Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
File: VV10LVJ_lwDMAEfX1hv9gih42x8.mft (raw, json)
Hash identifier: +tdZ0A3EBKFXC6J1e314KAF5/N0QmZ+AiwAx+EbKMxc=
Subject key identifier: 43:F4:7F:3C:DC:E4:D5:57:CB:D8:50:9C:6B:EE:0B:7E:DA:FE:44:36
Authority key identifier: 55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
Certificate issuer: /CN=555d742d527f9700cc0047d7d61bfd822878db1f
Certificate serial: 019F946E0E278770543A538254D200689D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
Manifest number: 19A1
Signing time: Fri 24 Jul 2026 14:01:08 +0000
Manifest this update: Fri 24 Jul 2026 14:01:08 +0000
Manifest next update: Sat 25 Jul 2026 14:01:08 +0000
Files and hashes: 1: VV10LVJ_lwDMAEfX1hv9gih42x8.crl (hash: QAi5mBAZtuFw8Cn0MKLq3zqOtgVdXi5nTws2sPDxSOs=)
2: bwbnq1HdA4AZzkAemAt6HkUyTs4.roa (hash: wdqCH2TaxxBuj63rE4lc5Ctuv7BNWRJSr9E1thWFs6s=)
3: zIdeJERtNI4YBciW3TqnOW_FhlI.roa (hash: gb1oCn7StTANeNZVD37UKXQMlfOvC8/lLuU0st9zWGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:0e:27:87:70:54:3a:53:82:54:d2:00:68:9d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555d742d527f9700cc0047d7d61bfd822878db1f
Validity
Not Before: Jul 24 14:01:08 2026 GMT
Not After : Jul 25 14:01:08 2026 GMT
Subject: CN=43f47f3cdce4d557cbd8509c6bee0b7edafe4436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:e0:2a:4c:4f:20:eb:2b:30:18:20:a4:15:
5c:01:39:7e:bd:3b:e1:c3:d8:10:e6:8a:95:59:4b:
26:26:65:5a:d8:f2:14:25:70:d4:5d:f3:63:bc:6a:
78:79:84:40:d5:82:c4:db:a7:63:43:a7:a8:74:06:
9a:64:30:43:30:7f:50:e7:cd:77:ce:38:ed:4c:3c:
0c:89:35:e2:a6:30:e3:c5:ea:7e:0e:1f:1d:c3:b5:
17:ab:36:f3:f0:02:a9:6a:72:4a:54:18:aa:0b:be:
21:e9:d0:15:b8:f6:33:71:c1:e3:63:5a:8a:4d:1a:
2f:76:43:5a:93:33:b3:47:db:05:90:73:a5:70:55:
3a:6c:e0:bd:99:e4:f9:d8:bc:6f:e3:74:c4:28:64:
e0:c4:32:8b:48:0c:b5:74:7f:93:80:21:c9:9a:da:
96:b0:b7:5a:1a:25:a8:82:b1:d0:47:a7:b1:b8:27:
d0:b3:e2:a1:f8:71:de:a0:db:b6:9c:d8:f6:44:f8:
46:bc:c0:5e:88:57:be:7b:a1:22:2c:0b:1b:53:2f:
a4:12:b0:b1:86:ad:09:8c:17:06:ab:4d:ec:40:d1:
88:00:72:1d:6b:76:99:7b:4e:cd:b3:9b:92:0e:29:
0e:68:b7:d5:65:18:58:47:bb:cf:20:86:34:1d:a0:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:7F:3C:DC:E4:D5:57:CB:D8:50:9C:6B:EE:0B:7E:DA:FE:44:36
X509v3 Authority Key Identifier:
keyid:55:5D:74:2D:52:7F:97:00:CC:00:47:D7:D6:1B:FD:82:28:78:DB:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV10LVJ_lwDMAEfX1hv9gih42x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ff5ec9-e22e-4030-8334-d5dd46aaa401/1/VV10LVJ_lwDMAEfX1hv9gih42x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:77:df:fc:eb:7c:f3:0d:6f:52:00:b9:37:9f:e5:e2:54:82:
43:86:33:33:72:31:3a:b1:a0:4a:9a:6c:40:e4:f8:f1:a0:dd:
b7:49:41:1d:0a:2d:71:ec:c7:be:7e:bf:fa:69:a1:ab:91:0f:
aa:f8:37:90:ff:47:4b:08:20:93:b5:9e:ca:1d:71:43:fb:74:
f7:21:92:ed:e1:19:c5:d5:b4:3e:3f:e7:4e:90:70:bc:ea:5c:
34:0a:6e:c0:f4:5c:97:bf:60:89:4b:d9:3e:1d:3e:1d:09:4d:
cb:7d:8a:43:95:b4:a5:96:f1:8a:8d:04:eb:7c:bf:7e:3c:f8:
9c:61:26:79:8a:2b:47:03:0d:9f:ee:5f:2e:dd:e1:af:f4:6f:
5c:70:28:6c:62:da:23:17:b0:1a:6d:96:b9:66:dc:b5:62:0a:
37:e2:f3:dc:42:5d:cf:df:e2:a0:b0:c1:2b:a3:ba:1b:a2:58:
25:b2:01:84:fb:64:28:54:6c:e6:f9:b7:f6:cd:14:a8:77:43:
86:c5:41:6b:44:24:3b:33:bd:01:43:da:aa:aa:8b:ce:06:79:
b4:53:74:05:16:e1:58:16:bc:f9:65:95:4b:9c:10:52:a6:2d:
8c:af:7f:df:bf:38:af:cf:34:f5:dc:b5:0a:d8:c5:2b:3d:df:
84:fe:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:16 2026 by rpki-client