Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: SU0HZcNOZ3qLZn6VwIBRQAlXB6uHFkaxWyKWc8MgrNk=
Subject key identifier: 29:A8:68:DC:39:36:39:E2:99:F3:E7:5B:A7:49:A6:81:AB:5E:85:B4
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019F91DA6F4C6F2F233834E344AE50607028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 02:00:39 +0000
Manifest this update: Fri 24 Jul 2026 02:00:39 +0000
Manifest next update: Sat 25 Jul 2026 02:00:39 +0000
Files and hashes: 1: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: jYK0zjufCqTSARvpYrLZN10lJzHlMSQS3ak7fGmgq0E=)
2: f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa (hash: NQ/xxQW3U9GvugxkG2jNW4TodVkdfN7Ntdsb5/uc4tM=)
3: yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa (hash: WORw69SpG7o5LnNs7NnksxUfsDlM6lj3W399eRGTTp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6f:4c:6f:2f:23:38:34:e3:44:ae:50:60:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jul 24 02:00:39 2026 GMT
Not After : Jul 25 02:00:39 2026 GMT
Subject: CN=29a868dc393639e299f3e75ba749a681ab5e85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:4c:80:69:f4:34:b8:79:ed:8e:f9:d1:cb:
51:1a:bf:e5:19:d0:8a:c8:44:a3:1f:10:d9:ff:2e:
cf:01:47:d3:96:04:b2:3c:ef:b8:f3:ff:5a:92:3d:
76:50:aa:50:09:19:8e:08:a6:78:37:e9:14:8a:8a:
55:45:3c:bb:84:55:ba:05:50:36:3a:2f:67:43:f8:
4b:12:44:bf:eb:c3:59:dc:cd:21:f0:93:85:dc:63:
aa:2d:71:0d:c8:2f:20:b2:e7:b7:9f:f6:5e:98:13:
90:71:b8:4d:15:b4:ed:2d:42:84:dd:eb:57:55:3e:
65:6b:ad:1a:72:58:d8:3e:ef:64:ea:d7:70:db:d2:
47:f5:27:2c:8b:a4:10:63:26:ea:99:02:74:35:eb:
e5:9f:7a:68:8e:7f:f6:82:62:52:4f:e5:fa:13:16:
ce:53:af:e3:d7:bd:58:46:1a:e0:d1:e9:6d:31:48:
53:fb:51:aa:0d:3d:5e:f1:eb:03:bf:cf:40:e7:7c:
75:15:68:85:c1:c7:3a:73:52:b6:4d:a0:8b:d4:10:
55:77:8e:a6:6b:ba:c3:81:20:31:2e:0b:4d:a9:ab:
f4:85:d1:38:fb:3a:6c:4e:c1:83:ae:e3:f4:22:f9:
1f:7b:1c:08:ce:01:c7:dc:94:9d:c9:36:2d:9e:76:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:68:DC:39:36:39:E2:99:F3:E7:5B:A7:49:A6:81:AB:5E:85:B4
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:18:32:03:bf:a8:6a:b0:0e:11:ef:e6:e9:58:14:00:58:26:
47:ec:50:cb:6d:eb:b8:11:dc:4a:6b:51:fc:dd:70:38:3e:6a:
03:f0:29:b3:a0:b3:2e:61:ed:bf:fc:93:8d:78:f8:62:ff:0b:
18:9e:d8:0e:d6:9a:a4:7d:62:80:1e:30:e0:e1:3e:41:9c:44:
8d:24:73:3d:65:b7:7c:75:dc:06:87:ae:e9:0e:2d:fa:21:f7:
34:a1:74:6b:63:c9:af:a2:48:46:a3:67:b6:bb:ab:b9:d6:08:
25:b4:57:c3:eb:5c:ef:d4:e4:0b:fa:d0:cb:a0:1c:82:5e:a7:
63:29:85:52:2f:14:61:59:de:fa:16:24:c9:bc:7d:c1:fa:8b:
2a:94:f6:0e:cb:9c:ca:6d:3d:bf:05:ac:bd:2c:34:cf:0a:f1:
5d:23:2b:db:79:58:ba:9f:5e:d0:2e:61:2a:90:0d:20:d7:a9:
04:20:52:64:d8:aa:00:d2:f9:57:a3:22:4a:ac:59:b1:24:b7:
94:eb:d4:51:0f:33:ae:f9:0b:83:68:2b:e6:f8:3f:97:e5:cf:
dc:42:cf:0c:3d:53:c5:45:2b:44:7d:30:93:fc:f5:c1:56:2a:
46:18:3c:a0:7a:b3:04:b3:94:63:cf:db:d8:f2:75:ff:e4:0a:
8d:05:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:38:23 2026 by rpki-client