Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: NUyBdyAwljq45DJBF756jNF3BmWKUTqkwJ2rOO3LE6M=
Subject key identifier: 27:73:D2:22:CC:0B:A9:DE:2A:67:E1:FE:7C:12:11:30:88:AC:13:94
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019F8F476E9684573A56A9FE4EC50C4623CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0681
Signing time: Thu 23 Jul 2026 14:00:50 +0000
Manifest this update: Thu 23 Jul 2026 14:00:50 +0000
Manifest next update: Fri 24 Jul 2026 14:00:50 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: P97rFIx3n4m7RzpSnvUmephekJpeCdkplEj/OCCgIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:6e:96:84:57:3a:56:a9:fe:4e:c5:0c:46:23:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Jul 23 14:00:50 2026 GMT
Not After : Jul 24 14:00:50 2026 GMT
Subject: CN=2773d222cc0ba9de2a67e1fe7c12113088ac1394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:00:5f:c1:51:1c:4f:87:88:2d:f5:79:00:
29:cf:58:40:e3:ae:c3:4f:84:11:3f:79:f0:2a:2b:
1e:a0:d0:2d:66:95:7a:11:37:5e:c7:26:75:60:26:
58:73:6a:1e:0c:99:19:c1:3e:b9:ed:a7:8a:af:d1:
22:ba:d7:8e:4d:f4:97:b3:a9:16:3b:bb:7a:b2:d6:
04:a3:74:8d:fc:59:bf:ac:84:fd:37:f7:d6:67:a0:
72:9f:1d:ad:c5:26:83:a8:a9:bd:de:07:03:96:53:
79:65:30:c1:0a:3f:24:3c:9c:cc:73:90:48:7c:c6:
aa:1f:e0:73:3d:c0:c5:d5:e9:aa:dd:e7:b6:63:c3:
4d:f0:9a:02:f2:24:6d:ac:db:7b:7c:8f:07:9a:fd:
1d:2c:10:fd:c5:ea:9b:c0:35:27:d8:b2:d0:2a:a1:
55:b8:7e:af:1c:39:43:26:c4:c4:1c:6a:30:ad:95:
fb:0a:a9:c8:39:02:ce:33:3b:7d:40:0f:bd:e4:79:
25:c4:17:70:92:71:a8:b3:7d:7d:00:41:3e:ed:e1:
6d:62:3c:d3:63:7e:24:03:98:13:65:6d:b8:77:c9:
b0:38:03:56:38:41:ef:3f:e4:00:ad:d5:69:c8:53:
8a:e8:90:9f:96:f9:80:f1:77:30:58:47:09:79:d8:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:D2:22:CC:0B:A9:DE:2A:67:E1:FE:7C:12:11:30:88:AC:13:94
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:3a:ff:79:c1:ee:fa:a4:6c:67:cd:ad:37:ea:df:46:0f:
dc:9b:36:5d:86:35:32:33:2f:fc:89:82:29:a4:c8:1b:bc:09:
5e:ea:84:2d:e8:04:d9:95:43:18:ae:b5:8c:f4:80:87:47:be:
3d:42:af:6b:5c:e8:b7:0c:1d:80:64:7b:d5:9e:8c:d4:4d:71:
35:9f:f2:73:fa:b6:11:7f:ce:95:47:14:84:d6:bc:bd:ba:b8:
72:6e:b7:12:45:ef:03:95:35:ca:54:1f:d2:17:97:e3:d5:72:
8b:c9:fe:72:0b:4d:b0:75:14:53:01:22:54:d1:27:58:89:d6:
87:45:68:9c:90:6c:53:e0:01:ec:df:91:29:ad:c5:e4:7e:dc:
4f:43:6e:3b:05:d7:e8:5c:36:b8:b9:9a:71:64:d9:0f:74:6d:
4c:95:96:5e:43:5e:b7:43:d7:69:91:43:02:3d:16:04:48:24:
e1:0e:06:33:13:38:d5:ba:3e:89:5b:8d:54:82:68:cf:d2:a6:
d2:a6:4c:4d:1c:0c:b5:41:e5:b8:9a:d5:72:04:88:f4:19:f8:
30:f9:7a:a0:d6:3a:36:ac:55:51:88:97:37:df:71:96:41:41:
4e:8c:04:87:bf:3b:08:d3:95:f0:c3:79:a2:b5:99:e0:09:13:
ba:2d:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:34 2026 by rpki-client