Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier: csFd/TAeT0aELLpgC5t1vGyzFiInP6A2Dh5lKzc8RKQ=
Subject key identifier: 99:73:80:61:85:A4:85:2E:94:E6:E5:6C:B4:B4:DC:86:82:6F:45:31
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial: 019F90916EAE2CA19983DB68611D5A05D233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number: 028A
Signing time: Thu 23 Jul 2026 20:01:17 +0000
Manifest this update: Thu 23 Jul 2026 20:01:17 +0000
Manifest next update: Fri 24 Jul 2026 20:01:17 +0000
Files and hashes: 1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=)
2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: A5wW5wg0QRQ+tCdtYHFIsOw1d1SHI/rBF9AtFFN1zQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:6e:ae:2c:a1:99:83:db:68:61:1d:5a:05:d2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Validity
Not Before: Jul 23 20:01:17 2026 GMT
Not After : Jul 24 20:01:17 2026 GMT
Subject: CN=9973806185a4852e94e6e56cb4b4dc86826f4531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:2c:86:6a:d5:a0:52:35:46:b1:96:7a:17:
5c:6e:84:14:3d:86:60:4e:5f:aa:df:33:30:06:ba:
9c:30:9a:74:fe:c6:be:08:79:59:2d:cb:c4:d1:29:
9e:32:54:10:94:cf:fe:cb:f6:76:00:36:5f:7d:75:
8c:bb:da:80:0d:4d:47:81:bb:85:31:82:15:9d:c7:
21:47:7f:92:c3:40:f2:b6:b6:35:84:0b:bf:45:cd:
3b:a6:fe:b2:93:6c:86:29:82:d3:f0:85:40:9b:e2:
ce:c6:13:0e:8e:33:05:8d:42:62:ba:7f:29:10:0c:
53:f5:66:05:ca:ea:c1:43:a2:6b:02:76:20:97:f9:
e6:d5:89:56:47:da:e4:69:93:19:63:05:a0:f9:c0:
af:6b:72:b5:a1:bd:7a:f8:d3:20:5f:1b:0e:55:43:
d0:e8:ff:3c:02:3e:51:9e:f5:67:3b:82:36:9b:1c:
d3:83:d4:89:39:8d:07:ee:f6:5b:67:28:2f:78:3a:
a4:c4:d4:27:9c:ea:f2:c0:eb:63:51:fd:75:11:d2:
39:65:91:c9:7e:15:96:da:cf:f9:0a:92:f1:63:39:
93:1a:ad:a3:83:a5:28:6b:ec:5a:cd:0e:f1:df:ce:
bf:84:17:61:19:5c:82:86:fc:8a:67:1b:96:25:74:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:73:80:61:85:A4:85:2E:94:E6:E5:6C:B4:B4:DC:86:82:6F:45:31
X509v3 Authority Key Identifier:
keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:8d:2c:03:88:34:cb:2e:bc:20:39:08:b3:65:fe:dc:d2:
5d:bd:2b:54:12:5a:c2:ac:83:1d:f6:7e:4f:36:21:10:90:c1:
ec:14:b5:e3:80:a6:79:79:65:95:29:6e:b8:c1:c1:2c:4c:e0:
42:36:6a:a5:15:a7:d9:e0:d3:22:af:81:50:cc:5c:7d:02:d8:
a2:04:c8:65:70:5a:ea:73:31:17:5f:18:3b:87:bc:43:f9:c3:
6d:c9:3d:83:7f:c9:0c:8f:45:42:92:0e:2a:a1:e2:68:a1:8c:
ef:8c:e5:1f:9b:b6:eb:51:d7:fe:e4:78:e8:78:fe:bd:03:06:
ff:07:ad:71:60:c9:b2:13:d6:63:11:f3:30:3a:ff:0f:c3:4d:
ac:5d:e4:e6:fd:a2:a3:a0:56:b2:a2:7f:94:61:76:d9:21:cc:
95:13:a7:35:a9:a2:eb:f7:5a:d5:7b:42:df:a6:2f:6c:fa:15:
0e:97:64:f8:23:7f:9e:a6:15:6b:ab:f0:97:19:08:37:19:23:
23:db:57:3e:02:01:ef:7f:b2:a7:13:19:17:70:af:14:e9:d5:
c7:b9:eb:2c:93:87:1c:9b:64:ec:a6:56:8a:a6:01:ff:bf:99:
7c:e3:09:9e:75:d5:c5:66:09:91:5a:0a:e5:83:07:1f:98:7b:
4f:91:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:19 2026 by rpki-client