Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: vmevbed4kIg63h/NUfNo6nwZzYDQ6Y+mKlPvsI9OcOk=
Subject key identifier: 5D:53:E0:A8:0F:3D:61:F4:64:78:F1:05:AA:6B:9A:89:8C:89:EC:AB
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 019F93C8739E116DAA7FBCB273A51DA4889C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 11:00:15 +0000
Manifest this update: Fri 24 Jul 2026 11:00:15 +0000
Manifest next update: Sat 25 Jul 2026 11:00:15 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: mqvmnfs4w1OlPZ5kaF2rwTe9xqDSNdhzhYa94/IwMQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:73:9e:11:6d:aa:7f:bc:b2:73:a5:1d:a4:88:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jul 24 11:00:15 2026 GMT
Not After : Jul 25 11:00:15 2026 GMT
Subject: CN=5d53e0a80f3d61f46478f105aa6b9a898c89ecab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:15:0e:c7:3c:4c:92:f2:8f:5a:f5:f4:40:
6e:77:f3:49:af:a1:e8:e0:1b:e9:93:3d:d7:14:f3:
bf:4a:2a:51:a5:c8:0c:fd:1c:09:3d:02:86:78:f1:
bc:63:10:67:f5:f9:c8:a1:fd:aa:cd:17:a4:99:52:
07:37:4f:01:7a:ea:e0:c6:15:4a:2c:af:41:01:57:
60:8e:48:19:2f:55:b8:82:ee:02:ca:91:df:ff:f2:
6d:43:ca:2f:5b:01:d5:f3:77:16:ac:4c:b9:0a:a0:
6e:50:89:eb:fe:25:61:aa:fa:10:50:83:6c:27:0f:
ae:d1:d1:9c:a4:21:70:84:ee:1b:06:0e:c5:bd:ba:
df:e2:b6:4c:ba:d8:82:62:51:21:58:86:59:70:80:
73:a1:e1:ea:61:39:f3:5e:10:d0:ab:fd:17:bd:68:
09:1f:e2:6c:04:3b:83:e1:91:25:ca:10:4d:a6:62:
67:28:41:67:73:5e:8a:6e:e2:8c:71:c1:ad:9d:f1:
a4:ab:29:de:85:02:e2:f1:49:b1:5b:8c:20:5a:e2:
a9:00:f1:af:71:ba:3f:30:98:bd:f7:9b:e3:a2:96:
e2:24:82:77:e4:ec:7a:8f:2b:95:43:df:69:b3:db:
49:06:9d:82:c6:6a:23:9f:7d:d7:9f:27:4c:09:4c:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:53:E0:A8:0F:3D:61:F4:64:78:F1:05:AA:6B:9A:89:8C:89:EC:AB
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:77:a8:bb:5a:62:4d:e4:76:f1:25:29:10:96:d4:23:da:1b:
38:cb:2a:37:dc:1d:c5:66:69:97:88:f6:b0:2f:82:4e:5d:2a:
3b:c3:80:84:72:af:41:09:57:6b:fe:90:c8:13:a5:af:3b:5c:
27:29:3e:cf:60:7b:38:8d:19:d4:63:e4:f4:7e:f8:dc:6e:60:
5e:92:a1:51:5d:43:9b:fc:5d:3d:dd:12:ca:70:48:01:fa:7e:
6b:fe:00:37:d8:b2:6a:2f:57:30:d3:23:3e:16:a1:60:f0:29:
04:4e:c0:b8:62:7c:52:4c:b3:d8:d1:e9:70:f2:20:cc:0c:56:
c6:0e:d9:41:6d:90:cf:26:d2:67:36:9a:36:38:a0:3e:89:e1:
23:10:6e:63:d5:0e:57:3d:ac:a8:b6:e6:d9:b0:52:ae:ac:ce:
91:0a:ae:8d:7c:72:31:5f:bc:92:47:02:72:69:27:97:fa:50:
e1:80:41:df:d3:4d:39:bc:f3:58:26:17:4a:c3:6c:21:38:e6:
a6:96:88:8d:73:20:ef:5e:6c:43:9e:f5:6f:74:a2:88:bb:aa:
8f:f2:30:36:85:ff:94:43:c0:ae:00:67:1f:89:b9:87:73:7f:
dc:ce:a0:16:11:48:4e:07:54:03:f0:29:ec:7f:bc:a7:41:d2:
e6:4b:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:01 2026 by rpki-client