Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: VcbmLIIPtStnf1GSMqeXoi2FQNWgNSeUCfxEMc1myuY=
Subject key identifier: B9:91:A4:C9:68:F1:26:AE:A5:00:DF:0D:3E:05:06:F7:CF:E9:FB:FC
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019F90FFB2105051A01DF40BAAA1C21534EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 22:01:44 +0000
Manifest this update: Thu 23 Jul 2026 22:01:44 +0000
Manifest next update: Fri 24 Jul 2026 22:01:44 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: JIdXpBP68G5OR3r2uj/z4iA9tULK2Ca3+aqBqOByW8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:b2:10:50:51:a0:1d:f4:0b:aa:a1:c2:15:34:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Jul 23 22:01:44 2026 GMT
Not After : Jul 24 22:01:44 2026 GMT
Subject: CN=b991a4c968f126aea500df0d3e0506f7cfe9fbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:ec:d6:f1:56:4b:f9:69:1d:70:68:15:ff:
b2:72:79:c6:d3:dd:ae:15:d0:a0:13:5d:a6:f0:41:
cf:df:ee:78:3a:7b:48:63:6d:3d:19:77:31:2b:1b:
1d:e4:d2:d8:e1:25:6f:d7:ed:7f:22:ea:4d:69:75:
18:fa:4a:1f:83:78:b7:08:80:49:12:15:c5:e2:01:
d9:91:b1:d2:ac:c7:9e:ad:d3:b3:0a:df:09:2a:6f:
d5:97:36:0b:b3:57:3b:2c:2f:c6:43:71:67:29:76:
97:60:d3:c0:36:4c:e0:0f:6b:fb:b2:b8:e1:ce:f3:
97:5f:e6:7a:1d:6f:74:0b:32:d1:69:31:f4:f9:3d:
93:65:8f:67:40:ec:76:85:cf:60:60:99:62:e8:83:
be:c8:22:46:bb:fd:57:6b:1b:b2:8f:f2:3f:ec:8b:
33:aa:aa:0f:3d:5e:d7:f1:80:e1:9e:59:46:32:b4:
d8:90:7a:36:0f:1b:85:9a:af:57:64:ca:3f:44:ec:
b1:e9:b7:40:c0:11:c2:02:ff:bb:32:08:a8:bd:4a:
31:71:e4:6e:ce:22:a2:d7:cf:eb:b1:e9:07:fe:f0:
6a:6e:b1:3c:02:ac:b4:89:1a:34:09:d2:04:af:f2:
ba:56:84:0e:4f:80:e7:ae:ac:18:11:e8:63:17:be:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:A4:C9:68:F1:26:AE:A5:00:DF:0D:3E:05:06:F7:CF:E9:FB:FC
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2c:e1:ae:57:47:17:4d:c5:f0:48:56:c7:5c:2b:e5:53:1c:
5d:c1:c2:c1:f1:05:df:fd:85:62:91:f0:17:81:d4:b2:f1:58:
fd:09:00:e7:de:c4:9a:23:92:e4:9f:06:cf:ec:eb:e2:7c:85:
79:84:dc:ee:12:0a:9a:92:e4:cc:0f:21:1d:b9:c3:b4:75:16:
a9:d7:36:1c:bf:49:13:06:52:76:a8:97:eb:f4:63:1e:29:ae:
00:6e:42:2e:ca:42:63:c4:a1:f3:a5:84:d2:28:3e:03:6c:b7:
d6:40:b9:58:c4:0c:a5:f6:b3:8d:c5:70:ac:26:89:97:9f:70:
f1:b9:08:77:9a:98:11:d4:be:a2:f1:d3:cc:15:84:d8:ba:1b:
8d:35:f0:76:d5:e8:a1:54:44:b9:0a:90:bf:3f:e0:d7:39:c9:
73:59:3e:42:73:71:49:6f:29:7b:86:d5:cb:04:e9:d3:12:60:
5e:02:c4:c0:bc:bd:af:57:1e:30:a3:ed:1e:e8:69:a9:8a:ee:
aa:b8:f2:73:1b:9b:17:a7:00:5d:84:88:f2:04:f6:01:10:6d:
61:c5:d2:5c:3f:71:51:43:4a:d7:c9:36:ef:63:82:c6:74:48:
71:e8:c4:b9:c6:b0:7e:c7:5d:22:53:c4:1a:4b:03:c7:a9:f8:
70:a8:cc:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/7IQUFGgHfQLqqHCFTTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw
NzAyYzEwHhcNMjYwNzIzMjIwMTQ0WhcNMjYwNzI0MjIwMTQ0WjAzMTEwLwYDVQQD
EyhiOTkxYTRjOTY4ZjEyNmFlYTUwMGRmMGQzZTA1MDZmN2NmZTlmYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdPs1vFWS/lpHXBoFf+ycnnG092u
FdCgE12m8EHP3+54OntIY209GXcxKxsd5NLY4SVv1+1/IupNaXUY+kofg3i3CIBJ
EhXF4gHZkbHSrMeerdOzCt8JKm/VlzYLs1c7LC/GQ3FnKXaXYNPANkzgD2v7srjh
zvOXX+Z6HW90CzLRaTH0+T2TZY9nQOx2hc9gYJli6IO+yCJGu/1Xaxuyj/I/7Isz
qqoPPV7X8YDhnllGMrTYkHo2DxuFmq9XZMo/ROyx6bdAwBHCAv+7MgiovUoxceRu
ziKi18/rsekH/vBqbrE8Aqy0iRo0CdIEr/K6VoQOT4DnrqwYEehjF76FQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmRpMlo8SaupQDfDT4FBvfP6fv8MB8GA1UdIwQY
MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt
MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj
LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCzhrldH
F03F8EhWx1wr5VMcXcHCwfEF3/2FYpHwF4HUsvFY/QkA597EmiOS5J8Gz+zr4nyF
eYTc7hIKmpLkzA8hHbnDtHUWqdc2HL9JEwZSdqiX6/RjHimuAG5CLspCY8Sh86WE
0ig+A2y31kC5WMQMpfazjcVwrCaJl59w8bkId5qYEdS+ovHTzBWE2LobjTXwdtXo
oVREuQqQvz/g1znJc1k+QnNxSW8pe4bVywTp0xJgXgLEwLy9r1ceMKPtHuhpqYru
qrjycxubF6cAXYSI8gT2ARBtYcXSXD9xUUNK18k272OCxnRIcejEucawfsddIlPE
GksDx6n4cKjMWg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:40 2026 by rpki-client