Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: Ni8py3kQ7XjAsJCyMPIijNx26VnGRpt8smOkvOZfWYo=
Subject key identifier: 90:A2:18:18:41:66:11:80:4B:DE:2E:C2:0B:D9:67:10:9D:5F:25:EC
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 019F95B724FCEDDB13C50961F4034FEF9953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 20:00:35 +0000
Manifest this update: Fri 24 Jul 2026 20:00:35 +0000
Manifest next update: Sat 25 Jul 2026 20:00:35 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: EjDXGXxS9wzAYT/OUcXHjLNypMUJBVAgMQZARf/Cvzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:24:fc:ed:db:13:c5:09:61:f4:03:4f:ef:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Jul 24 20:00:35 2026 GMT
Not After : Jul 25 20:00:35 2026 GMT
Subject: CN=90a21818416611804bde2ec20bd967109d5f25ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:86:c6:8b:66:b7:7a:a4:a2:8b:69:bf:aa:
7e:7b:d8:22:f7:d0:25:c4:07:c2:d2:de:b4:a8:8a:
89:d8:db:65:fc:77:db:bb:dc:fe:f5:6c:a1:1a:e6:
05:e9:77:e0:e4:72:f6:d5:8e:4a:61:93:23:f8:3f:
3d:4d:f1:ec:97:e7:48:08:13:ef:40:76:09:b0:bb:
f7:8a:37:d9:e9:0f:7f:5d:f0:df:80:4a:a9:2d:96:
05:e2:a9:cc:9f:4b:dd:4b:91:0d:7a:cc:04:cd:53:
87:75:30:0e:ab:7c:da:27:16:a7:fd:75:8e:c5:d4:
cd:af:4c:e8:1c:b6:87:e9:ee:09:28:90:fa:ec:b9:
d0:ef:8c:c8:49:9e:87:fe:95:b3:e5:0f:c5:e9:36:
d4:11:ab:7f:fa:92:08:41:c2:b6:e0:7c:b3:ab:03:
52:6d:86:f5:41:28:bc:80:28:c5:ed:23:e8:9f:97:
cb:32:06:a6:22:a4:6e:26:a0:8e:87:a1:c1:a8:9e:
cd:0a:f5:bf:13:4f:30:a5:e8:18:62:2b:d6:23:9e:
1c:03:1a:5d:b3:d1:5a:59:68:79:0e:4b:3c:0b:6a:
2a:1c:04:0c:0e:18:cb:8b:65:89:a2:cd:f2:97:4a:
d9:ae:0d:af:3b:b5:01:ab:01:53:8a:c3:6a:bb:9a:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:18:18:41:66:11:80:4B:DE:2E:C2:0B:D9:67:10:9D:5F:25:EC
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:38:a6:0e:90:d9:36:ce:39:31:40:b4:c7:98:9b:65:73:
5e:e9:0e:07:d0:01:96:ec:7d:25:11:d9:3a:02:f4:3c:f7:b8:
0a:ed:57:6d:02:6e:b7:f7:5f:64:59:14:e6:da:11:72:65:bb:
0e:4f:9f:b0:5c:2d:28:44:ec:88:3b:f0:f5:c9:d0:f9:e0:81:
80:80:83:d0:9e:43:9a:46:71:24:29:f2:d5:8e:45:19:9a:18:
9c:13:83:c0:ef:9b:3f:b2:ce:17:0f:91:2a:8d:52:eb:c7:eb:
6e:9b:5a:3c:96:74:83:2d:9c:25:d3:a9:0a:24:06:94:54:d8:
91:06:6d:52:ef:50:82:ba:c5:8e:36:06:88:0f:d7:30:58:f0:
60:d1:57:74:be:3b:b7:c9:0c:b5:24:ec:b4:c6:d2:c3:33:4a:
05:0a:2b:80:7d:04:4e:13:7c:00:f9:2a:3c:9b:4e:19:f5:ed:
67:2a:28:a8:64:8e:f3:91:67:2b:69:f3:5b:1c:64:8c:8c:22:
72:e7:72:39:da:cc:c7:d1:d9:ff:44:ad:6d:99:c9:3f:52:d1:
b5:2d:2f:5d:94:79:ed:4f:a7:42:cf:22:fd:a0:9b:14:93:e2:
29:5c:05:0b:46:40:a0:b2:2b:03:7e:12:77:b2:52:da:48:05:
ae:fc:30:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VtyT87dsTxQlh9ANP75lTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWQyMDkzNjYyNmI1NTc0M2M2NTk0NTEyZGU0MmVmOWY4
ZTkwNWYwHhcNMjYwNzI0MjAwMDM1WhcNMjYwNzI1MjAwMDM1WjAzMTEwLwYDVQQD
Eyg5MGEyMTgxODQxNjYxMTgwNGJkZTJlYzIwYmQ5NjcxMDlkNWYyNWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HOGxotmt3qkootpv6p+e9gi99Al
xAfC0t60qIqJ2Ntl/Hfbu9z+9WyhGuYF6Xfg5HL21Y5KYZMj+D89TfHsl+dICBPv
QHYJsLv3ijfZ6Q9/XfDfgEqpLZYF4qnMn0vdS5ENeswEzVOHdTAOq3zaJxan/XWO
xdTNr0zoHLaH6e4JKJD67LnQ74zISZ6H/pWz5Q/F6TbUEat/+pIIQcK24HyzqwNS
bYb1QSi8gCjF7SPon5fLMgamIqRuJqCOh6HBqJ7NCvW/E08wpegYYivWI54cAxpd
s9FaWWh5Dks8C2oqHAQMDhjLi2WJos3yl0rZrg2vO7UBqwFTisNqu5pxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCiGBhBZhGAS94uwgvZZxCdXyXsMB8GA1UdIwQY
MBaAFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgt
MWYxZGM1MmJiYjk4LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgtMWYxZGM1MmJiYjk4
LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqs4pg6Q
2TbOOTFAtMeYm2VzXukOB9ABlux9JRHZOgL0PPe4Cu1XbQJut/dfZFkU5toRcmW7
Dk+fsFwtKETsiDvw9cnQ+eCBgICD0J5DmkZxJCny1Y5FGZoYnBODwO+bP7LOFw+R
Ko1S68frbptaPJZ0gy2cJdOpCiQGlFTYkQZtUu9QgrrFjjYGiA/XMFjwYNFXdL47
t8kMtSTstMbSwzNKBQorgH0EThN8APkqPJtOGfXtZyooqGSO85FnK2nzWxxkjIwi
cudyOdrMx9HZ/0StbZnJP1LRtS0vXZR57U+nQs8i/aCbFJPiKVwFC0ZAoLIrA34S
d7JS2kgFrvwwGg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:32 2026 by rpki-client