Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: jsC41DNcJ73GUsDnfvE+vwb+AXvf68kqu2+HIS5O6n0=
Subject key identifier: A3:22:C8:B2:25:3D:EE:30:B0:09:E6:2E:00:E0:FF:5F:D1:84:64:FF
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 019F8FECB5C2831D5525A90EA95070253DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 0D33
Signing time: Thu 23 Jul 2026 17:01:22 +0000
Manifest this update: Thu 23 Jul 2026 17:01:22 +0000
Manifest next update: Fri 24 Jul 2026 17:01:22 +0000
Files and hashes: 1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: OiqmT5Tb3iqLOZSNC4WFwV0Dk1sSrNB9fEN86zKYNOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:b5:c2:83:1d:55:25:a9:0e:a9:50:70:25:3d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jul 23 17:01:22 2026 GMT
Not After : Jul 24 17:01:22 2026 GMT
Subject: CN=a322c8b2253dee30b009e62e00e0ff5fd18464ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:f1:0f:44:1e:d4:c6:98:ce:bd:7c:e3:2c:
07:97:c2:18:f2:2a:d1:55:c1:11:d1:9b:1a:65:f5:
8f:d3:da:3e:c4:ea:03:0f:30:f6:a8:f1:f9:32:65:
b1:16:9d:6a:de:0b:76:8b:41:be:4b:f3:d8:91:2b:
25:d2:10:74:7c:32:44:e0:09:9c:fd:88:f1:7b:a1:
6f:3a:10:e9:66:51:b8:e0:c2:a7:4c:6b:36:78:52:
c8:88:fe:99:39:89:7f:04:10:ad:99:42:a9:22:0f:
00:51:d1:12:9c:7c:e5:8a:9b:02:f2:21:dc:f5:37:
bc:51:a4:63:ae:83:5c:5b:ee:e9:5d:fd:1e:73:e2:
64:7c:9e:fc:1b:cb:81:57:f1:03:78:17:87:85:f4:
e0:8c:8a:fb:02:d5:57:18:af:9d:a0:86:ac:7c:73:
aa:9b:ff:62:f5:5c:d9:00:95:41:20:aa:1b:f9:5f:
7b:cd:3c:d5:1a:6c:56:82:d5:68:aa:d7:49:c2:aa:
0f:17:45:ad:a0:2e:8a:a5:d9:05:12:f8:77:33:f1:
0e:d5:af:51:7e:5f:e1:50:c2:f7:7c:e5:75:fe:bd:
21:e4:d6:b1:92:da:2d:11:df:0d:68:5d:e0:5f:d7:
6f:9f:af:53:3b:93:97:77:81:96:c7:af:f2:7e:a5:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:C8:B2:25:3D:EE:30:B0:09:E6:2E:00:E0:FF:5F:D1:84:64:FF
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e4:e7:98:73:39:c6:52:08:85:9c:20:8b:b0:cf:ae:d6:aa:
3e:af:00:3b:a0:c3:a6:18:84:9e:67:32:38:e1:6d:7a:0a:7b:
b1:0d:f9:fe:46:e1:fc:4a:df:81:ef:77:78:19:a8:2d:91:a2:
21:3d:54:4e:ba:0e:97:86:11:71:e1:8e:3d:fe:ad:ab:e0:9c:
6e:e5:c8:1f:2e:c9:fc:c2:ad:bc:5f:82:08:df:b9:87:c0:20:
41:12:e0:96:31:a8:b5:28:55:0b:43:be:ba:51:13:8f:39:99:
0c:9d:9b:18:60:07:bb:7e:c6:fd:e8:db:77:c1:60:b3:c9:75:
c9:a4:e9:77:0e:bf:f4:d7:e4:07:5d:c9:3c:66:20:4f:6c:62:
a7:27:85:cf:e5:ff:eb:aa:5c:4c:66:32:6e:ef:ee:02:20:ce:
a2:3f:44:27:d7:b3:56:c2:93:bc:73:ae:d7:32:87:4c:de:d2:
18:37:f6:20:c9:af:ea:4f:85:14:15:af:48:a2:fd:73:fa:7d:
15:2e:66:17:06:27:e5:06:4f:07:57:3c:13:2e:3f:2a:60:04:
cd:be:25:57:08:14:35:fe:02:b3:fd:8e:fa:80:d1:8c:77:5b:
66:74:44:6e:93:0b:ad:5a:36:6d:2a:ea:d2:63:3f:2a:bd:b5:
37:c3:f6:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7LXCgx1VJakOqVBwJT3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlM2Y3NGYyYjZlNGUyOGU5ZmY2Y2EzY2NhM2E1ZDc4Y2Ey
Y2FkNmEwHhcNMjYwNzIzMTcwMTIyWhcNMjYwNzI0MTcwMTIyWjAzMTEwLwYDVQQD
EyhhMzIyYzhiMjI1M2RlZTMwYjAwOWU2MmUwMGUwZmY1ZmQxODQ2NGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJzxD0Qe1MaYzr184ywHl8IY8irR
VcER0ZsaZfWP09o+xOoDDzD2qPH5MmWxFp1q3gt2i0G+S/PYkSsl0hB0fDJE4Amc
/Yjxe6FvOhDpZlG44MKnTGs2eFLIiP6ZOYl/BBCtmUKpIg8AUdESnHzlipsC8iHc
9Te8UaRjroNcW+7pXf0ec+JkfJ78G8uBV/EDeBeHhfTgjIr7AtVXGK+doIasfHOq
m/9i9VzZAJVBIKob+V97zTzVGmxWgtVoqtdJwqoPF0WtoC6KpdkFEvh3M/EO1a9R
fl/hUML3fOV1/r0h5NaxktotEd8NaF3gX9dvn69TO5OXd4GWx6/yfqW+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMiyLIlPe4wsAnmLgDg/1/RhGT/MB8GA1UdIwQY
MBaAFL4/dPK25OKOn/bKPMo6XXjKLK1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzIt
ZDA5OTYxN2JlYjU2LzEvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzItZDA5OTYxN2JlYjU2
LzEvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOTnmHM5
xlIIhZwgi7DPrtaqPq8AO6DDphiEnmcyOOFtegp7sQ35/kbh/Erfge93eBmoLZGi
IT1UTroOl4YRceGOPf6tq+CcbuXIHy7J/MKtvF+CCN+5h8AgQRLgljGotShVC0O+
ulETjzmZDJ2bGGAHu37G/ejbd8Fgs8l1yaTpdw6/9NfkB13JPGYgT2xipyeFz+X/
66pcTGYybu/uAiDOoj9EJ9ezVsKTvHOu1zKHTN7SGDf2IMmv6k+FFBWvSKL9c/p9
FS5mFwYn5QZPB1c8Ey4/KmAEzb4lVwgUNf4Cs/2O+oDRjHdbZnREbpMLrVo2bSrq
0mM/Kr21N8P2yQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:32 2026 by rpki-client