Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: /P6QhB1IKD/XCdWygW315mIieEHKbjkYeC0kYzxIBuE=
Subject key identifier: C8:7B:03:54:5C:AB:60:A9:A9:8E:9B:02:D9:0B:96:05:75:83:BB:4F
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 019F9022AD6EC366C8CAC5BE6C5D577AF06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 0134
Signing time: Thu 23 Jul 2026 18:00:19 +0000
Manifest this update: Thu 23 Jul 2026 18:00:19 +0000
Manifest next update: Fri 24 Jul 2026 18:00:19 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: +Omn1LNvZhOLTALE2+Y3D/dU4tBsekAXqh8P8bY2Tfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ad:6e:c3:66:c8:ca:c5:be:6c:5d:57:7a:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Jul 23 18:00:19 2026 GMT
Not After : Jul 24 18:00:19 2026 GMT
Subject: CN=c87b03545cab60a9a98e9b02d90b96057583bb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:6f:b9:45:c3:76:b7:dd:cc:98:06:d9:f6:
32:92:bc:c0:97:f2:8f:8f:51:97:1d:1b:56:91:00:
45:74:aa:87:e2:cf:be:e1:2e:4b:a4:2e:86:3c:1d:
53:fd:63:bb:08:5d:b5:2f:6b:44:b8:6c:6c:06:6a:
85:9e:cc:d8:d1:32:0a:c4:87:9b:47:b2:f0:cf:be:
70:ea:59:e5:de:ca:0d:1a:87:5e:2f:86:2a:be:aa:
82:a4:4c:93:09:ff:db:53:3f:b5:46:72:cb:f9:bb:
56:5f:26:c8:e8:39:6d:f3:08:40:00:11:95:55:6f:
66:57:49:57:0a:df:9e:44:a5:f4:e3:7e:bc:f5:85:
0f:3d:e1:dc:f1:09:5d:e3:ec:a3:9d:99:cd:01:55:
23:86:79:c6:89:fe:70:76:89:0a:78:54:0c:eb:fe:
c8:20:8b:33:bc:bf:4d:b4:6c:7c:0d:fc:d4:0e:19:
2a:d5:31:c9:36:86:9a:1c:89:e9:87:8f:da:43:2e:
ba:07:69:e8:8e:1d:71:6c:30:eb:15:a2:13:4b:7f:
2a:ef:34:1c:ee:2a:25:86:ad:2b:57:b5:8c:88:c1:
84:4f:db:a0:2e:66:17:b6:1d:de:ad:8c:42:5f:78:
fd:ab:c7:80:91:e5:ad:37:af:03:9a:53:24:f3:a1:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:03:54:5C:AB:60:A9:A9:8E:9B:02:D9:0B:96:05:75:83:BB:4F
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a1:ff:8e:2c:e2:9d:b3:81:a5:d7:ce:0d:a9:b5:83:af:e7:
cf:c0:2f:e9:b6:8c:3e:6b:d1:d9:ed:2d:a0:12:6e:0b:64:0f:
11:21:52:8a:05:9a:78:9c:13:3e:cb:24:5d:8f:3a:7d:d1:ed:
2e:64:a1:bd:f0:2e:9c:c8:df:44:ae:6b:a7:bc:f5:f0:f3:44:
7f:a2:cd:9c:ef:ab:96:1a:51:00:bb:16:ca:77:24:ef:7e:1e:
02:54:1b:64:aa:ac:03:ca:84:bc:89:2d:e4:2c:79:18:ef:94:
78:04:f7:6f:40:03:f0:eb:97:2e:48:0d:13:93:89:ea:03:63:
71:7f:8f:e7:e1:aa:77:0a:86:78:b8:32:2f:cb:fe:e6:ea:39:
71:52:36:4d:c3:f9:6d:6a:c6:4b:83:b0:8c:da:f1:43:4f:b5:
fe:62:ac:79:38:c5:02:10:5a:1e:bb:f2:d8:06:88:8b:cf:e4:
a8:85:6f:60:71:de:b1:f3:1f:ce:32:06:d2:83:c2:cf:0e:31:
0c:7e:3a:88:15:39:98:37:d0:06:5b:53:13:1e:d4:a6:f2:8b:
a9:3f:12:66:1c:6c:c9:6f:0f:c6:4d:ca:f2:7b:02:f7:54:6a:
c4:10:5c:de:c9:c0:95:2f:f2:77:47:58:98:85:f3:82:a4:92:
d6:5f:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:41 2026 by rpki-client