Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
File: vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft (raw, json)
Hash identifier: U8oG6Bu8QodIfqFqTh5SkN3aKFVA4YUQpKDq2VPQO8w=
Subject key identifier: FD:A6:5E:CD:F6:D3:50:C1:8A:41:15:8A:73:A8:EE:A4:29:6F:46:08
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 019F9343E4CEE0085D04C3FD2F600EAEB077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 08:35:27 +0000
Manifest this update: Fri 24 Jul 2026 08:35:27 +0000
Manifest next update: Sat 25 Jul 2026 08:35:27 +0000
Files and hashes: 1: AU8OktUluDemDAVdWC4o1rs1CnY.roa (hash: RjEeTRpnG44Tfxlx6Pp88uWbFbQRVFzej/AZva1uDPU=)
2: Xwqqp3SPpvDNyBAEMp0e_66cQro.roa (hash: tn/0MbER8l+l1ARfId/kyPTPuy7cjy7LSRHD6/peBik=)
3: vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl (hash: 9IfkelQgWHdI1NWceA/UB4Rzo31mQQmBIRKW0KtR0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:43:e4:ce:e0:08:5d:04:c3:fd:2f:60:0e:ae:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Jul 24 08:35:27 2026 GMT
Not After : Jul 25 08:35:27 2026 GMT
Subject: CN=fda65ecdf6d350c18a41158a73a8eea4296f4608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:cb:21:a9:b0:a1:90:27:25:e4:c8:e2:43:
f6:d7:86:a0:f1:75:6f:15:b3:72:5d:1c:a7:7a:e7:
4e:05:a7:01:45:92:6e:49:7d:c1:d6:cc:b2:af:66:
8d:86:f1:e9:82:c9:80:62:2f:fc:e9:b8:85:6b:73:
aa:fd:e0:46:c3:df:af:b7:2e:aa:50:91:48:8f:c4:
fc:0d:8f:d1:79:0a:e9:63:ed:ba:38:cc:66:9a:35:
c6:e5:43:ec:f4:b4:86:1f:5f:e5:5f:fa:9b:24:49:
16:89:d2:7b:13:50:98:bb:05:36:42:09:9a:0f:a2:
6b:9c:a3:06:2d:5b:86:8c:aa:13:d1:ab:2e:c1:c6:
de:60:63:fb:8e:b9:42:34:74:2d:48:52:27:20:54:
76:77:c2:6e:37:c3:d2:64:08:2f:17:b5:d6:e4:39:
6f:8b:e3:f4:ec:33:0e:a9:3b:34:da:ad:fe:60:ab:
7e:b7:2c:9c:35:e0:0d:25:cc:da:aa:80:df:8e:75:
0c:65:9d:b9:ab:fa:e3:ef:ca:51:0e:e3:6b:33:f4:
cd:62:8d:d9:9d:7e:a3:71:d7:22:40:0d:0e:bf:b3:
b1:71:7e:78:fe:86:da:d0:0f:53:28:94:eb:8b:28:
ef:0b:7b:26:91:d2:ba:54:46:47:2d:d8:83:1d:ab:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A6:5E:CD:F6:D3:50:C1:8A:41:15:8A:73:A8:EE:A4:29:6F:46:08
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:1c:45:73:0b:30:4e:04:8f:e1:36:8c:29:24:1a:8d:36:
9f:a5:d6:cd:21:e9:e4:64:92:21:84:3f:63:aa:01:d8:66:d7:
82:21:b3:ff:07:de:5c:d8:fb:8d:c4:0c:6c:35:c4:9f:63:2c:
d5:d5:aa:e7:8d:ec:b9:a7:dc:36:1c:38:d6:2b:0a:80:5c:63:
a5:bc:3b:63:e2:9a:e5:62:0d:c7:76:f4:41:60:53:3f:a7:8b:
31:4b:e8:88:87:1d:93:70:fc:58:42:93:42:80:88:49:45:b5:
f7:63:5d:a9:6c:05:1d:59:d8:1f:00:f1:2f:ed:4f:b7:aa:71:
bf:d2:26:7e:96:75:b3:c0:b0:c6:5f:6f:1b:79:23:76:1a:32:
39:00:f5:aa:53:5d:36:6c:46:13:a4:38:df:e1:aa:73:78:10:
44:30:63:92:c2:4d:d4:c6:ed:3b:ec:54:fa:09:22:22:df:85:
d8:47:f3:12:eb:a8:8b:54:2a:5f:6e:7c:45:21:6e:21:b6:77:
11:3d:d6:8b:b0:d9:16:74:d1:9e:1d:91:0e:df:66:da:f3:a9:
2b:20:f3:db:0e:71:7a:3b:41:d0:59:90:1e:0c:a0:53:3b:76:
af:cf:e8:0f:a8:12:0f:60:a8:9b:cc:a4:56:ed:77:75:7d:cf:
1b:31:fa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:38:47 2026 by rpki-client