Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: W4PYvErDCm0zxoMYquc5gPoYxSWF+2aBihqEYDPR+pc=
Subject key identifier: 1B:C1:3C:28:FF:DB:A7:DB:9E:56:D6:F1:24:02:24:78:06:9F:93:8A
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 019F916D6157DA45703D78E81D47FBD29DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:32 +0000
Manifest this update: Fri 24 Jul 2026 00:01:32 +0000
Manifest next update: Sat 25 Jul 2026 00:01:32 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: qT5lFDQ8X1WLY6roqvxQGSnfHu0QTNhprdFX72aAUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:61:57:da:45:70:3d:78:e8:1d:47:fb:d2:9d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Jul 24 00:01:32 2026 GMT
Not After : Jul 25 00:01:32 2026 GMT
Subject: CN=1bc13c28ffdba7db9e56d6f124022478069f938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:5a:9c:a0:e1:05:d5:2c:e1:e1:30:08:be:
2f:5c:d8:bc:81:ea:7e:0c:89:d5:42:95:77:5e:b1:
10:bd:49:fb:fb:4e:ec:b6:27:77:3e:84:d2:83:ed:
e7:37:d7:f2:d3:53:f7:f2:03:b7:f5:05:5d:55:88:
6b:c4:d6:21:af:f5:58:5a:72:88:55:5d:cb:f2:6c:
52:5f:ab:48:d1:86:39:5d:7e:76:12:92:19:13:c7:
02:11:18:7c:8e:4e:3e:21:98:0d:21:77:1f:3b:72:
97:1b:04:b1:1b:1c:56:62:ef:7c:6e:4a:b4:96:3d:
43:46:4f:96:0e:04:e6:5a:7b:9f:47:d1:44:b7:8a:
9c:f5:bb:f0:bb:0d:c4:8f:37:80:ee:7d:18:fa:af:
f5:72:e8:3e:d8:01:4b:9c:8c:15:90:22:27:22:ba:
4c:2a:6d:9e:1d:71:18:e5:b6:c9:e3:50:97:65:92:
b1:02:1c:bf:7d:02:5f:b8:5f:7d:79:38:d4:a6:90:
5a:36:50:50:49:3a:1f:39:75:0a:c9:d7:ec:13:6e:
27:5d:2d:2d:88:c7:a5:d6:e2:5f:32:61:b1:f8:68:
a8:01:cc:ea:6d:18:bb:4d:01:83:85:6b:eb:fe:01:
80:0b:ea:60:54:e0:5e:6b:ff:a2:b9:82:11:16:b0:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:3C:28:FF:DB:A7:DB:9E:56:D6:F1:24:02:24:78:06:9F:93:8A
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8a:c6:9e:a5:8a:aa:08:6a:dc:2c:5d:9c:b7:74:8a:81:0a:
9d:54:2c:6a:e5:e5:b0:cb:5c:e7:55:67:51:50:40:6e:82:07:
6d:9f:32:32:22:83:65:de:8c:a1:ee:e7:e1:0b:ef:4a:be:3f:
ea:1d:29:43:ca:b7:b7:2b:52:27:54:17:b3:57:ca:f4:1f:0a:
5c:78:30:c4:f3:c1:b5:06:33:98:cb:06:12:01:7a:0d:b5:b2:
73:0c:c1:19:51:99:a6:28:54:45:6d:58:2a:25:8a:3b:d8:68:
30:d6:79:83:6e:f8:09:5f:58:db:1f:f1:9a:ac:87:1d:b6:d7:
9f:a9:10:f0:14:f7:6b:b3:ab:e5:a3:d9:1f:75:35:d8:22:28:
36:84:3c:d4:ec:d6:2d:1f:45:4e:b1:c0:46:6c:90:e1:1b:8f:
98:f3:f3:20:8e:f1:b5:47:49:02:bd:20:58:21:66:b2:43:86:
62:cd:38:1b:48:3d:91:78:c8:0c:e2:12:ce:31:42:c3:1e:2b:
a7:7c:e6:a2:f4:62:80:7b:16:63:b9:68:6f:8d:43:06:86:5d:
9b:80:a9:f6:3f:f6:6b:27:2c:fa:e3:ae:90:b2:76:9e:95:f7:
cf:d4:65:86:80:10:79:a0:a7:d1:19:7f:ac:85:ba:ad:76:f4:
cb:90:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:13 2026 by rpki-client