Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: zaqcUWX5KaY7Q08jibIlg6zYPS1UKIUY9MUCaNMxjuo=
Subject key identifier: D7:DF:CB:2F:0C:87:B6:10:0A:63:A3:F3:3C:3D:66:6D:57:76:F5:49
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 019F8E6BC1B409DDF46EC696D3D614A2DEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 10:00:54 +0000
Manifest this update: Thu 23 Jul 2026 10:00:54 +0000
Manifest next update: Fri 24 Jul 2026 10:00:54 +0000
Files and hashes: 1: GJIEMFvCXOGxwMSx43guQFRPh8M.roa (hash: oeNhpu1q2YVhaNJfdDI1KC0StxYU+WfFhgtlfHrXwlM=)
2: N7xp5A4irg8DKzqXWFOFM39t3u8.roa (hash: qInCZHWCOK/PbCu1c+rmFecdDUSwXaQ9cyfT/I5HPdo=)
3: hTMMYpMuqGPoG2J1CKhmES38yHA.roa (hash: rvTmRXH6/6D95X7iHQWTgs6oiDZA0aQ3QNoQMnR5ayw=)
4: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: ojIXlnQPe3scL5kXCo1RmbTkwgR6lJf3kEYE6p6KDT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:c1:b4:09:dd:f4:6e:c6:96:d3:d6:14:a2:de:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Jul 23 10:00:54 2026 GMT
Not After : Jul 24 10:00:54 2026 GMT
Subject: CN=d7dfcb2f0c87b6100a63a3f33c3d666d5776f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:e9:0f:02:cc:f6:a8:30:c3:47:b8:09:95:
6c:21:d0:50:fa:1f:14:a4:b8:0a:a9:fe:43:4d:13:
21:41:9e:56:fd:cb:00:52:22:61:a9:f9:7e:83:10:
70:bb:d7:aa:3c:d3:e4:b3:57:69:cd:78:fc:1a:8c:
59:7b:04:df:97:1b:f8:04:2d:5e:98:9f:e7:fc:63:
c6:02:0d:d7:00:f0:1c:4e:84:02:8e:e8:f2:ee:84:
ad:f2:be:0d:be:ef:5c:34:06:84:e6:2f:d9:c9:88:
44:82:8d:43:42:d0:31:50:b8:d0:f7:01:21:c2:67:
cb:19:ef:25:d9:8c:33:83:c9:7b:a0:c8:19:9e:c0:
ab:e9:b4:c2:2c:5b:b1:f2:50:91:63:89:95:a4:34:
f0:07:f0:9d:09:0c:b5:62:fe:8e:ed:10:5b:81:00:
59:7d:4b:14:ce:ef:c8:6c:96:52:83:82:cf:fc:05:
da:e0:5a:a0:c9:c7:33:b7:df:93:aa:7e:cd:53:82:
cf:d3:3d:57:c0:bc:88:cf:e1:3c:58:4d:c2:bf:92:
bc:cc:58:65:79:79:5b:95:35:68:71:99:cf:97:ce:
26:a2:d5:b2:10:b4:70:15:02:bc:b0:39:d9:12:6a:
1d:2e:cf:29:0f:d0:d7:d7:65:c1:bc:7f:ba:e8:14:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:CB:2F:0C:87:B6:10:0A:63:A3:F3:3C:3D:66:6D:57:76:F5:49
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a3:5d:dc:91:35:e8:83:81:d5:d5:00:f2:70:c5:2d:97:ca:
6e:85:9e:9d:ec:a0:a2:d3:c3:8a:4a:20:84:34:7c:d2:af:82:
df:ac:8d:09:22:8e:aa:1b:08:93:b2:70:13:01:6a:03:a4:84:
9c:49:81:8f:59:e7:dc:00:7e:55:04:ae:5a:05:93:51:8d:8c:
11:f7:75:9e:55:9b:7f:5a:e1:fb:fb:6d:cd:a6:84:a3:a1:f6:
70:74:12:f1:54:c1:f8:79:1d:af:3d:8d:9e:58:27:5a:dc:77:
9a:4f:bf:d0:b3:6c:4e:d0:b8:51:d1:b2:ac:ef:20:21:c4:61:
cb:dd:d9:6e:49:75:a2:f0:dd:26:d3:fb:4b:55:89:4b:18:34:
33:a6:4f:e4:df:3f:db:c7:c8:9f:14:35:e5:0b:5e:38:26:9e:
f0:37:f9:8a:00:4a:62:78:54:dd:07:31:52:a0:1b:84:9f:67:
0b:92:72:04:cf:3c:34:c9:80:b8:e4:dc:b4:94:9c:f6:80:00:
7e:14:b2:5b:65:d4:67:9e:40:3e:62:5e:0f:f2:14:a6:18:f7:
1b:13:79:1d:d3:c0:0f:d2:b7:c0:e2:d3:04:d4:ed:65:3b:ec:
86:23:b8:6e:1b:6e:d2:01:8f:2e:0c:84:d8:65:b8:17:35:b8:
11:50:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:50 2026 by rpki-client