Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: dT027FJ/yL+Yx7NmRrzJ+RUSN/YQ78BLNUVYUMggeX8=
Subject key identifier: C3:8A:04:E8:B3:90:DA:10:37:C2:4A:E3:43:AC:79:56:29:B5:EC:D8
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 019F93C88388B5E2836CF6DC4435DBB5D5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 0BF7
Signing time: Fri 24 Jul 2026 11:00:19 +0000
Manifest this update: Fri 24 Jul 2026 11:00:19 +0000
Manifest next update: Sat 25 Jul 2026 11:00:19 +0000
Files and hashes: 1: ZJ-T6ueMae72SObhWhaz9nVHF40.roa (hash: Ow4/9pV+gX/QMnh7E9AZiapSKVWWKGuqpiJHgE1l0SU=)
2: g2RgzQfRtI2o8X5sMP-NXjF8Uho.roa (hash: QHdSplXR9hrky5KPz8Vf+POncO+1O6g9pizr3/G9QPY=)
3: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: xniMYG8FbsWLK18NCeyp9FXIAnrYr4RLXyrKuQfKDVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:83:88:b5:e2:83:6c:f6:dc:44:35:db:b5:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Jul 24 11:00:19 2026 GMT
Not After : Jul 25 11:00:19 2026 GMT
Subject: CN=c38a04e8b390da1037c24ae343ac795629b5ecd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:b3:f6:e4:21:6f:7b:2d:6a:d7:58:6e:02:
da:7a:52:d4:2e:01:a0:d5:92:50:2d:c6:55:ce:e1:
a1:bc:f2:9f:ec:d6:61:1a:7d:54:b0:fd:2b:37:d4:
3d:1c:bf:e8:d1:1b:1c:31:11:6c:e1:c7:0c:ce:94:
57:08:eb:83:85:8c:d9:9a:72:f5:94:ff:4e:a8:11:
26:62:10:ec:aa:19:cc:25:cb:eb:24:ba:e3:4c:4c:
ef:8f:05:61:d5:eb:32:29:7a:26:10:78:eb:c9:3d:
12:67:56:dc:24:09:5e:3f:6e:dc:63:2c:d6:3b:63:
06:4f:4f:d4:7a:9d:16:df:17:b2:3f:19:2e:eb:59:
07:c8:a3:a3:2c:eb:b3:4b:e2:7a:06:b6:28:7a:17:
5e:71:6b:0a:08:7e:d4:e4:af:96:2d:62:ef:19:5b:
36:e5:d5:f5:30:68:44:81:58:52:82:0a:d3:3b:18:
af:e2:a3:2d:f3:9d:d8:4e:bb:71:98:6d:52:7a:44:
b5:c6:fc:9b:29:3c:e1:31:7e:63:dc:91:b4:b9:3a:
e5:33:b1:b6:79:91:ad:c8:a3:95:0a:42:9a:d5:27:
0a:7a:0d:5d:40:6d:a0:41:3c:e6:51:42:99:da:8f:
a3:7c:e0:93:6a:32:5d:ff:9b:03:99:b4:e4:3f:34:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:04:E8:B3:90:DA:10:37:C2:4A:E3:43:AC:79:56:29:B5:EC:D8
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:58:b5:b9:b0:37:5f:66:90:a8:d2:3d:03:57:be:f6:b7:fb:
3d:2d:24:5b:3b:67:25:31:da:05:26:d2:16:e8:4c:23:46:47:
8b:cf:5a:8d:08:09:8c:9b:9b:9a:1c:fa:99:ab:2e:5a:54:e1:
33:30:57:ae:03:5f:57:62:57:ba:6c:23:f7:81:d4:4b:3f:0b:
9c:e9:ce:cc:09:25:35:31:bc:bf:c3:fb:6b:d0:c3:40:91:1f:
c3:17:d3:83:f8:04:63:9b:27:59:7b:45:de:6a:01:ba:d5:6b:
84:52:d5:33:65:fc:a2:c2:ea:85:71:31:28:58:1f:f8:7f:06:
27:de:b7:f6:f9:f4:50:f6:2a:13:58:62:91:29:2d:7a:df:5e:
4b:04:c6:82:83:0c:c6:ec:6a:a5:a2:b7:f3:f3:45:b3:8b:bf:
ca:58:28:32:69:b5:41:d6:82:aa:cf:ae:57:9d:78:90:61:d2:
04:a2:ed:3e:60:db:3f:8a:de:fc:54:78:9c:f1:97:d3:f2:b0:
9b:11:10:b6:f9:fc:8f:3d:c6:05:27:75:16:79:3b:93:23:65:
ac:f1:fb:23:04:8d:93:87:5e:e9:9b:68:7c:2c:1e:ac:bc:a9:
c5:89:cf:d5:cc:5f:b5:57:d8:18:17:c7:df:03:a6:86:40:48:
75:a4:bf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:55 2026 by rpki-client