Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: j7gB+VZhEIWLSPU4iGm5mZ39DAvmWKWYACT06rVi42A=
Subject key identifier: 90:8E:22:71:E9:DC:39:B7:E8:83:A9:F1:66:5B:64:4E:D4:C8:7D:B8
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019F92B6126ACC82FF9B72CE42211632365D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 170E
Signing time: Fri 24 Jul 2026 06:00:33 +0000
Manifest this update: Fri 24 Jul 2026 06:00:33 +0000
Manifest next update: Sat 25 Jul 2026 06:00:33 +0000
Files and hashes: 1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: bC+j02mi/T0+hXZ6Gb+n8nLjfZpRHZ9fPPnV9Q1qqGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:12:6a:cc:82:ff:9b:72:ce:42:21:16:32:36:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Jul 24 06:00:33 2026 GMT
Not After : Jul 25 06:00:33 2026 GMT
Subject: CN=908e2271e9dc39b7e883a9f1665b644ed4c87db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:22:87:b0:8a:ab:ed:67:95:34:29:da:4c:
80:bf:49:f0:55:e1:d8:4b:be:a3:dd:f7:42:89:fc:
5f:c7:a5:46:ce:b3:26:0e:ce:45:3f:95:9d:9a:71:
99:c4:54:9a:5a:71:5b:c7:87:65:04:0a:e6:c4:c7:
b7:ba:24:09:07:20:95:6f:d3:89:b8:a3:b3:fc:88:
d8:24:e9:49:f6:4e:02:06:9e:8b:87:58:2e:77:80:
a3:4f:58:a7:35:3e:ad:fe:1a:30:88:60:30:d9:e2:
b9:76:42:cc:2e:03:41:30:ee:e3:3f:0c:1c:f9:4b:
d8:36:81:86:1e:7e:c3:25:2f:e6:b2:6a:b9:99:27:
53:4e:04:aa:02:8a:f3:d6:d5:df:ee:0a:a5:93:a1:
b2:88:2e:43:90:a4:b4:24:80:d2:e2:dc:ed:11:e4:
2f:0e:d1:b8:91:16:32:a2:f7:c6:21:d5:6f:e7:97:
f5:e5:37:21:3c:4d:38:27:96:8e:95:ac:b5:9b:10:
7c:bb:36:7f:7e:48:19:c8:51:52:08:58:8a:0f:aa:
b8:01:71:47:e3:da:59:13:e9:e5:95:10:8a:44:3d:
b8:04:fc:73:c6:b1:35:31:8f:7a:7e:de:ff:1f:5e:
ec:e6:5a:00:2c:11:03:6d:8b:5f:f4:2a:97:e6:8e:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8E:22:71:E9:DC:39:B7:E8:83:A9:F1:66:5B:64:4E:D4:C8:7D:B8
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:2b:ff:2b:6d:98:6e:39:33:29:4c:0a:e6:98:29:ee:40:
02:95:d5:f4:69:b4:12:5c:20:b1:95:4f:d0:47:8f:00:db:c0:
f9:4c:e7:6f:1b:ac:41:f6:e5:20:27:06:f6:71:e1:c1:69:6e:
79:60:9b:a2:15:35:3a:e3:84:32:27:65:f0:59:9d:ce:94:63:
e4:c5:20:26:18:1b:b9:9b:61:38:ab:b5:91:8b:8d:84:e3:ae:
0f:e4:44:aa:66:c4:43:bb:97:12:2f:be:b5:ca:1e:f2:0f:87:
00:91:be:c4:54:4e:c8:7d:ea:4f:89:f0:b8:c2:55:06:a9:d2:
db:30:6d:29:37:e8:91:28:85:84:8f:1a:d1:14:b0:5b:0f:84:
fc:d0:0c:08:81:05:b7:0a:fd:43:04:c4:c0:a3:fa:80:0c:47:
4a:f4:b1:e2:51:fc:04:df:e4:42:12:65:bf:5d:5d:6a:f7:fc:
ce:6e:e2:e9:04:af:c8:0d:73:10:a7:fe:a1:df:a1:53:54:05:
6e:49:7a:9d:b0:8f:a2:e0:b8:75:d6:c9:19:49:9a:55:3c:51:
e5:0a:9e:47:78:f2:96:ae:58:60:a6:cc:65:40:16:c0:c9:f0:
c0:a8:51:7f:98:6f:34:f4:c5:d0:20:92:58:8b:cb:08:65:d9:
da:e3:89:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SthJqzIL/m3LOQiEWMjZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTUwYjhlZmY5MGNjY2VlOWY4ZDMxMzRiNjQzODk5NmI3
ZDI3Y2QwHhcNMjYwNzI0MDYwMDMzWhcNMjYwNzI1MDYwMDMzWjAzMTEwLwYDVQQD
Eyg5MDhlMjI3MWU5ZGMzOWI3ZTg4M2E5ZjE2NjViNjQ0ZWQ0Yzg3ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiIih7CKq+1nlTQp2kyAv0nwVeHY
S76j3fdCifxfx6VGzrMmDs5FP5WdmnGZxFSaWnFbx4dlBArmxMe3uiQJByCVb9OJ
uKOz/IjYJOlJ9k4CBp6Lh1gud4CjT1inNT6t/howiGAw2eK5dkLMLgNBMO7jPwwc
+UvYNoGGHn7DJS/msmq5mSdTTgSqAorz1tXf7gqlk6GyiC5DkKS0JIDS4tztEeQv
DtG4kRYyovfGIdVv55f15TchPE04J5aOlay1mxB8uzZ/fkgZyFFSCFiKD6q4AXFH
49pZE+nllRCKRD24BPxzxrE1MY96ft7/H17s5loALBEDbYtf9CqX5o5GJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCOInHp3Dm36IOp8WZbZE7UyH24MB8GA1UdIwQY
MBaAFL5VC47/kMzO6fjTE0tkOJlrfSfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMt
YzE1NTMyYmFmZjdkLzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zNDBkY2QtM2FlZS00MDEyLTkyMzMtYzE1NTMyYmFmZjdk
LzEvdmxVTGp2LVF6TTdwLU5NVFMyUTRtV3Q5SjgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSAr/ytt
mG45MylMCuaYKe5AApXV9Gm0ElwgsZVP0EePANvA+UznbxusQfblICcG9nHhwWlu
eWCbohU1OuOEMidl8FmdzpRj5MUgJhgbuZthOKu1kYuNhOOuD+REqmbEQ7uXEi++
tcoe8g+HAJG+xFROyH3qT4nwuMJVBqnS2zBtKTfokSiFhI8a0RSwWw+E/NAMCIEF
twr9QwTEwKP6gAxHSvSx4lH8BN/kQhJlv11davf8zm7i6QSvyA1zEKf+od+hU1QF
bkl6nbCPouC4ddbJGUmaVTxR5QqeR3jylq5YYKbMZUAWwMnwwKhRf5hvNPTF0CCS
WIvLCGXZ2uOJxw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:39 2026 by rpki-client