Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File: vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier: I2SaLO94g1wiIsCH0A0/8wi/un4/su+9fi9Mi/cYgpU=
Subject key identifier: 8E:02:3A:C8:7E:3F:C3:03:C7:94:C1:5E:C0:7C:F5:13:55:D4:09:5E
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer: /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial: 019F927EF94C5945CCA40DD922B7C0E0684F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number: 10F8
Signing time: Fri 24 Jul 2026 05:00:22 +0000
Manifest this update: Fri 24 Jul 2026 05:00:22 +0000
Manifest next update: Sat 25 Jul 2026 05:00:22 +0000
Files and hashes: 1: JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa (hash: fVzsbnVjjWl2LyjA+I2JSODFF87TDP7Iwxo6m2pjCvM=)
2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: S9wnlrZl7+vqX/j1TVCX1OuIrP9sxQW0MGIy/WrppoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f9:4c:59:45:cc:a4:0d:d9:22:b7:c0:e0:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Validity
Not Before: Jul 24 05:00:22 2026 GMT
Not After : Jul 25 05:00:22 2026 GMT
Subject: CN=8e023ac87e3fc303c794c15ec07cf51355d4095e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:cc:c7:ff:8c:98:1b:f0:2e:87:bc:cf:3d:
c2:6d:07:f2:26:53:04:59:d8:b8:2b:62:9a:ba:bc:
4c:1a:c5:e6:73:71:69:36:1e:c0:6e:df:25:97:49:
bb:05:c4:f8:0e:6e:5f:7a:66:6a:50:6b:b0:ad:b2:
45:a5:5b:a1:35:9b:43:82:24:9b:d2:16:23:22:1e:
a1:0c:18:61:6e:0f:70:bd:bf:98:27:65:06:ca:1e:
0d:6c:9f:5d:2e:11:51:e2:03:a6:e6:db:86:f7:1b:
e0:8b:98:f6:96:90:c9:54:1a:d9:23:ca:cc:1d:c0:
f9:0b:b1:e9:a5:e8:88:b8:55:36:f6:75:0b:a3:e3:
24:92:35:11:0f:39:8f:06:64:a1:f8:7c:21:20:fd:
ae:96:4b:72:1e:cc:33:f8:67:02:dd:a7:1e:3b:d2:
53:c9:ae:c6:e5:05:89:a4:87:89:b9:08:54:c0:94:
90:72:bb:c5:0a:7c:5f:f6:06:16:f2:89:e7:f2:f8:
f2:31:83:a0:ef:4b:30:63:b3:e8:99:a7:5f:29:bf:
97:a1:ca:7f:ed:f2:6c:d3:79:13:46:d0:03:20:e6:
77:69:da:ec:88:90:5b:47:d8:88:3c:33:88:dd:39:
06:07:f2:c3:62:b8:ae:d6:48:1e:3e:31:e0:64:f7:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:02:3A:C8:7E:3F:C3:03:C7:94:C1:5E:C0:7C:F5:13:55:D4:09:5E
X509v3 Authority Key Identifier:
keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:99:6c:4e:43:62:56:35:b6:ff:af:73:62:64:85:1f:b9:ee:
10:6b:76:52:ad:cf:a6:3e:59:ab:20:eb:75:d1:b3:3f:1d:8b:
7e:d2:0e:62:a4:15:d4:7a:d9:93:7b:75:78:da:57:f1:6c:45:
84:5e:f6:0c:07:cd:09:bb:fe:07:ec:1d:f7:67:96:be:9d:9c:
9f:ad:21:fc:67:f2:b8:53:b5:55:0b:bc:a4:05:a8:26:5d:03:
c9:6c:3e:30:03:ed:a9:df:15:2e:c7:ee:0d:da:42:de:35:0e:
1f:db:c3:bd:05:ae:8c:a9:7f:1a:c1:df:f9:96:e3:f0:92:b5:
eb:f5:29:2d:14:ab:9a:81:43:8c:07:7c:8b:41:77:3e:7f:a6:
fe:4e:13:fd:e1:6c:00:f1:7d:78:29:33:80:ee:74:93:ba:80:
91:60:eb:fb:2d:0d:97:a4:b9:35:e3:9c:3f:71:10:0c:2f:9c:
52:55:e0:f8:ff:ac:bf:8c:c6:47:3c:29:5e:4f:be:10:18:7c:
40:f9:ff:ad:96:98:34:ff:97:9a:a9:8e:58:89:1b:f8:3d:e4:
ed:ce:2a:71:4c:c9:e1:98:18:77:c1:3b:86:29:f0:3f:7b:23:
2a:21:1f:d5:6b:db:80:0a:4c:0f:f1:3f:8e:d5:e4:e5:0f:19:
2c:2b:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:28 2026 by rpki-client