Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: S7WFPcwkDECUqVX+SjEch2X66ag+dTYBvblr2g7yLZc=
Subject key identifier: 87:6B:8E:50:36:D9:81:1C:82:C1:12:CD:F8:39:52:2A:D0:68:35:14
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019F95B6DDC6666078DF3FFB25D25608E8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 02A3
Signing time: Fri 24 Jul 2026 20:00:17 +0000
Manifest this update: Fri 24 Jul 2026 20:00:17 +0000
Manifest next update: Sat 25 Jul 2026 20:00:17 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: gEsiizyhIoYlSru8tMvqLCJ/5lQkdY7DBmkq9p5Cryo=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b6:dd:c6:66:60:78:df:3f:fb:25:d2:56:08:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Jul 24 20:00:17 2026 GMT
Not After : Jul 25 20:00:17 2026 GMT
Subject: CN=876b8e5036d9811c82c112cdf839522ad0683514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:0b:26:11:45:2f:ca:8b:30:2f:c3:f8:88:
b0:95:75:c1:c1:f2:1b:1d:8b:4f:e2:fd:15:a1:6c:
f9:f6:5e:3b:93:70:f7:17:a1:c7:37:e0:b7:1a:51:
f5:e8:26:a8:db:48:63:5f:08:82:89:cc:4a:2a:97:
f9:7d:9d:95:83:f8:dd:44:a3:36:17:e7:3d:a6:80:
2c:31:3c:b2:e6:b3:d0:a6:6c:8c:8d:7e:b3:dd:67:
5e:a1:1d:8b:33:c3:de:e4:60:44:04:eb:33:be:59:
3e:35:66:84:42:80:65:72:ac:d2:4b:c7:b5:63:ae:
ff:07:af:d2:ce:aa:3d:71:7a:62:32:1a:17:99:33:
34:2b:c7:55:2f:3c:f3:ff:84:67:cd:5e:40:88:a5:
28:bb:eb:63:7d:fb:96:a0:00:67:c3:f5:fe:f7:91:
8f:02:90:33:03:ab:c5:ab:54:9f:82:f3:92:3c:6d:
6a:99:26:ca:29:59:25:bd:3b:b6:19:7d:11:10:a2:
85:10:c2:fa:df:f3:83:04:00:fd:b1:a2:23:0d:f2:
88:1a:34:2b:98:7c:1d:2f:c2:25:ba:49:82:4e:b0:
8f:69:83:36:07:0a:26:93:27:74:9b:70:8d:26:94:
5a:d3:4e:74:f4:7c:74:d4:70:dd:c4:b4:dd:49:61:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:8E:50:36:D9:81:1C:82:C1:12:CD:F8:39:52:2A:D0:68:35:14
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:30:a1:08:6b:d5:74:cd:18:57:d7:ff:64:96:d2:01:ed:5b:
88:90:6b:08:4a:09:ff:ed:50:a5:40:20:2f:fb:b9:bf:bc:91:
4f:6d:f0:60:23:b0:d6:53:b7:19:98:38:23:62:22:78:8b:ee:
cd:83:3a:de:52:83:ca:3a:c4:05:dd:61:bb:ab:0f:30:3c:00:
83:2d:17:ec:93:21:19:17:ed:66:64:82:d6:57:06:e8:63:33:
45:2f:c1:d9:9e:7a:fb:72:87:50:33:f1:66:0a:aa:ac:6e:fd:
94:20:a4:54:33:bd:a2:4b:e7:35:69:6f:a9:be:68:77:f2:c1:
c1:52:8f:81:59:7b:02:37:15:86:17:1a:95:64:af:c5:71:fd:
2a:c1:9b:f1:ec:bb:d0:5b:3b:bf:b4:e0:ca:ea:f7:4d:18:31:
b7:7d:bb:d9:be:eb:65:ba:29:ce:14:f1:7d:7e:f9:45:fe:c5:
51:57:80:c5:ca:1f:9f:2d:62:fa:d5:24:9a:6f:77:84:0a:bf:
0e:d5:06:0a:6a:57:52:a0:fa:fc:4b:34:27:57:ca:73:db:ed:
a5:ff:62:0d:6d:d3:62:f3:90:5e:6c:bd:0e:03:67:c8:63:e8:
7f:e8:1b:71:34:8b:cb:69:34:7b:be:c7:74:b3:c0:38:45:b3:
4d:16:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:44 2026 by rpki-client