Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
File: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft (raw, json)
Hash identifier: i5IWyIbGku2AAwgAF1en0Et48S2DbRm7FOyfQlGWlvs=
Subject key identifier: 05:97:7A:38:76:04:5B:0C:5D:8B:D6:01:73:59:EC:88:68:BD:1C:1D
Authority key identifier: BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
Certificate issuer: /CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Certificate serial: 019F902336821B44169EC8C37774ECF0A73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
Manifest number: DA
Signing time: Thu 23 Jul 2026 18:00:54 +0000
Manifest this update: Thu 23 Jul 2026 18:00:54 +0000
Manifest next update: Fri 24 Jul 2026 18:00:54 +0000
Files and hashes: 1: vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl (hash: +puvyVuL5X/Qj0qWlfuQnbTalVf6srwXxn0IPQNppUE=)
2: y2ErD9gPt2srsosZxZsZGcaxQRw.roa (hash: 0tcvB5250a30cb/eASboxE8tX1iGV0W6SMgOYqA9S+0=)
3: yH4YewMKblaB_L12xQ35G0SXRYk.asa (hash: nott0T0TIvklgCDjdkStX556EDcXcSa/s6c9BihWlRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:36:82:1b:44:16:9e:c8:c3:77:74:ec:f0:a7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Validity
Not Before: Jul 23 18:00:54 2026 GMT
Not After : Jul 24 18:00:54 2026 GMT
Subject: CN=05977a3876045b0c5d8bd6017359ec8868bd1c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:57:a8:b1:fe:29:56:d6:ef:77:5b:85:e1:
8a:46:33:11:85:6f:7c:c6:de:82:11:f2:46:eb:d5:
90:ad:35:19:82:98:ef:9c:d6:51:90:57:7a:54:51:
28:e7:a2:f1:a7:44:15:65:0f:06:86:c7:ee:02:e2:
b3:63:b2:9d:a4:18:61:0f:10:8f:28:0e:39:52:58:
3a:a4:c0:ec:0d:89:e2:c2:d8:7a:b3:3b:a4:46:dc:
c9:20:f5:30:ce:1a:8b:05:c3:bb:87:d4:38:de:56:
9d:d0:66:98:e7:ff:1b:e6:30:69:f5:62:1b:e9:02:
ed:34:d4:d0:db:6c:e2:35:bc:2a:d2:eb:63:eb:c2:
53:d3:d7:d1:e2:27:26:4f:e6:3a:86:08:25:12:35:
5d:5a:e6:da:86:24:ca:7e:b9:aa:48:96:7a:e9:1c:
ec:e8:0d:ef:2a:33:4e:fa:b1:56:8f:0f:46:79:29:
48:d7:62:a6:10:b4:ee:15:64:24:8d:e9:e0:05:ee:
ad:f6:5e:67:6e:67:fb:f4:d7:55:75:c1:c2:96:1e:
20:26:23:41:83:bd:e2:16:0d:f4:85:7d:60:a0:cd:
e1:c3:2c:4e:d6:41:27:93:1a:1c:92:90:e3:7e:a9:
69:0b:ac:e1:0f:14:0a:2c:8b:c7:66:f0:bd:73:fb:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:7A:38:76:04:5B:0C:5D:8B:D6:01:73:59:EC:88:68:BD:1C:1D
X509v3 Authority Key Identifier:
keyid:BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:69:e9:62:07:39:4c:81:15:ef:27:0a:b6:71:03:9b:30:85:
af:ff:df:2c:cd:05:e7:bc:34:6b:d4:aa:de:ba:89:d5:72:10:
a2:e2:37:f3:7f:24:3b:a8:53:4b:86:ed:d3:ac:c2:4c:8d:de:
24:7a:64:97:00:cc:63:76:e3:3e:79:5e:0d:bd:fb:ef:ca:1c:
a2:66:ea:64:93:1d:68:f1:64:3c:2d:ba:e2:8b:56:93:94:d8:
7a:5e:43:b3:28:8a:c9:ca:ee:20:fa:a0:9c:1c:72:7f:81:dc:
2f:0e:fa:ea:3a:a9:be:dc:04:15:4d:b1:17:bc:40:fc:eb:44:
ad:11:96:4e:24:c4:2b:37:66:04:3f:ce:29:05:0e:cb:4a:00:
05:11:97:b1:dc:be:bd:f2:63:aa:f2:48:1e:62:73:74:1a:cb:
3d:af:53:bb:db:54:b6:d7:f6:e7:42:7f:6c:17:05:07:a4:9f:
a3:2e:c5:29:88:18:a8:4a:46:68:e4:98:5c:19:f5:ef:26:3c:
30:6e:23:0b:81:cd:0b:1d:b0:55:a0:3e:2b:e6:f8:fc:f0:bc:
44:56:15:a6:47:9a:45:06:a9:f7:75:d0:c7:7a:3d:e8:9a:8b:
f1:bf:37:67:7b:24:2b:b8:5b:5e:03:8c:5c:61:1a:22:71:39:
d5:32:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:47 2026 by rpki-client