Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
File: VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft (raw, json)
Hash identifier: B29evpkFVL2aAnIGyZqBkV/TefWCeBJXfXKWpby3iFk=
Subject key identifier: B0:CA:F3:DF:65:3E:EB:44:BC:AA:C7:80:FD:F5:CD:D9:96:EE:F5:75
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F95497911EC703C28A5D1FB599CD3E351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:48 +0000
Manifest this update: Fri 24 Jul 2026 18:00:48 +0000
Manifest next update: Sat 25 Jul 2026 18:00:48 +0000
Files and hashes: 1: 0nv-S98ulLoBxUbeunIyyHswlb4.roa (hash: wXc4tA/MdxZd0ahPnwNsbJs8ojwvndGATxFJmx4jZGI=)
2: 4F4qBS1aUOeI4r2IYjZ440HEYYc.roa (hash: 8Hh9bMFx7Obxr6Uz1wbDd5w4WNADW1KEkIRWrr5hPME=)
3: 6S9TC5KFrvNh_FP--N7LB0uDWDk.roa (hash: /ZidtI9Los7lnP2xwos5GWLgFkE8A5plIAVg9Rs5yOE=)
4: AesIsA5zD6TDjr3LqtdVTNdYf3I.roa (hash: vyS4qfd1NHAIdM7TEHjC217Lv2lF89k5Wv6PxPzeJUs=)
5: OdBmG6fU-UEhnEKntxCaonyyB4w.roa (hash: zZOVEl4vhmKrOMSZUOhczKKn2MWTdVMJKBavMTbZMl0=)
6: VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl (hash: bSOU22CPdC5iN1l/8CafhQJenagpJF1HSL3XLzA8qlA=)
7: mFDb7QhlFMpJcx21UYZqsSeYD7w.roa (hash: tW4kQqWznqKEJSkh3cW125W6koEqfnSDc+Z1EK7o2js=)
8: sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa (hash: 2uUaKaqnXjYRfBDPcREAVlMI7n+cIkRs0thYn8PfX5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:79:11:ec:70:3c:28:a5:d1:fb:59:9c:d3:e3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 24 18:00:48 2026 GMT
Not After : Jul 25 18:00:48 2026 GMT
Subject: CN=b0caf3df653eeb44bcaac780fdf5cdd996eef575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:23:af:b9:2d:8c:ab:06:7c:9f:5c:5b:84:
59:91:08:7e:51:83:36:b2:ad:ff:c9:5f:01:1e:8a:
b4:a4:86:84:69:ab:68:b1:c7:3f:a4:38:4a:21:cc:
6e:9f:61:9a:4b:17:cd:5b:39:96:6e:cd:b8:9d:bd:
c6:d9:7c:9a:0c:c7:98:d8:b6:f2:61:d8:b8:41:75:
23:99:85:45:e7:be:73:ba:8b:ca:2e:c4:c3:2f:59:
dd:0e:ca:7c:c1:f8:a2:f5:8c:86:0b:ba:2e:5d:9b:
27:f9:c6:75:30:03:b8:a8:c3:a8:94:a8:d9:75:b5:
43:40:ff:1c:a8:fc:d9:82:56:96:21:e0:8b:ea:6a:
cc:db:41:e5:3a:56:2c:e5:c2:20:2e:48:ea:7b:3c:
a4:27:6a:47:35:2d:d6:45:13:5d:cf:e1:0b:4d:25:
b7:60:d5:82:3a:14:70:b5:26:bd:9f:64:1f:c9:ea:
f1:93:9e:f7:51:e6:10:ac:d6:5f:95:7e:58:c0:e7:
2a:ce:de:4b:00:0d:a0:87:b7:4f:64:36:27:d5:f3:
5e:23:27:3c:85:d8:ca:99:95:cd:60:11:e2:0e:40:
ab:2a:4b:ce:dc:ef:e9:fa:41:12:5f:9a:17:30:48:
86:7b:65:2e:3c:b9:5d:8f:c5:ea:cb:ed:cd:29:7b:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:F3:DF:65:3E:EB:44:BC:AA:C7:80:FD:F5:CD:D9:96:EE:F5:75
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:13:93:20:53:17:ca:3c:7b:d4:46:61:34:58:95:35:0c:3c:
44:59:f7:10:e9:71:ac:ce:47:a1:1b:76:33:0d:ce:2c:d6:b8:
77:e8:7a:36:70:24:db:8b:08:75:1a:50:71:2f:e1:39:a5:0a:
c6:b3:b6:fa:95:ac:91:c7:8e:2a:d7:79:26:05:a9:36:0a:ad:
4a:24:9b:1b:66:02:cf:10:47:aa:17:79:65:61:97:ca:c8:43:
6b:96:0a:f6:48:27:7e:19:36:a8:1a:91:da:d9:14:dd:92:cb:
6e:37:3a:d1:b3:bc:7b:0b:86:68:49:5b:94:fc:a0:4a:da:81:
25:96:95:d8:fd:55:29:86:c7:32:22:69:12:c6:67:5a:0c:36:
06:ed:d4:89:3c:ba:c7:98:89:5f:8a:70:2d:51:e8:fb:fc:9f:
16:f6:64:74:b8:91:a6:f2:31:da:a7:70:9a:11:08:ab:21:a7:
8a:7d:87:e8:5f:52:cf:24:2a:e7:ed:9a:ab:54:47:11:d2:5a:
cb:f5:82:e0:72:85:a2:a3:67:d5:5a:d4:c2:d5:f2:20:7d:40:
99:47:10:0b:83:de:9d:2d:7e:30:01:05:6f:85:4e:9d:b6:49:
ce:d6:e4:78:79:4b:8d:88:d1:81:72:6b:42:ff:27:7a:20:56:
2e:fb:0d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:35 2026 by rpki-client