Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: 0kSIcPp8VaX9NA3n0p3SoQrcJIP0AqexAF+w9EFas1Y=
Subject key identifier: CA:B8:97:79:C5:0E:7A:09:56:64:37:28:0F:E9:2D:84:D0:9A:F5:68
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 019F93C8D9E9194BC7DE672E568F85304D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 11:00:41 +0000
Manifest this update: Fri 24 Jul 2026 11:00:41 +0000
Manifest next update: Sat 25 Jul 2026 11:00:41 +0000
Files and hashes: 1: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: Lbd6cMaF6KYYXo/gT7HUEE9LQ+m/BJpQ61j+gZDaSAc=)
2: f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa (hash: NQ/xxQW3U9GvugxkG2jNW4TodVkdfN7Ntdsb5/uc4tM=)
3: yooXWAzXpfc4Is2Szi-_sKNZ1Dw.roa (hash: WORw69SpG7o5LnNs7NnksxUfsDlM6lj3W399eRGTTp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:d9:e9:19:4b:c7:de:67:2e:56:8f:85:30:4d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jul 24 11:00:41 2026 GMT
Not After : Jul 25 11:00:41 2026 GMT
Subject: CN=cab89779c50e7a09566437280fe92d84d09af568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:24:1d:3e:6e:63:47:85:77:52:84:8c:8b:
20:de:78:a5:34:78:67:6f:4f:2a:0e:02:cb:dd:c1:
fb:e0:6f:ba:d8:28:e1:94:4c:19:d8:80:fd:e0:3d:
57:e0:37:8f:cd:57:6f:05:b5:b3:49:4c:d3:1c:af:
22:8a:2a:a4:56:0e:fb:1f:74:f4:2c:48:28:b0:bb:
c8:17:20:cd:46:fc:79:82:1a:5b:7c:de:d0:d6:9e:
0d:51:58:da:2b:80:49:aa:a1:05:9c:38:02:1b:36:
8b:51:f2:9c:2b:7d:0a:01:4e:3e:de:81:62:41:63:
02:ee:8d:26:44:52:0a:68:c6:98:14:ae:6c:f3:d7:
e4:fe:f3:57:93:f4:71:ee:86:41:81:18:da:c8:0e:
31:0b:76:64:16:da:32:ed:6a:61:4a:78:48:b7:09:
74:10:93:7a:28:e1:8e:53:34:18:27:67:e0:6f:7a:
35:4f:d6:a3:25:91:3d:b7:b5:48:a9:9a:d2:8d:6b:
55:50:bc:9d:9a:ab:e7:c9:b0:03:3d:e5:40:a8:e7:
69:e4:fc:16:c2:55:37:3c:1a:b5:ac:c3:6c:ad:9b:
e7:fa:4d:83:10:7f:76:aa:cc:2e:cb:ee:a6:45:fc:
bd:ff:39:3a:e4:0c:f0:ca:8f:18:20:d9:3a:6a:53:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:97:79:C5:0E:7A:09:56:64:37:28:0F:E9:2D:84:D0:9A:F5:68
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:26:cf:b4:30:47:03:4f:b6:ae:60:e5:23:a6:2a:0a:7d:6a:
ef:0e:b1:4c:aa:56:b6:b2:a7:b7:4d:9b:ed:ab:d1:07:73:ae:
f2:e2:39:a7:95:24:4d:1a:b5:b5:e0:a1:21:8a:c1:ba:04:25:
8a:82:f5:61:e0:21:3a:f7:ea:dd:72:48:49:1a:80:9a:fd:0f:
2f:35:a4:a4:a9:f2:b3:34:09:62:09:2c:44:d8:6d:99:e6:e7:
84:05:75:35:74:0e:9e:1d:02:09:bd:4e:46:d6:b7:9d:30:5a:
89:50:9b:c9:85:7f:d3:23:d8:ec:d3:97:a7:b1:93:90:6d:9c:
5c:db:37:05:8d:91:9c:4f:f4:df:16:b9:05:b1:64:f6:62:d2:
67:e6:9d:84:22:17:68:cf:c6:26:f8:fb:69:2b:bb:99:a1:a0:
da:f0:34:48:50:4b:f3:b8:19:08:f3:8a:93:c4:0f:a4:db:78:
51:00:1d:9f:76:8e:cb:1b:99:bf:a2:06:65:d6:9f:1e:8f:d9:
24:c9:4b:77:68:43:30:7c:2a:1f:45:12:76:c5:2c:0d:d0:fa:
77:d1:cf:36:a4:85:0c:c8:9e:d1:00:9a:31:d2:22:86:f6:85:
e3:1a:df:e8:2b:15:ab:56:ee:f7:30:03:62:28:40:6f:fe:e5:
f2:0d:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:02 2026 by rpki-client