Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: QGAMaPNcpNyys8yatbEQTE/tqTN7XOtD4g59hmdivXY=
Subject key identifier: 00:30:BF:3B:01:4B:36:E7:AC:2D:D9:34:5A:53:24:3A:C8:D9:B0:2F
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019F95B7D30194936818711025ACDC9777F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0AE7
Signing time: Fri 24 Jul 2026 20:01:20 +0000
Manifest this update: Fri 24 Jul 2026 20:01:20 +0000
Manifest next update: Sat 25 Jul 2026 20:01:20 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: OQY1zwsS3BmUO1xKStvIGZDrxw6zmY+U/TMhl7EA4VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:d3:01:94:93:68:18:71:10:25:ac:dc:97:77:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Jul 24 20:01:20 2026 GMT
Not After : Jul 25 20:01:20 2026 GMT
Subject: CN=0030bf3b014b36e7ac2dd9345a53243ac8d9b02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:b8:ea:be:da:9e:e8:13:50:6f:fb:b0:a0:
dc:81:b0:99:17:98:b0:d9:53:d8:e3:a6:bd:d2:d6:
45:35:c1:33:db:89:ee:d8:1c:03:7f:d1:fa:64:7b:
5b:58:13:04:2c:3b:fc:9f:83:3b:19:51:d7:02:c8:
93:06:7b:f3:51:bd:15:94:15:08:11:b4:c1:49:27:
39:ef:45:3f:63:0b:5e:9e:a6:f7:b3:cf:08:06:f9:
b6:3a:33:3c:f5:c7:92:95:43:33:32:11:57:23:8c:
8c:67:18:96:04:70:5e:d0:10:c4:36:51:71:10:b1:
ac:44:11:70:e2:ad:5e:41:6f:e6:80:2d:3a:a5:bd:
99:e1:a8:d5:07:31:15:d7:f3:89:eb:7a:b4:1d:75:
51:f9:8e:fc:f0:51:14:14:b5:b2:05:9b:37:a6:40:
e5:14:93:2b:b1:64:89:3c:dc:6f:36:79:fa:62:75:
12:08:03:2e:59:aa:67:38:cb:ce:49:ad:01:29:18:
ba:89:1e:dc:d9:fa:1e:f1:eb:ca:41:ea:af:12:11:
25:2b:da:7c:c7:3b:7d:db:68:5b:9b:72:2a:79:2a:
cb:ee:a9:31:d0:63:a6:1a:84:b2:41:63:1f:52:e3:
ba:f8:7d:9f:a2:a4:57:68:a5:22:08:fe:c7:d6:de:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:BF:3B:01:4B:36:E7:AC:2D:D9:34:5A:53:24:3A:C8:D9:B0:2F
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:46:60:ca:09:e5:99:98:14:3b:4b:4f:16:cb:db:15:6a:
2f:23:05:9e:ad:54:f0:42:89:7b:10:75:39:2b:7b:e5:af:11:
5b:61:1d:6d:14:9c:1b:69:84:d2:e5:59:2f:be:77:02:ef:92:
64:31:4a:be:83:e5:6b:d8:71:c8:2e:74:fb:c5:42:e1:82:4f:
ed:be:e4:6a:68:9b:31:37:69:31:27:80:d9:cd:25:e6:a4:50:
c8:23:d8:82:8f:7b:7a:cd:e7:67:ce:2a:9d:c2:2b:a3:54:ed:
c2:16:de:d9:c8:85:8f:ae:f6:ea:37:e4:9f:e9:ab:1b:12:95:
d5:1d:1b:dc:1e:f9:f2:83:c2:05:ef:21:50:aa:4d:94:8e:d5:
15:2a:da:0d:00:f7:0b:a3:a4:e3:63:52:91:f3:41:3b:de:ed:
01:cf:46:7b:df:76:74:b0:af:47:40:83:76:de:1a:e7:29:e9:
e1:91:05:26:0b:be:e1:43:4f:f9:70:17:98:df:21:f0:87:8d:
88:b7:b6:2e:a2:68:52:ca:2f:dd:7b:89:d5:0b:62:3e:f4:17:
14:d9:39:0f:c0:9b:28:f7:7b:e9:96:4a:1b:09:22:cf:7d:d0:
96:6e:51:b8:ac:ae:0f:f9:4f:a7:5f:3d:4a:3f:4b:59:2f:2b:
50:55:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:46 2026 by rpki-client