Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: mubLsGM8mGbXlYf0kuFERZt2FhZsaR462KYJHpxuewU=
Subject key identifier: 9E:91:46:A4:CF:7F:82:E6:69:03:1C:19:02:7B:4C:29:AE:89:6B:C2
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019F916C3EF1E167B557D573F8C970FDF4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 13EF
Signing time: Fri 24 Jul 2026 00:00:17 +0000
Manifest this update: Fri 24 Jul 2026 00:00:17 +0000
Manifest next update: Sat 25 Jul 2026 00:00:17 +0000
Files and hashes: 1: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (hash: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=)
2: OUAtyJLWD9ly09U3MS7j4xCHD9A.roa (hash: erHi0XGHEY2JJ99Op+k6K6zDi3g4oDZX5oM35Z1JfGg=)
3: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: 7uuq3Nx8047+Q8UaTfwPVf/8oKpk8wNaVxc0m1jYegg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:3e:f1:e1:67:b5:57:d5:73:f8:c9:70:fd:f4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Jul 24 00:00:17 2026 GMT
Not After : Jul 25 00:00:17 2026 GMT
Subject: CN=9e9146a4cf7f82e669031c19027b4c29ae896bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:94:54:11:cb:d1:72:c4:30:a4:6f:13:e0:
ec:98:29:df:aa:96:64:cd:cd:81:86:5d:f9:b2:d1:
3a:2a:90:f2:f2:a8:f1:83:cd:ed:95:ab:cb:80:f2:
27:b2:47:ca:0f:d8:28:e7:de:6f:e5:13:5e:40:19:
63:c0:46:98:46:70:0b:ec:30:ad:16:90:d2:4e:5e:
5a:da:c8:33:d0:ff:2a:c7:16:37:54:8e:fd:ce:a3:
a2:4a:41:c5:86:1f:de:f7:3c:14:c8:40:d9:04:fd:
72:a9:04:2c:de:71:d5:bf:74:b1:f5:b2:f2:32:44:
26:b8:23:01:b6:a9:2d:f7:32:dd:c8:c0:ce:cb:98:
61:3b:05:d2:10:c9:7d:b8:87:4c:fb:60:31:e1:71:
18:7e:22:0b:2c:7c:9f:73:53:c1:40:b6:99:33:c9:
26:54:09:f8:13:62:b0:f2:40:68:d2:d6:7c:46:3f:
ca:98:f7:ec:e6:4f:31:8e:80:ef:ba:0c:57:3b:3b:
c1:47:14:ac:0f:44:db:03:61:82:4a:d6:ef:5d:f1:
bb:aa:7c:32:50:c8:69:bf:75:64:4b:eb:09:f1:03:
34:c7:11:71:da:67:04:0b:39:05:fc:15:5b:20:86:
e8:de:9f:4d:e0:77:93:48:1b:ee:b0:35:a4:5c:45:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:46:A4:CF:7F:82:E6:69:03:1C:19:02:7B:4C:29:AE:89:6B:C2
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:af:65:6d:26:30:8f:f2:11:41:b2:29:37:6b:f2:5c:0a:
79:08:b6:47:32:2b:6d:4c:49:f0:a8:6f:57:b9:d4:56:81:ce:
a7:11:3d:8c:d1:8f:3a:4f:c6:f5:11:be:2d:71:cb:32:88:a9:
2c:c1:c8:07:c8:48:97:8e:9c:a7:7c:78:8b:f0:eb:33:e8:60:
0f:4b:91:c5:06:c6:29:45:eb:94:d1:36:6b:d5:7d:fa:21:1e:
10:31:68:60:5d:8b:25:c7:85:bc:01:d1:82:74:10:3f:3a:94:
d5:80:1a:9d:9e:dd:07:6d:83:97:1c:67:57:e2:7c:ab:c4:8c:
4b:1b:c7:b7:8d:89:89:95:8d:75:fa:8a:c4:77:10:0a:09:eb:
67:17:43:84:c9:60:da:5b:ef:1e:99:82:59:f2:67:5f:81:89:
40:32:c6:da:de:ee:2b:c6:11:ea:1b:87:8a:27:99:00:91:e7:
9d:01:bd:eb:aa:cc:32:61:75:45:97:53:c0:28:f8:ec:89:b7:
44:74:97:b0:dd:63:6c:f4:7f:c1:d4:00:54:a1:56:b9:09:4f:
05:ba:20:46:4f:ef:29:c8:65:48:0f:fb:9e:b2:68:5d:63:7c:
67:ad:61:1d:37:00:1c:4b:6c:b0:0e:2c:0c:e0:83:c9:a4:8b:
75:9d:e9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:54 2026 by rpki-client