Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: fUxgA0uTX/R9WWTgQf1B3myjWhbXl6Ykt8ZPbzI/spQ=
Subject key identifier: 86:55:04:A2:B6:7A:07:3E:D6:F4:65:6F:9D:B8:08:98:E1:EB:31:ED
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 019F9090925FC6B6E86EF6ECDE37D5A80D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 20:00:21 +0000
Manifest this update: Thu 23 Jul 2026 20:00:21 +0000
Manifest next update: Fri 24 Jul 2026 20:00:21 +0000
Files and hashes: 1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=)
2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=)
3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: 3QeC90f0QOrls1Gg3orQJSwnXvxvsnnwkuBBpwktJ/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:92:5f:c6:b6:e8:6e:f6:ec:de:37:d5:a8:0d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Jul 23 20:00:21 2026 GMT
Not After : Jul 24 20:00:21 2026 GMT
Subject: CN=865504a2b67a073ed6f4656f9db80898e1eb31ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:d9:9e:10:e6:a0:71:4d:79:92:6b:c5:c9:
b8:0d:9b:6c:e2:81:68:b1:18:de:2e:9d:b3:1c:26:
22:2a:83:3f:3e:8d:53:53:d9:28:31:60:73:c4:f8:
0e:75:33:5d:da:ec:ad:91:97:5d:06:ff:8b:04:56:
ab:19:23:7d:d4:d2:69:39:c0:7e:9f:17:99:98:08:
72:6b:3a:73:8a:df:79:75:1b:59:d5:e6:eb:3f:17:
4d:be:59:9e:2c:97:9b:b7:b7:0d:db:82:19:1f:f4:
bd:c6:0a:f9:8f:a2:37:fa:16:22:7b:05:59:60:d8:
65:86:ad:14:09:49:98:36:26:91:12:80:14:69:46:
85:dc:7d:8a:be:c4:c2:28:49:db:71:02:84:85:d7:
8a:78:5b:42:e3:9d:69:58:62:3c:6a:f9:f5:00:be:
3a:73:eb:a0:5a:6e:31:8e:d9:d1:92:c2:f7:90:cf:
a1:60:b1:f7:89:5a:a5:48:7a:c1:50:bc:d6:91:0f:
fb:b3:a7:f2:55:db:98:95:99:91:e3:f1:42:64:ac:
d3:bb:cb:ad:14:d2:a1:c0:92:64:a7:69:25:1d:a1:
db:75:40:42:45:ee:ce:f0:19:e7:d3:2f:78:19:db:
45:47:26:e8:ad:c7:45:8f:9f:6b:f5:77:5c:2e:c3:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:04:A2:B6:7A:07:3E:D6:F4:65:6F:9D:B8:08:98:E1:EB:31:ED
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4b:c4:1c:1d:dc:e1:4a:4f:f5:26:08:27:35:2e:f0:fb:76:
1d:78:98:06:3e:c4:67:30:27:4d:ec:c6:b7:3e:eb:0e:03:38:
54:5b:42:b5:f0:fb:40:1c:75:2b:45:41:35:ef:b8:a1:b6:e4:
4f:f2:78:3f:fa:b0:e8:01:50:fb:66:9f:08:59:ef:10:c2:9d:
a9:0a:4e:20:0b:f2:4f:01:f0:33:65:42:83:0d:e3:92:4a:45:
6c:bf:32:66:75:c7:3c:e8:60:21:0c:6f:ef:50:48:08:6a:8d:
d0:6f:db:58:76:aa:d7:3d:59:46:39:1b:91:d5:e7:65:7d:10:
36:21:ec:7f:f8:d7:9a:f8:66:69:25:ed:49:21:07:ef:56:ce:
4d:5d:92:b6:e2:34:ad:1d:f4:21:75:f9:e9:b8:71:39:ec:f2:
f5:ba:21:83:22:d3:f2:0d:63:fa:04:11:8d:c1:22:8f:b8:4e:
4b:3d:e5:fb:1b:ab:86:23:c7:f8:5d:94:8a:cb:27:c4:a1:b6:
c2:ca:79:09:a4:62:39:06:2b:5d:27:36:e8:3c:ec:46:cc:e9:
12:ff:2f:20:35:d8:f6:94:6f:70:36:1e:90:bc:3e:8f:f4:6c:
47:15:ea:86:39:82:9f:77:a9:7f:0c:7b:73:3a:8e:c7:f7:0c:
c1:f3:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:31 2026 by rpki-client