Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: MBWFYME9ZMjMcUZ/UQa4oo5QqUaAXn/HccspqWnljPA=
Subject key identifier: 7E:0F:29:3D:A1:E7:3E:F3:6B:A4:5A:17:F2:9F:FA:83:10:29:3A:36
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 019F927F36F9948F4C3AD74E038CA2DFE75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 05:00:38 +0000
Manifest this update: Fri 24 Jul 2026 05:00:38 +0000
Manifest next update: Sat 25 Jul 2026 05:00:38 +0000
Files and hashes: 1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: Yn6xSkqqZsEvC9KnAQy5rLT2nmV7P9Ip0FKWDM/r9mA=)
2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:36:f9:94:8f:4c:3a:d7:4e:03:8c:a2:df:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Jul 24 05:00:38 2026 GMT
Not After : Jul 25 05:00:38 2026 GMT
Subject: CN=7e0f293da1e73ef36ba45a17f29ffa8310293a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:a9:72:59:82:a1:f9:39:83:b3:91:7c:65:
13:d6:7c:ea:75:69:8d:7e:fe:e4:5d:c7:fc:6e:87:
bc:15:8a:80:7d:f0:2e:be:df:d2:dd:9f:0b:55:47:
44:79:7b:69:d3:aa:30:bc:2c:56:b5:3f:4e:d4:58:
8b:c4:5d:21:ea:d3:88:81:02:22:e6:27:da:b0:4b:
ac:38:5e:ff:a3:c2:2d:02:91:80:c8:7b:52:13:03:
63:e2:d8:55:d4:d1:d7:7c:b4:6b:99:fc:97:49:7a:
60:f4:cc:ba:66:97:5c:56:8f:5f:e6:ce:4e:03:b5:
b5:c8:f3:f9:30:b4:ca:30:c4:eb:50:0d:49:16:e2:
4d:77:9c:ba:25:59:7b:98:1d:9b:33:e4:18:45:ee:
32:87:d1:05:50:03:46:3d:bb:63:b2:23:44:8a:67:
0e:0b:24:4c:07:5a:e2:6c:1e:6e:28:07:26:5d:db:
aa:87:cb:2f:44:b8:88:a3:a5:97:1a:d0:11:12:33:
1a:a7:fb:8b:c9:a3:21:2c:1c:17:2f:a7:0d:dd:33:
48:27:d2:80:27:8f:de:39:c4:0a:bf:90:f0:25:74:
d9:9e:98:c6:44:f2:11:1b:a7:e5:c0:97:c2:0d:e4:
45:13:f2:ab:6e:f8:65:dc:8c:1b:6d:54:19:86:ba:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0F:29:3D:A1:E7:3E:F3:6B:A4:5A:17:F2:9F:FA:83:10:29:3A:36
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4f:bb:59:4a:27:b0:36:3e:2a:15:dc:81:7f:6a:b6:0b:8b:
0a:87:d2:a6:ca:c9:d9:2a:2c:4a:94:66:12:93:a4:70:30:7c:
7f:5e:f5:21:b1:c6:a4:5a:dd:f0:e8:39:58:c3:c7:bd:6c:f4:
f4:a9:2f:86:43:05:2c:ac:db:6b:d3:e5:a2:3c:f0:ac:8f:e8:
e7:40:c0:cd:36:7d:d0:be:f2:fb:e1:ed:41:af:56:2f:54:a9:
02:7c:06:53:17:8f:ed:e3:ac:d8:52:b6:3e:d1:fa:9d:59:a3:
a1:9e:00:e0:f1:a5:da:c1:3e:ef:72:57:cf:aa:a5:28:24:bf:
68:98:5b:ac:3b:f3:ab:0c:bc:f5:94:74:2e:19:a3:9e:4f:c1:
36:50:eb:8e:47:11:bb:11:43:10:13:2f:63:9f:89:6f:55:66:
75:c8:c0:7c:bd:20:7f:f1:67:2a:eb:80:e4:b7:34:0b:43:da:
94:5b:ab:51:33:37:a2:7a:86:21:9d:79:e4:79:9d:d5:ff:28:
e3:e7:dc:e8:f6:43:5e:b1:3b:9d:09:5d:5c:31:78:90:36:3e:
54:2a:39:bf:5a:7f:7b:31:37:9f:53:0a:29:25:ad:ad:c1:0f:
01:3c:34:c9:ce:8e:8c:b5:6c:81:df:85:91:64:da:e7:ee:ab:
6c:de:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:18 2026 by rpki-client