Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: kILSwE1FakTRa1DHeVrcRqpqR8+gu7cbm8wYcvUI6lM=
Subject key identifier: B7:A4:70:AE:2E:47:06:6B:AB:3D:9C:7C:51:2C:DA:B6:D4:51:92:E7
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 019F935BB8A71CCA3C595E401A526024A30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 09:01:29 +0000
Manifest this update: Fri 24 Jul 2026 09:01:29 +0000
Manifest next update: Sat 25 Jul 2026 09:01:29 +0000
Files and hashes: 1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: YXWisLrGyYEnPnfqs5h71/6ZnD5WNp/tvpphRnNjbuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b8:a7:1c:ca:3c:59:5e:40:1a:52:60:24:a3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Jul 24 09:01:29 2026 GMT
Not After : Jul 25 09:01:29 2026 GMT
Subject: CN=b7a470ae2e47066bab3d9c7c512cdab6d45192e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fb:4e:07:cc:86:c5:0e:89:8a:76:84:7d:95:
89:4c:e1:ce:ec:4c:08:f3:84:aa:cd:5c:a4:ef:03:
32:70:40:b6:23:94:e1:33:51:f4:35:f8:13:e9:24:
68:e0:b5:d5:80:a8:86:6f:d0:a2:72:49:d1:31:27:
5c:a4:73:6a:b3:7d:d4:10:0b:92:f3:79:02:2f:f2:
58:73:b8:54:e7:14:5e:f6:ad:e2:43:90:08:63:17:
c8:76:1f:d8:3f:2f:70:3c:ef:e6:f2:86:67:db:ad:
09:c5:94:02:ab:4f:f5:52:6d:44:1e:89:25:ff:7a:
67:f2:6c:1f:e2:3b:3f:5f:bf:70:4e:6a:c9:fc:34:
57:54:63:40:b0:1b:83:76:c6:60:7a:78:3e:3a:d6:
5e:91:bf:8d:30:9b:0b:d2:09:8e:20:0d:75:7a:a2:
e0:e1:10:e4:07:b6:e4:96:c8:4d:df:f0:e0:05:df:
27:35:c7:11:32:5f:be:8e:73:4f:a5:a0:d5:af:d2:
0a:7c:d5:63:24:ff:ad:ec:45:b1:71:3b:dd:38:5f:
6c:1a:2d:f9:ee:be:59:e6:28:dc:31:83:ae:27:c5:
41:68:f5:96:71:ae:c7:04:30:a7:ce:f2:df:e2:3d:
5b:2c:dc:04:7d:06:d0:44:7d:4f:8b:63:21:09:bd:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A4:70:AE:2E:47:06:6B:AB:3D:9C:7C:51:2C:DA:B6:D4:51:92:E7
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:54:73:c7:99:d4:45:4d:63:c4:28:4e:4e:c8:e5:fc:63:0c:
98:0c:6c:11:3a:01:ce:7c:31:ba:fa:01:d6:d7:9b:ff:fc:46:
83:f0:43:21:ca:74:90:35:4d:f6:2b:ae:bd:a6:1d:6b:90:6a:
5f:eb:04:e5:f4:e0:bd:70:9e:47:c8:81:c7:7f:ac:44:9f:26:
a7:b8:64:ea:e0:10:c6:5d:be:bb:34:0d:03:05:31:a1:16:eb:
5a:3e:67:9c:b9:d9:ee:43:4c:9d:00:89:6e:c8:8d:97:ba:cb:
7f:ba:71:b3:11:ce:b0:e0:6e:8b:6d:59:65:dc:41:51:da:0b:
6b:fc:0d:7d:d3:23:aa:cf:03:43:12:fe:ca:46:39:46:15:dd:
11:ab:aa:1b:f4:37:03:d7:cc:ce:2a:9f:3b:c9:1e:0a:20:43:
05:00:2c:02:7a:9a:14:9f:58:b8:3d:9b:fe:4e:b0:34:9c:d8:
5f:1c:11:4a:18:a5:6b:ab:82:56:1b:a0:8a:40:89:b3:af:f2:
e5:2a:da:84:af:59:9d:c6:8e:40:75:6c:b5:18:f8:68:4c:cb:
b0:cf:77:3a:2e:bf:e6:bc:bd:1e:b2:87:b9:76:a4:b7:d7:18:
1c:02:23:81:81:c8:b7:32:94:0d:07:bb:1e:0a:c9:9d:2c:87:
b4:41:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:59 2026 by rpki-client