Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
File: vQQTxuRIJSdlFDEhETiDjhM4VN4.mft (raw, json)
Hash identifier: Xgoog2QrbtHD4yWXepCfEvxufmXcJqncJtUzDkbFzew=
Subject key identifier: AA:F7:04:56:07:F5:15:A9:08:42:B8:1E:86:51:4A:C5:84:43:27:9D
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Certificate issuer: /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial: 019F8EA2AA1049ECCF724D461F065ACD2056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
Manifest number: 0161
Signing time: Thu 23 Jul 2026 11:00:52 +0000
Manifest this update: Thu 23 Jul 2026 11:00:52 +0000
Manifest next update: Fri 24 Jul 2026 11:00:52 +0000
Files and hashes: 1: 1-lZlBceiWN8AElt1JnRsYUpL4tI.asa (hash: NCx5EFF8jGh46YgHJCKJlu5m+0OH02OtZU9OFQz+cKw=)
2: K5nTI3TLRfGi_oGQbxYTxF2eB7Y.roa (hash: 5nCS/Mov0JNCgcR42UHn2L1io6GH6DMm8igK0e3XvY4=)
3: vQQTxuRIJSdlFDEhETiDjhM4VN4.crl (hash: 5e8BtD6l0jFT1VbBkv6HuvZpW2zn0jcp1nD2CcgyMM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:aa:10:49:ec:cf:72:4d:46:1f:06:5a:cd:20:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0413c6e4482527651431211138838e133854de
Validity
Not Before: Jul 23 11:00:52 2026 GMT
Not After : Jul 24 11:00:52 2026 GMT
Subject: CN=aaf7045607f515a90842b81e86514ac58443279d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:fb:97:f1:d7:35:24:71:bc:38:fe:f9:fa:
6f:7c:51:fd:1d:e9:16:cb:f3:d5:b5:ad:d0:83:bd:
99:f8:a8:50:b2:c1:b5:5c:49:f5:73:d6:74:5a:0c:
b6:8b:c6:bc:42:68:8c:89:6b:73:97:f8:90:0e:62:
11:82:d7:16:85:6e:d0:d6:1c:86:4f:cf:2b:15:6f:
0a:ec:dc:00:29:08:db:f7:0f:f3:75:eb:0f:43:4d:
2f:c2:52:75:6c:8a:71:a3:22:f4:f5:78:62:9d:96:
65:da:0a:2a:c1:57:9e:27:02:6d:c5:d6:d8:aa:dd:
84:ff:79:14:a3:cf:83:09:68:7f:23:bc:f4:ea:73:
7a:a5:83:dc:e5:e9:ff:bc:d5:70:ca:c0:fb:49:a6:
92:af:34:a1:87:66:11:52:48:44:e0:75:e5:c0:00:
31:08:c4:d0:2b:84:d7:62:29:a4:ce:98:5e:af:f7:
34:b7:f6:65:a8:a5:fb:44:09:a3:1a:d5:5a:57:ba:
0a:fb:e8:4d:9e:34:c2:a1:48:80:d2:c5:29:b2:75:
ca:77:03:23:45:ca:2e:61:9f:89:3b:11:b2:8e:c0:
e0:e8:40:ef:ea:73:f1:a6:c4:02:8a:b1:fc:bb:59:
65:9f:ba:f0:73:18:a8:e7:e4:86:2f:c8:b7:13:ee:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:04:56:07:F5:15:A9:08:42:B8:1E:86:51:4A:C5:84:43:27:9D
X509v3 Authority Key Identifier:
keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ca:1a:4c:28:e0:83:91:82:36:a7:88:84:55:7b:3c:6b:4c:
b1:0d:05:3d:3d:5a:0d:45:2e:cd:61:d6:cb:a8:98:dd:48:80:
9d:80:90:b6:b1:c4:b3:a6:72:89:dd:1b:43:8a:1f:d6:cc:d9:
be:29:3e:73:1b:ed:50:e7:23:f0:f9:91:5e:99:82:ab:1f:2a:
69:fa:5d:22:ad:ee:c2:04:22:11:b4:84:f7:84:c6:f7:88:20:
bc:1d:01:3d:3d:80:f5:17:07:34:a0:89:8c:83:9e:bb:ec:f4:
3d:40:33:e7:5d:98:c4:23:10:34:70:d5:50:31:6f:d9:4e:ec:
2a:88:a6:35:9c:c5:80:70:51:2b:92:27:d8:6f:08:f5:be:a0:
d8:f7:4d:1a:7a:6c:2f:e8:fe:b3:6a:ad:91:6f:60:b9:24:e6:
b9:f3:88:e5:5c:3d:20:50:22:b2:95:50:e2:d9:2e:e3:2e:a8:
5a:b6:97:4b:e4:30:15:5c:a2:10:cb:0d:45:63:f7:d0:ba:ed:
93:df:89:a5:31:65:16:82:7f:39:b6:2b:05:7d:f2:72:ec:b8:
d9:0f:8b:15:20:3e:88:4e:20:17:81:d3:08:b0:b4:da:71:4b:
e1:fe:fa:96:df:7b:ac:3b:11:89:2b:da:ff:53:2e:60:88:af:
f6:60:28:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:02 2026 by rpki-client