Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: LJbOHv7pmbPentoiUf7TFyy6zPEI8/tN7oO9TWSm124=
Subject key identifier: 37:23:DE:C6:D1:18:6F:2E:C4:C3:4D:2C:BD:B5:54:F8:22:8A:D4:75
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019F9436DC4A0C5799D342D76CB914D8BB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:00:51 +0000
Manifest this update: Fri 24 Jul 2026 13:00:51 +0000
Manifest next update: Sat 25 Jul 2026 13:00:51 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: FcSGmx0atizr1t0elCv8jMOz+MR3JfvOuqwNo7ozuLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:dc:4a:0c:57:99:d3:42:d7:6c:b9:14:d8:bb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jul 24 13:00:51 2026 GMT
Not After : Jul 25 13:00:51 2026 GMT
Subject: CN=3723dec6d1186f2ec4c34d2cbdb554f8228ad475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:d0:ba:90:bf:d7:0f:c0:45:b7:a7:18:29:
cf:ad:59:09:a3:32:01:57:85:fc:c2:c8:cb:1d:d8:
5b:15:67:c7:1c:39:d7:a5:73:57:4d:50:75:c6:32:
9c:da:cb:66:ce:2c:51:bb:8e:01:c4:2b:ab:85:8a:
de:5b:5b:01:91:80:b3:76:c6:97:a0:67:f4:25:98:
eb:5f:92:2a:b5:ba:d7:df:d3:33:2a:08:4c:d9:36:
c3:84:8f:b8:e8:44:f2:b0:c3:e9:2c:20:cd:63:f3:
d0:25:b9:79:6f:8f:7d:2e:24:b3:21:70:8f:ae:6f:
c9:2b:24:48:5c:9b:33:02:2b:96:43:e1:4f:78:17:
a8:91:ed:02:cc:4d:8f:51:9f:f1:cf:8f:84:5e:ae:
c9:c3:50:35:be:d5:46:db:56:e9:5b:da:97:b7:e5:
5b:eb:5a:ff:8c:8e:34:c3:cc:78:ec:50:d1:5f:1c:
8d:ff:dc:93:9d:72:76:5a:16:38:24:32:e3:5b:33:
1b:39:fe:e7:bb:09:ad:99:9a:b7:c0:6b:f2:ea:9f:
96:a8:d8:77:65:7f:79:b0:55:35:7e:3f:d1:b3:d3:
f8:7d:df:d4:17:b5:64:8e:45:a8:36:a1:f1:4a:b2:
ca:45:7d:2d:d0:b2:2e:33:1c:d7:8c:76:38:54:ac:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:23:DE:C6:D1:18:6F:2E:C4:C3:4D:2C:BD:B5:54:F8:22:8A:D4:75
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d8:2c:a8:fe:1f:35:42:c6:6b:20:3b:8a:90:90:3f:20:d3:
fa:c3:46:22:d7:77:08:92:91:68:1b:f8:ca:37:37:d2:95:72:
22:7d:a5:a2:af:87:6a:d2:a0:e2:6e:6d:de:74:ad:c4:40:dc:
8a:1d:2d:c0:67:ea:7a:8d:ea:27:36:ec:b8:38:a2:37:99:ec:
f7:d9:54:66:0b:05:79:4d:cb:6f:49:27:88:d2:b4:16:a6:22:
05:be:f3:62:73:97:ad:a5:93:88:da:7f:97:49:73:a7:1c:dc:
30:e0:f7:1c:e8:88:85:c4:8f:d8:2f:0f:77:79:55:c7:eb:01:
03:a3:51:fe:c0:92:94:1e:22:f5:72:68:d0:bf:06:08:b7:a5:
f4:eb:f9:21:25:65:f5:a7:1b:84:ae:8b:27:02:76:f1:9a:2b:
db:6e:53:28:ff:db:79:1c:8e:4f:4b:4f:6d:50:5c:7a:63:fa:
56:57:6e:27:fe:64:3e:e8:d9:35:87:a6:23:01:cc:7b:7b:20:
fc:bc:0e:d9:9a:b8:4c:6d:fd:58:3a:27:57:fc:0f:c8:20:46:
df:b3:93:03:66:90:6f:31:58:54:01:a0:ee:2d:3e:3d:d0:f7:
32:37:22:d4:d2:76:a4:55:21:87:be:58:85:26:58:3d:29:0b:
97:e6:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:26 2026 by rpki-client