Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: w/dL1HvY0R4pRx0euh/pmSCe3zsh8LEtI73iUrq8ES0=
Subject key identifier: C4:E8:8D:9F:8C:2A:47:C3:DA:B8:3A:BC:2B:CE:C2:E5:EB:E0:A4:DE
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019F916C85CBE35C3D9D32A74B4771AC22DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 00:00:36 +0000
Manifest this update: Fri 24 Jul 2026 00:00:36 +0000
Manifest next update: Sat 25 Jul 2026 00:00:36 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: i4B8fmAYw3YVq1UpYIQIVZ6jonJ8NiZjobO9+WPWq6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:85:cb:e3:5c:3d:9d:32:a7:4b:47:71:ac:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jul 24 00:00:36 2026 GMT
Not After : Jul 25 00:00:36 2026 GMT
Subject: CN=c4e88d9f8c2a47c3dab83abc2bcec2e5ebe0a4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:8e:2f:43:11:d4:12:aa:41:45:fd:1b:03:
07:38:09:4c:14:f1:17:97:18:4f:eb:6e:57:42:d8:
f7:ef:f0:05:08:20:04:6a:73:3d:ac:22:c7:57:b2:
ad:ab:f7:09:f2:72:f5:51:6b:0f:28:28:64:a2:8e:
b7:ec:20:1b:20:ed:9a:11:a6:39:56:bb:38:e1:4e:
6b:9b:ce:92:88:90:cf:e0:81:83:20:05:20:9b:4e:
2d:36:d4:35:0f:8b:e1:b0:01:c3:a3:ad:a8:67:19:
ef:1f:7b:66:4a:0e:c1:7c:90:ea:5a:fc:d1:5c:91:
6b:ce:13:d9:4c:70:73:78:00:20:e9:d3:50:6f:cc:
61:a9:c9:32:e2:36:63:de:0b:11:85:12:93:06:0d:
36:84:5e:2e:e9:1e:2e:3c:bb:6c:26:52:fb:63:ff:
ba:35:30:f1:69:cf:79:81:0c:24:0d:51:31:1a:8d:
4a:b7:30:19:4d:1e:05:0c:91:da:3f:c9:31:d4:6f:
b4:a7:38:9e:aa:05:96:13:53:7d:c0:09:e4:1b:e8:
46:79:00:86:0d:68:48:1f:42:e3:22:d0:99:ac:83:
c7:8f:9b:1b:34:87:eb:9b:53:4c:f6:ab:d7:e3:4c:
3b:4b:f5:cc:99:cc:5a:26:c7:88:fa:54:74:de:af:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:8D:9F:8C:2A:47:C3:DA:B8:3A:BC:2B:CE:C2:E5:EB:E0:A4:DE
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:a3:fd:86:a5:37:37:72:bb:05:bb:8a:6d:96:54:40:3d:
00:9b:27:ad:d5:7f:26:40:88:74:18:e5:db:6c:b9:b8:fd:19:
af:95:46:cf:10:6b:ca:48:14:85:f6:64:df:3f:28:da:35:18:
7f:76:85:45:c3:19:cc:58:8a:bd:94:ef:3f:1c:56:8d:a4:8c:
d2:79:02:01:cc:e8:c6:b1:32:08:99:ef:81:9e:0e:79:71:88:
75:2e:1e:12:f6:a5:36:08:8e:e4:1a:6a:e8:89:1a:2a:f6:90:
9c:c7:8e:d1:7a:0e:64:39:5e:29:e9:da:26:e4:92:55:6b:42:
ff:8e:87:ac:d7:36:5a:0e:49:41:d1:55:46:e9:86:d7:4d:e5:
91:ce:c5:ee:bb:e8:18:fe:6f:20:9a:9d:ad:a0:02:f9:01:33:
83:34:30:a1:9f:86:cd:03:6f:2c:76:8c:c9:46:f5:bf:7d:87:
b9:4f:e2:2d:90:e6:3c:5b:15:53:aa:c5:52:f5:31:9b:fd:50:
ee:88:34:06:b9:77:35:51:8a:c1:13:39:12:31:e2:2c:80:ff:
07:59:1e:38:ea:a5:aa:22:d5:a9:d4:3d:4e:e6:32:be:b4:f1:
26:0a:e7:aa:dc:26:65:fb:b6:1a:32:af:4b:4e:96:32:f0:f9:
62:62:37:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbIXL41w9nTKnS0dxrCLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5
ZTk0YTIwHhcNMjYwNzI0MDAwMDM2WhcNMjYwNzI1MDAwMDM2WjAzMTEwLwYDVQQD
EyhjNGU4OGQ5ZjhjMmE0N2MzZGFiODNhYmMyYmNlYzJlNWViZTBhNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKuOL0MR1BKqQUX9GwMHOAlMFPEX
lxhP625XQtj37/AFCCAEanM9rCLHV7Ktq/cJ8nL1UWsPKChkoo637CAbIO2aEaY5
Vrs44U5rm86SiJDP4IGDIAUgm04tNtQ1D4vhsAHDo62oZxnvH3tmSg7BfJDqWvzR
XJFrzhPZTHBzeAAg6dNQb8xhqcky4jZj3gsRhRKTBg02hF4u6R4uPLtsJlL7Y/+6
NTDxac95gQwkDVExGo1KtzAZTR4FDJHaP8kx1G+0pzieqgWWE1N9wAnkG+hGeQCG
DWhIH0LjItCZrIPHj5sbNIfrm1NM9qvX40w7S/XMmcxaJseI+lR03q/5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTojZ+MKkfD2rg6vCvOwuXr4KTeMB8GA1UdIwQY
MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt
MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1
LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNGj/Yal
NzdyuwW7im2WVEA9AJsnrdV/JkCIdBjl22y5uP0Zr5VGzxBrykgUhfZk3z8o2jUY
f3aFRcMZzFiKvZTvPxxWjaSM0nkCAczoxrEyCJnvgZ4OeXGIdS4eEvalNgiO5Bpq
6IkaKvaQnMeO0XoOZDleKenaJuSSVWtC/46HrNc2Wg5JQdFVRumG103lkc7F7rvo
GP5vIJqdraAC+QEzgzQwoZ+GzQNvLHaMyUb1v32HuU/iLZDmPFsVU6rFUvUxm/1Q
7og0Brl3NVGKwRM5EjHiLID/B1keOOqlqiLVqdQ9TuYyvrTxJgrnqtwmZfu2GjKv
S06WMvD5YmI3Jw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:07 2026 by rpki-client