Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: MwiISDM9Yz+qTDgTb7Z7IztWGWN9PNjRvToeG3zCWI8=
Subject key identifier: 7E:42:3E:8B:EE:CB:76:39:F5:D1:2E:B1:47:8D:90:CE:27:2D:93:71
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 019F965BFC4EFD1526E78F48F4E9E3A61AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 23:00:38 +0000
Manifest this update: Fri 24 Jul 2026 23:00:38 +0000
Manifest next update: Sat 25 Jul 2026 23:00:38 +0000
Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: GiTzzCc2PQIHxMlpeOMLPx1GK3dlx5AJ/CP9tT+NAWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:fc:4e:fd:15:26:e7:8f:48:f4:e9:e3:a6:1a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Jul 24 23:00:38 2026 GMT
Not After : Jul 25 23:00:38 2026 GMT
Subject: CN=7e423e8beecb7639f5d12eb1478d90ce272d9371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:e0:5f:8f:23:2a:7b:52:bc:d1:c0:e0:90:
b9:70:0d:c1:12:60:43:59:aa:63:06:33:41:f6:66:
95:19:8b:76:86:2b:2b:ff:b1:07:23:28:58:03:f4:
c2:70:82:00:41:4d:a1:2c:e6:0c:5d:4f:dc:48:4e:
7b:bb:1c:71:69:ec:ee:06:e9:23:aa:ba:a9:95:9c:
95:42:81:db:79:29:28:0e:4c:ff:e8:84:4a:ff:8b:
9c:ed:02:7d:5a:2b:76:1b:32:e2:ad:e5:63:ae:56:
f2:ff:65:fd:45:9f:55:3a:4b:11:9d:12:82:b6:e9:
4f:bc:70:06:65:02:e5:1a:f9:58:ef:48:bc:88:05:
7e:c6:5f:34:05:d6:c4:c6:95:c8:7b:3f:d3:e5:32:
1f:1e:c8:34:c3:7a:1c:59:0f:90:c4:29:d4:eb:55:
b8:42:3e:0a:54:bf:f6:56:93:87:06:60:29:a9:cd:
6d:ae:1b:0a:00:86:b4:7a:0f:b3:cc:72:84:a2:40:
a1:20:94:83:17:2c:ca:ae:a5:7a:22:52:29:8e:46:
d1:c7:df:31:d3:b4:04:be:3f:9a:64:d0:e1:76:74:
cd:e3:04:a6:82:03:c6:b1:48:e6:b9:ee:27:4a:d0:
af:20:ef:8a:95:c1:05:25:b9:02:3f:a5:81:0e:e0:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:3E:8B:EE:CB:76:39:F5:D1:2E:B1:47:8D:90:CE:27:2D:93:71
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:d4:49:e2:fb:92:d8:9f:a6:f1:d9:9f:35:42:1b:07:5e:
a2:28:6e:5a:eb:4e:d4:7f:d9:04:83:b6:56:86:98:30:a5:00:
ed:ff:f5:66:d0:db:30:cc:31:4f:d1:dd:6c:65:dc:46:7d:a4:
26:32:92:94:ce:b9:e6:41:de:a6:24:b6:0f:84:89:d9:10:ed:
49:7e:6b:e6:a6:6f:6c:f9:bf:05:45:40:74:0b:00:f8:c4:de:
72:8d:e5:4d:d1:05:ee:7f:fe:96:8a:3e:b8:ff:cf:32:d7:30:
93:ca:07:26:3c:3c:2e:64:5a:01:d1:a2:ec:cf:d1:ad:a3:42:
8e:d7:84:2a:50:2e:22:7c:3b:3f:92:0e:e4:30:8d:35:c2:56:
c1:81:f9:23:3f:e9:f4:60:fe:65:15:76:28:39:85:56:d6:fa:
41:47:24:3f:f6:0e:13:3b:24:7e:e6:f0:29:11:71:89:8b:d1:
3f:02:03:cf:4f:da:fe:40:a6:15:41:3f:97:58:21:3a:89:a0:
f3:a6:84:11:39:cf:8f:ba:53:03:a3:e0:6c:42:e6:fe:92:97:
91:e1:0d:1a:6d:1b:a0:f0:8e:94:eb:9b:79:36:bf:a9:9e:09:
62:3c:98:3d:ef:e4:b2:10:da:5e:17:61:51:94:85:07:40:80:
26:d1:8d:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WW/xO/RUm549I9OnjphqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYTYxMDQzNTQyNDg1MDk2YjBkZjQzNTFjYzBkYTk3N2Yz
NzcwZGQwHhcNMjYwNzI0MjMwMDM4WhcNMjYwNzI1MjMwMDM4WjAzMTEwLwYDVQQD
Eyg3ZTQyM2U4YmVlY2I3NjM5ZjVkMTJlYjE0NzhkOTBjZTI3MmQ5MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPHgX48jKntSvNHA4JC5cA3BEmBD
WapjBjNB9maVGYt2hisr/7EHIyhYA/TCcIIAQU2hLOYMXU/cSE57uxxxaezuBukj
qrqplZyVQoHbeSkoDkz/6IRK/4uc7QJ9Wit2GzLireVjrlby/2X9RZ9VOksRnRKC
tulPvHAGZQLlGvlY70i8iAV+xl80BdbExpXIez/T5TIfHsg0w3ocWQ+QxCnU61W4
Qj4KVL/2VpOHBmApqc1trhsKAIa0eg+zzHKEokChIJSDFyzKrqV6IlIpjkbRx98x
07QEvj+aZNDhdnTN4wSmggPGsUjmue4nStCvIO+KlcEFJbkCP6WBDuBoZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5CPovuy3Y59dEusUeNkM4nLZNxMB8GA1UdIwQY
MBaAFL2mEENUJIUJaw30NRzA2pd/N3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xOTY2ODktMmRiNy00ZTgwLWI5MmMt
M2EyYWQ4OGRlYWRlLzEvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xOTY2ODktMmRiNy00ZTgwLWI5MmMtM2EyYWQ4OGRlYWRl
LzEvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINDUSeL7
ktifpvHZnzVCGwdeoihuWutO1H/ZBIO2VoaYMKUA7f/1ZtDbMMwxT9HdbGXcRn2k
JjKSlM655kHepiS2D4SJ2RDtSX5r5qZvbPm/BUVAdAsA+MTeco3lTdEF7n/+loo+
uP/PMtcwk8oHJjw8LmRaAdGi7M/RraNCjteEKlAuInw7P5IO5DCNNcJWwYH5Iz/p
9GD+ZRV2KDmFVtb6QUckP/YOEzskfubwKRFxiYvRPwIDz0/a/kCmFUE/l1ghOomg
86aEETnPj7pTA6PgbELm/pKXkeENGm0boPCOlOubeTa/qZ4JYjyYPe/kshDaXhdh
UZSFB0CAJtGNhA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:21 2026 by rpki-client