Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
File: VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft (raw, json)
Hash identifier: MBXMkpdgA84ghGcyjHsk7yQOSel9lbe4hIw9XH8Jdj8=
Subject key identifier: 49:54:41:EC:C9:1C:39:57:3C:43:40:64:E9:93:0C:D2:A2:A7:3F:F2
Authority key identifier: 54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
Certificate issuer: /CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Certificate serial: 019F946DE4F5C2593AEF59B423815067941E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
Manifest number: 019E
Signing time: Fri 24 Jul 2026 14:00:57 +0000
Manifest this update: Fri 24 Jul 2026 14:00:57 +0000
Manifest next update: Sat 25 Jul 2026 14:00:57 +0000
Files and hashes: 1: 6x7BJ0F-meGk9fhXJNWGJnuegOw.roa (hash: ejX+MPtDK3gTtFG1432bC6M7t7QPNbrVRz6iGDt2Hfo=)
2: VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl (hash: gBa8qzi+Xkm2Ho/jmkOtm9yadLOggwEWinWPLnBpAb8=)
3: oTR56cyeKnrqB4eLr9IFRqGiB88.roa (hash: snlvASDIyvudTtl4HEkxIFNnIhgqIkS7EP587pwAfiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:e4:f5:c2:59:3a:ef:59:b4:23:81:50:67:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Validity
Not Before: Jul 24 14:00:57 2026 GMT
Not After : Jul 25 14:00:57 2026 GMT
Subject: CN=495441ecc91c39573c434064e9930cd2a2a73ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:13:af:bc:93:bd:43:95:fb:01:39:78:78:03:
72:99:a8:2b:17:6d:98:c9:1b:e8:b6:7f:eb:89:76:
ba:d0:b4:4b:a0:ac:8d:ea:57:c3:22:84:11:38:67:
ac:b3:79:de:17:f1:5a:80:b7:62:e4:e0:a4:5f:94:
5a:7f:41:49:61:46:6b:04:73:e8:3e:c1:a6:68:d3:
97:60:20:d9:8c:4e:45:f8:a2:67:4f:fb:e8:01:95:
a9:93:80:b4:fa:61:78:93:81:ec:fe:59:d0:6b:87:
70:aa:94:11:7a:36:c2:ff:ec:13:fc:01:b2:9e:09:
2a:d7:5d:dd:e1:22:51:b8:ad:48:1c:67:53:ab:e8:
69:fe:48:63:38:de:a2:a8:c3:92:e6:d9:3e:32:c2:
57:d1:c1:31:af:0a:31:e3:3a:06:5b:51:6b:2f:75:
f1:47:08:2b:c4:f3:d5:e8:2c:9c:a5:99:7c:52:fc:
23:c7:85:e8:72:14:ac:92:81:2e:7b:e9:74:70:60:
a0:57:89:01:49:1f:c3:bf:8f:1f:09:b0:2b:8c:47:
68:a8:00:52:25:0b:79:74:d0:8b:dc:4d:29:82:53:
fa:ee:43:10:00:c2:39:73:25:4f:ba:05:05:d9:34:
71:e4:88:e7:af:49:9d:01:b4:78:34:df:c1:86:c1:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:41:EC:C9:1C:39:57:3C:43:40:64:E9:93:0C:D2:A2:A7:3F:F2
X509v3 Authority Key Identifier:
keyid:54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:72:14:8e:df:88:47:8a:40:cb:fd:11:57:73:c2:b0:66:fc:
f6:59:53:f6:fe:68:52:37:32:9c:25:4a:94:1a:cf:fc:0d:95:
09:a2:e1:0e:45:ee:10:6c:b6:e6:ef:8a:16:ba:0c:6e:c1:09:
3e:fa:65:2d:07:18:c4:a6:60:38:18:b0:33:63:b2:0e:e1:4f:
81:ec:e3:fd:01:25:a2:1e:95:25:b3:b7:cc:56:53:51:ff:2f:
dc:99:7a:12:5a:f0:6f:26:8d:07:2b:d4:f2:5d:2f:67:70:04:
25:d5:97:34:b5:52:f0:62:35:64:90:e6:a6:ba:50:3f:77:2f:
00:a0:b6:02:c0:42:92:28:49:57:cd:66:f3:f3:4d:a4:98:dd:
42:fb:66:69:12:cb:68:b6:67:e6:dd:3e:9b:d2:0c:27:9f:e8:
01:d9:51:38:bd:80:76:d3:88:bc:de:d6:87:99:ba:b1:ac:5a:
af:5e:37:92:59:7b:ac:51:4f:74:97:d8:a3:08:4d:1a:d8:36:
20:a2:f3:6e:3f:f9:5f:fe:b2:8b:5e:d0:60:47:02:49:48:90:
37:78:5e:44:44:85:1c:86:de:fa:1f:fb:c4:d0:54:47:5c:da:
4c:f5:3f:27:9f:96:08:e0:88:98:d7:0f:78:b7:71:31:82:08:
d6:ed:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:08 2026 by rpki-client