Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: B8ozoJKotoCJbi6JIVJaUipzaKXH15p+29ncWYdJPyg=
Subject key identifier: E4:C7:CD:A4:16:A9:0C:76:2A:81:7E:D3:3E:E5:D4:8F:A9:26:73:89
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 019F9248C32A5E1B9A2ED55A05AFAE12A81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 195A
Signing time: Fri 24 Jul 2026 04:01:09 +0000
Manifest this update: Fri 24 Jul 2026 04:01:09 +0000
Manifest next update: Sat 25 Jul 2026 04:01:09 +0000
Files and hashes: 1: 2HdBpWh-50_goW8h6khUnhcxRKk.roa (hash: 9TImXcQ/0dWYKklrZF5PPoqL8egVUtFJy8Sg7tiR7+A=)
2: MoJrBXKuH1WW-h36SgH6MXEtMuw.roa (hash: 27UYuMl5BsEFFPa19TTObdCXrf6pW5VozM0WcapM9K8=)
3: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: vnZVEUYL7JCDM/pwEjs7L9DeN67S5QRzPx6Ao4xx4dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:c3:2a:5e:1b:9a:2e:d5:5a:05:af:ae:12:a8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jul 24 04:01:09 2026 GMT
Not After : Jul 25 04:01:09 2026 GMT
Subject: CN=e4c7cda416a90c762a817ed33ee5d48fa9267389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:3c:7f:d3:e0:5e:fd:87:42:5f:95:8b:b7:
b5:41:fa:ea:ab:84:5a:95:d8:ac:94:77:7e:44:bf:
6a:f1:63:06:df:ab:d0:1e:45:94:63:5f:b9:7a:4c:
5c:01:1e:45:a9:4a:86:a0:27:0b:ff:8e:13:7b:ad:
c3:ad:94:23:01:1a:aa:00:e6:28:c3:ca:41:49:8c:
14:f5:0b:63:0f:12:37:d2:37:88:ab:e0:6a:15:e4:
6f:3c:05:2c:31:92:4a:2d:71:86:ef:ab:f9:c2:9b:
45:38:e3:b0:07:52:93:92:b5:97:84:84:13:08:28:
91:09:cc:a1:da:49:44:60:4c:ea:20:9e:a8:fe:f1:
b6:03:75:75:80:23:b7:15:61:38:f2:05:f9:04:9d:
cb:fd:88:51:40:35:ed:45:07:48:ba:3c:21:e8:41:
5f:9a:04:0d:58:38:80:3d:ac:0d:34:70:9a:8e:06:
ce:06:e2:e6:b3:27:00:ee:79:33:f0:ac:73:67:5a:
93:25:44:27:67:27:a4:86:b9:27:2c:cb:1e:ae:c0:
79:a8:dc:b1:f3:a9:23:b5:36:66:19:a5:e6:e5:d7:
64:7f:db:fd:3f:d8:82:e6:de:d4:50:52:5a:34:22:
01:45:6f:e7:a6:c3:bb:fb:3b:d8:16:f8:4f:8a:03:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:CD:A4:16:A9:0C:76:2A:81:7E:D3:3E:E5:D4:8F:A9:26:73:89
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:ef:1c:e8:b9:0c:8c:7e:65:8c:7a:6f:f2:0b:2d:f1:94:
31:46:ce:89:e2:e5:47:e7:76:24:6e:7d:63:37:de:64:8e:45:
56:98:b7:d4:fb:e7:65:f3:db:d6:75:55:c1:d3:0a:98:1a:80:
c2:59:b5:33:dc:e2:27:90:cc:d3:1e:09:76:54:78:0e:ee:a2:
f9:83:82:e7:0e:d0:86:37:9a:e6:a9:63:08:79:5e:e7:a3:23:
cb:3c:8b:9e:93:76:e6:0d:36:02:d3:f8:ae:7c:43:4b:18:b8:
cc:2a:31:66:23:4c:4d:b1:4e:12:0e:d1:63:82:78:9f:d0:8e:
0b:a1:34:a8:db:01:b5:6f:5b:81:e6:b6:47:2f:e0:d2:81:13:
cc:ea:b9:18:4b:e5:71:5b:50:7e:d4:00:a9:d4:b3:a6:c4:7f:
93:51:86:3e:8f:82:2d:4b:df:25:12:d7:a7:45:03:d0:9e:50:
2b:7b:6f:ba:4f:5f:e6:d1:24:f2:69:5e:70:dd:30:f2:04:04:
c4:fd:ba:8a:1f:16:6e:57:88:5c:98:df:91:e7:3f:75:30:c2:
10:93:f8:e9:be:ca:65:0f:55:fb:74:f3:68:67:8b:c5:6b:45:
6b:45:23:e7:c8:b1:0c:6d:8f:87:46:d3:0c:d3:ec:f5:ce:e9:
cc:9c:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:03 2026 by rpki-client