWY9lDFVUTHWzg.roa (hash: 7nkrNFlBpotFIVBfQte4R27HpO8HAvjxvRBGtD+xa2c=)
2: vnApzozJt4fZQyPgyg0U3R4AQ-w.crl (hash: V2DEijp1ag9oq8K10pWpYm6soEFWjYdxPvKZBX4jfJI=)
3: ypW2jXHds3OQNDOtytakXQfeN3U.roa (hash: 3y0hmFHNOEBseG0Kj7lMsA2Z/s0AvDW9E8oqh/oHGzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:af:d7:45:23:51:2f:d9:9d:21:9c:c8:72:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Jul 24 01:00:51 2026 GMT
Not After : Jul 25 01:00:51 2026 GMT
Subject: CN=de1264ec9cc465120b11d3d917aa4247331e3abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:25:10:ac:80:a0:c2:c0:d6:5e:00:2b:b1:
95:09:e7:60:1c:89:e3:c0:02:64:2e:1a:36:b9:ed:
23:99:37:70:f9:1a:aa:94:81:a7:86:ec:1d:72:66:
ab:1c:1d:09:65:6c:76:20:da:12:52:01:42:a7:04:
4b:43:62:79:b9:32:4c:d8:0e:96:e3:82:3a:4a:20:
43:e9:67:41:81:88:fb:ef:14:6d:3d:e0:79:9c:5d:
26:73:54:66:83:17:ec:43:86:63:b9:ef:a3:60:bc:
94:14:31:eb:4b:5d:e4:54:d8:d1:9f:02:4e:c8:3d:
3b:09:ce:35:6f:a9:2c:b2:e6:fb:83:1f:8e:79:75:
d2:ce:8e:10:3e:2e:61:fc:db:d0:60:7a:d5:a2:75:
d8:cf:bb:cc:39:57:3c:cc:87:12:46:9d:cb:1a:05:
15:42:f5:23:e7:45:20:fa:b2:54:87:80:a3:73:15:
be:9e:62:23:12:28:b9:b1:e3:68:1c:45:b0:17:a6:
d9:a7:de:2d:15:85:6b:09:4b:33:c5:8c:53:62:d0:
a4:58:d7:ba:da:f3:85:c9:3b:11:4f:e1:61:e8:18:
a8:b0:5d:e6:0c:fa:f5:2a:55:77:5d:11:16:3b:34:
17:b1:30:1e:7d:0f:63:77:1a:22:4b:32:ce:21:93:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:64:EC:9C:C4:65:12:0B:11:D3:D9:17:AA:42:47:33:1E:3A:BE
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:6b:a6:ce:f5:c4:2c:d5:3c:16:ec:cb:f2:2f:52:a6:9a:
ae:91:6e:fc:43:ca:4e:38:e6:01:95:40:d0:f2:85:eb:27:dd:
3f:58:68:3b:e0:4e:89:d0:07:93:74:d0:b9:c3:e8:d5:bb:cf:
1c:96:8d:3f:7d:ef:07:18:3d:4a:25:a0:aa:d8:42:14:ee:26:
49:36:4e:ae:a4:18:d3:39:54:7e:8b:27:ca:94:27:63:bb:2a:
b7:27:aa:80:fb:28:7b:94:67:9e:34:97:19:53:01:d9:73:07:
67:b2:84:00:1a:98:1e:ff:a9:62:68:f9:d9:ce:55:2e:32:a1:
44:89:d9:76:7a:df:04:db:55:49:1f:65:0b:52:2d:78:6f:c3:
97:79:19:0e:25:c9:98:39:bc:d6:f3:23:90:c2:eb:af:58:5d:
c9:12:77:25:c8:33:11:16:de:59:c4:39:02:a8:95:3f:95:aa:
13:45:36:c5:31:67:e9:5b:37:c2:2f:d6:33:b6:cc:b1:01:fe:
b5:64:a7:d4:1c:b6:bd:9e:63:7c:ba:d3:a5:a6:cc:a4:71:64:
74:6e:12:d3:42:c2:66:02:52:a4:91:07:0d:9a:77:46:71:c5:
48:64:fd:7e:01:0b:56:2f:fc:91:b3:7f:45:81:85:13:52:80:
dc:d6:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:30 2026 by rpki-client