Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
File: v-x0OQub_hRrfpPpLpiVBCCY5kM.mft (raw, json)
Hash identifier: dZ8Dm5yGVmySzbps9at+uymDqjtrqi9Ry4rZUN+Vkjg=
Subject key identifier: CA:57:DC:EE:9E:C5:2E:11:91:53:07:0E:CD:98:02:8E:F5:DB:B1:DA
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Certificate issuer: /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial: 019F91DA39885144F0AB0C8713AF2BA59AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
Manifest number: 0139
Signing time: Fri 24 Jul 2026 02:00:25 +0000
Manifest this update: Fri 24 Jul 2026 02:00:25 +0000
Manifest next update: Sat 25 Jul 2026 02:00:25 +0000
Files and hashes: 1: 51iSXNXbLmvTLItGRvoRtGfr2K4.roa (hash: mxwbG4mvPMTjMzVFCzi4Qb5/YZ7wF3FzdOkJfABIOVo=)
2: hDgGBDl_1VlfUNCZCCkO5PENEqo.roa (hash: gRiO9A/6R495B/vZKUWFHQ5wB+uYLtNnBUABWXbDczQ=)
3: v-x0OQub_hRrfpPpLpiVBCCY5kM.crl (hash: EMNRxnWyAQx/CHIG3ZVEJIAQtZh4DONJbY7YivDrETI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:39:88:51:44:f0:ab:0c:87:13:af:2b:a5:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
Validity
Not Before: Jul 24 02:00:25 2026 GMT
Not After : Jul 25 02:00:25 2026 GMT
Subject: CN=ca57dcee9ec52e119153070ecd98028ef5dbb1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:17:21:1a:3e:95:9f:4c:1c:26:12:41:f9:
b4:01:ed:08:e0:d4:39:57:24:8f:d5:e7:06:bc:67:
b8:70:d3:2b:44:a6:e3:64:97:30:ee:23:15:de:3e:
8d:5f:2c:14:65:f6:72:16:db:60:c5:3a:02:b3:2d:
ec:d6:28:c3:e4:dd:20:98:73:fc:34:3b:2a:e3:7b:
4b:b2:bf:74:58:93:aa:de:be:53:0b:68:00:aa:78:
de:c1:65:67:98:54:6d:22:8e:4b:1f:a8:01:8c:b8:
0a:21:15:4f:0d:d0:f7:7a:36:4f:85:a5:ee:29:10:
77:78:49:08:fc:52:cd:6f:7b:d8:f5:c3:3b:86:3a:
20:36:9f:9a:ac:56:a7:82:a5:20:75:05:64:91:2e:
79:1f:60:ab:47:f7:ad:92:e4:ba:ba:a6:4c:07:8b:
aa:ee:18:bf:84:65:e1:82:49:01:49:f8:ca:65:a8:
7a:80:e9:22:99:ed:0d:9d:46:ab:1c:b2:ed:42:c6:
29:19:e1:d9:65:d2:eb:f1:7f:31:48:d2:2a:34:1d:
54:9f:4a:92:f4:30:7a:57:6c:4a:ca:47:96:54:84:
d3:51:6f:b9:c6:8c:55:fd:68:57:27:79:f5:ef:3e:
e5:1d:78:49:da:80:6a:0b:bd:15:b7:16:8f:c7:84:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:57:DC:EE:9E:C5:2E:11:91:53:07:0E:CD:98:02:8E:F5:DB:B1:DA
X509v3 Authority Key Identifier:
keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:84:54:20:8c:1e:e4:fb:1a:49:04:e4:ee:87:d2:4d:ab:b2:
2d:21:9d:59:88:6c:e0:be:e2:4b:55:dd:fc:12:3e:c1:2d:67:
13:57:f1:35:e6:8b:14:eb:87:f6:c8:2f:be:f6:0a:e7:44:43:
b6:be:a5:7e:6d:e4:c5:27:b2:d2:2e:ca:3b:2c:23:54:3e:9c:
69:2e:22:17:da:fe:ae:2f:33:96:93:5f:9e:b4:e6:1b:01:47:
5f:03:31:22:41:10:89:78:dd:7b:c2:b6:4d:3f:21:ea:f0:65:
8b:4c:b8:af:2f:e6:ca:c9:01:f2:ea:88:eb:88:6e:fd:07:ae:
60:dd:20:3c:08:e6:38:30:4e:60:7e:52:81:e4:b7:9c:de:d9:
05:f7:49:85:15:53:4f:6d:2f:26:cb:89:35:3e:78:b3:72:c3:
ba:08:d2:26:c5:81:03:38:fd:23:68:d3:c0:e7:2e:26:76:cd:
9e:ea:b4:e7:44:51:6c:66:e5:dd:8e:fe:c3:97:03:75:eb:5a:
ee:02:6d:71:3b:ab:cf:26:49:48:5a:d2:50:43:2a:f8:83:a3:
78:b3:f0:01:11:37:8c:b6:bf:37:e6:90:25:ea:40:cf:91:bb:
ac:c6:54:df:62:1b:13:f8:75:d0:c0:ed:61:84:48:94:c3:f1:
1d:af:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:53 2026 by rpki-client