Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: gSziGqMJZbMawoWdPfEiTK5jHug58hFRHqKCuWRm9Xw=
Subject key identifier: C4:71:C3:37:39:7E:04:4A:47:2A:E3:12:7C:9F:3E:6C:FE:FC:D8:2A
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 019F927F19397B0CBD88B502EAF84760634A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:30 +0000
Manifest this update: Fri 24 Jul 2026 05:00:30 +0000
Manifest next update: Sat 25 Jul 2026 05:00:30 +0000
Files and hashes: 1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: uDWM6bfQAHBvkABWBZ10t4YPQcF8IFYw+Lua/0XrR7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:19:39:7b:0c:bd:88:b5:02:ea:f8:47:60:63:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Jul 24 05:00:30 2026 GMT
Not After : Jul 25 05:00:30 2026 GMT
Subject: CN=c471c337397e044a472ae3127c9f3e6cfefcd82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:5d:95:62:21:80:72:4b:dd:25:1f:bc:22:
7f:fd:44:9a:0c:42:96:2e:d9:d2:86:7c:39:79:7e:
66:91:de:20:00:c7:84:8c:7d:fd:cc:ab:0f:35:b6:
bf:82:fd:31:d9:fb:72:81:07:1f:2d:1e:cb:49:78:
3f:d1:fb:a6:2c:a1:25:bd:8f:3a:fa:ca:7c:e8:0d:
24:b7:f0:b0:fe:38:4f:66:ce:68:a7:17:90:94:4f:
22:7e:c3:a5:16:34:5f:72:81:bf:28:88:cb:18:03:
23:53:4e:e0:44:c5:1c:d6:b6:ff:86:c3:21:ee:5e:
09:59:2e:d5:57:33:5c:72:a0:e8:ab:48:07:5a:b7:
9e:98:00:b2:ec:17:8a:43:72:de:9f:a6:82:22:c9:
c9:d1:13:7e:a6:7b:71:bd:d4:2e:94:17:e6:49:5c:
53:32:da:96:0c:86:47:02:c5:f9:cc:4c:ac:dc:32:
c2:4d:b1:80:6d:4c:27:c7:b2:2f:87:01:a1:04:61:
b7:c0:e2:f9:4b:17:be:75:73:18:49:11:0c:2e:f4:
ff:ca:61:88:64:21:70:f8:3d:b4:be:91:75:1e:4f:
5a:ed:8b:cd:7c:fd:ff:7b:f2:53:3d:99:56:93:80:
67:3a:53:7d:9a:5d:3c:66:f2:66:f0:e6:fc:4b:7c:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:C3:37:39:7E:04:4A:47:2A:E3:12:7C:9F:3E:6C:FE:FC:D8:2A
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:90:71:99:71:8e:99:c1:a5:dc:73:81:c8:ae:49:c6:90:c8:
cc:1c:2e:43:b2:85:16:ef:be:b7:d4:92:90:71:a0:cd:de:a4:
e7:b2:dd:38:37:72:20:95:a3:fd:93:cd:2f:36:d4:ba:d7:f1:
b1:ec:30:3c:8c:af:1e:ac:2e:5c:43:9d:a2:bb:78:14:97:0d:
16:2a:6e:66:e1:d2:e4:37:bc:21:19:74:85:39:ef:43:85:4d:
68:38:2b:43:1b:44:2e:25:67:9a:e4:ff:33:ac:3b:59:f2:f3:
9d:3b:9e:0c:25:3c:a6:f8:d1:79:ba:84:f0:86:6e:a4:db:1a:
ef:4e:e8:5c:42:33:27:7c:67:13:9d:86:b4:7b:4a:b8:a0:08:
a1:aa:db:10:88:e5:53:bb:0f:19:af:3d:2f:d2:c7:45:87:56:
b9:7a:e2:da:97:03:0e:68:83:7b:38:c5:e0:9f:3d:09:54:68:
10:cb:dc:10:17:00:27:24:9d:58:6f:e7:b2:98:ca:cd:85:f1:
c0:ea:71:de:19:b7:00:ee:cf:3d:7c:ab:5c:99:3a:2b:c2:e4:
a6:a7:8f:c3:b4:c8:0d:78:e9:83:0c:fd:2d:03:48:a0:93:49:
7d:ce:f7:0e:ac:35:3a:22:bf:d6:5e:b1:87:26:a4:b9:38:0a:
08:c7:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:50 2026 by rpki-client