Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: eGByV216ixixQccpJWcM1n1rVu7uOJnfo3cpz6ZyWdQ=
Subject key identifier: BA:1A:EA:CF:91:50:7A:96:51:3E:5F:08:6C:36:4B:43:60:53:A0:C8
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 019F8EA2A913BCEC757B9120F340547C0CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 11:00:52 +0000
Manifest this update: Thu 23 Jul 2026 11:00:52 +0000
Manifest next update: Fri 24 Jul 2026 11:00:52 +0000
Files and hashes: 1: CzohGtSLcmDpSrKXCjf2wQpuklI.roa (hash: oSgq7hJ4clz8JZa9p9/cu2QQ6c0SU2FQe0lIPhhVo4k=)
2: MCBjLeIbX3O5HTvShautKhz-FtY.asa (hash: BCCcq5YxV8mIaSr5yq810yZ+7NbSDQZa8OD5V47sB80=)
3: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: vPZ40jlVcQeItYolEDm/k+d080HKfC0Xmc7bmTb0O0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:a9:13:bc:ec:75:7b:91:20:f3:40:54:7c:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Jul 23 11:00:52 2026 GMT
Not After : Jul 24 11:00:52 2026 GMT
Subject: CN=ba1aeacf91507a96513e5f086c364b436053a0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:b5:10:43:71:54:52:e0:da:b2:58:7d:e3:
cb:1a:a2:5e:c5:69:04:51:ed:32:86:66:9e:59:f5:
bb:49:0d:2d:7d:27:8f:90:e3:2d:74:d9:68:ef:f5:
7d:33:71:3c:61:1d:c6:3f:d8:e7:c4:73:01:8e:ac:
66:08:b3:90:0a:12:39:d3:07:a2:f1:b3:2a:90:68:
3c:70:46:07:b8:86:a1:60:ac:37:47:d3:7d:79:b1:
bf:df:40:6d:d7:e3:64:89:c1:3e:a6:bf:b4:05:69:
e8:60:c4:5a:c5:42:ef:7b:4e:78:89:b8:f2:03:d2:
f1:83:a0:40:db:aa:1c:c6:5c:90:58:80:f0:22:a3:
2d:3a:89:ca:47:15:9a:cd:ad:d2:db:a1:33:c3:4f:
03:6d:19:39:ba:ea:66:c2:84:9a:b8:1a:12:93:57:
dc:3a:1e:ad:88:d4:2a:37:15:b7:34:b4:f7:02:9d:
ea:ce:2a:ff:81:75:f4:9a:03:ba:9a:23:86:db:a4:
9f:fe:67:2f:c4:45:fc:f8:ae:da:17:8f:03:a6:ad:
ed:55:59:bc:79:5d:0c:b0:db:2d:d3:d5:68:35:c5:
e7:e7:b7:63:5b:83:41:e4:0f:35:51:30:b7:d3:08:
a0:8e:a2:6f:1c:df:92:98:ea:40:e4:53:cf:b7:48:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1A:EA:CF:91:50:7A:96:51:3E:5F:08:6C:36:4B:43:60:53:A0:C8
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2e:ac:dd:68:60:98:30:78:7f:27:d5:4c:9c:38:95:8c:80:
aa:4b:bc:05:5a:35:9f:ee:87:5c:e7:63:5b:49:99:68:58:b4:
89:f5:47:5e:0d:1f:2d:03:e3:38:3b:1a:77:af:7c:70:5d:b7:
22:82:8c:ee:a0:67:c3:74:7e:1a:ea:3e:da:eb:13:91:4a:2d:
d5:a7:f1:b9:b4:74:2f:7d:0b:a8:f7:c8:6d:a6:5b:92:a9:59:
f6:84:c7:1f:7d:1e:e0:3f:ad:02:85:08:91:42:f4:1a:91:e5:
c0:9e:c0:2d:43:6c:4b:3e:0b:3e:78:e9:82:6a:7f:e6:a9:32:
87:18:53:9e:47:ec:36:e5:0f:2b:7a:de:6e:69:af:8e:f6:f4:
46:ab:d1:4b:8d:e3:9a:3f:d2:18:94:46:78:5d:c7:8a:86:45:
3f:9f:53:c0:8f:3f:dd:e6:07:35:9c:55:dd:96:33:ee:37:a1:
a9:98:f5:16:80:23:07:df:06:4e:57:3a:0a:17:d2:85:eb:04:
19:be:97:a3:7b:62:c3:26:55:36:05:f9:1f:2b:72:ef:cf:0c:
88:14:15:8d:30:36:dc:33:aa:93:3b:1e:31:73:8e:16:37:56:
88:0f:5c:78:9e:e4:e7:a2:db:59:97:95:c8:93:e9:16:e5:61:
64:d8:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:54 2026 by rpki-client