Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: UTwKs9jYfjQVHI8migRP1BFNrz41O/vJ+UmMNhW3pmA=
Subject key identifier: B8:2E:AE:4C:E0:09:19:EF:73:87:27:38:61:97:31:D2:0A:CA:0C:5F
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019F94366B76B9046FAF162ACE9BD532A692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0F9B
Signing time: Fri 24 Jul 2026 13:00:22 +0000
Manifest this update: Fri 24 Jul 2026 13:00:22 +0000
Manifest next update: Sat 25 Jul 2026 13:00:22 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 9LqeVcaEgNrO8IEXL/oFvS1Y2vc0Y9d3ix82lOj/BAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:6b:76:b9:04:6f:af:16:2a:ce:9b:d5:32:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Jul 24 13:00:22 2026 GMT
Not After : Jul 25 13:00:22 2026 GMT
Subject: CN=b82eae4ce00919ef73872738619731d20aca0c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:75:d0:7e:f2:fa:a8:06:e5:89:f6:97:48:
dc:a9:29:fb:73:cc:c6:4f:e6:c0:44:d2:66:21:9a:
d0:74:50:21:cb:ba:bd:7e:7d:e6:5e:65:37:f9:6a:
12:80:b4:bb:d5:e8:50:10:3c:86:7e:09:e4:32:f8:
15:e6:e2:62:e2:63:40:c9:72:d4:95:9d:d1:c5:74:
b4:0f:5b:a6:9f:e3:ea:c5:a0:00:66:7e:7c:d6:3e:
46:26:b8:9b:85:ea:d8:58:e0:21:4c:c6:7d:36:62:
fe:0c:8a:5d:19:fd:df:fd:99:0a:d4:af:b4:f9:39:
e7:51:f8:a4:a5:81:e7:6e:b5:7b:51:96:4f:dc:d4:
57:bd:36:81:fb:38:f1:50:11:04:2d:b0:b7:23:b7:
8d:1e:84:28:38:bb:b8:3e:60:21:32:0f:cf:2a:3e:
94:b6:a7:e0:ea:02:2d:2e:a6:56:33:3d:e9:c0:70:
0d:89:20:77:7e:09:ac:27:ab:c2:86:07:aa:e6:91:
1d:19:fe:67:d3:b5:98:c9:a1:f3:18:e3:52:89:3f:
02:0c:a2:5b:32:bc:d8:f7:cf:0c:8d:3b:70:82:63:
73:1e:ca:39:16:a5:ef:b5:dd:d8:ba:66:2b:0a:42:
62:76:d6:30:a8:82:57:09:e4:e4:7d:ae:a1:e7:ea:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:AE:4C:E0:09:19:EF:73:87:27:38:61:97:31:D2:0A:CA:0C:5F
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:a4:e0:2b:13:9a:f6:a6:c4:0b:63:ee:76:49:53:9e:cc:
8f:05:94:fb:13:ed:f9:05:0e:cc:34:59:13:d4:59:18:30:6d:
5a:5c:ef:76:26:a7:e7:39:c0:10:b8:73:95:10:0a:3a:39:1f:
81:0b:89:fc:c9:f0:af:fa:93:ce:06:bf:95:9c:08:25:27:73:
4a:01:ab:75:4e:27:d0:99:c0:1d:80:e4:9d:07:a1:b5:97:f6:
5b:5e:63:c8:d1:10:41:dd:a0:06:8e:c6:f1:d5:a2:ca:e7:aa:
8e:cb:75:7b:2a:8a:6a:de:c1:16:97:f5:9e:6d:bb:e2:03:b3:
ac:f9:7a:cd:1a:ae:08:a9:5c:b4:6d:39:48:40:0a:fb:13:0b:
66:fa:a0:dd:e2:4f:86:b2:c6:64:16:24:81:b5:2a:16:b7:60:
84:00:20:ea:0d:6f:03:35:7e:9b:40:eb:70:77:f3:08:31:6a:
72:87:d9:b8:19:ea:f3:4f:97:2b:92:f8:e7:e1:f5:a8:06:aa:
0b:ee:5c:87:49:72:3d:e2:31:9a:bd:36:b8:8f:6b:d8:ce:1e:
3d:87:71:05:3e:47:6c:5b:e8:86:ac:89:91:cc:a6:01:fd:91:
19:3d:4c:ca:57:7e:46:67:ac:7a:68:30:d2:36:15:10:12:32:
90:74:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:11 2026 by rpki-client