Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File: vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier: bBjgz9JDtQuy76jJcuZf8lILJdspyx6PEJHA6vuCftY=
Subject key identifier: 02:3F:47:CF:8B:66:B3:89:33:04:82:A6:55:84:92:77:6E:F2:FA:FD
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer: /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial: 019F92ED228D9E23260AB50A4479896D7083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:00:42 +0000
Manifest this update: Fri 24 Jul 2026 07:00:42 +0000
Manifest next update: Sat 25 Jul 2026 07:00:42 +0000
Files and hashes: 1: K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa (hash: TugPqaQtZD9qSBdI5JE+l1/X09jHGI4DmWPMzdxCeJw=)
2: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: napij+ZGULZNZo05BQO0vOwOETk/M6k4hzsttwX0BHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:22:8d:9e:23:26:0a:b5:0a:44:79:89:6d:70:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
Validity
Not Before: Jul 24 07:00:42 2026 GMT
Not After : Jul 25 07:00:42 2026 GMT
Subject: CN=023f47cf8b66b389330482a6558492776ef2fafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:07:12:5a:b0:5b:81:e0:2d:f9:58:61:e8:
4c:d0:0c:60:d0:41:91:ff:8b:64:74:21:85:53:cb:
4f:3c:4d:3f:df:07:74:5a:1c:c2:b8:27:b6:c5:f8:
9e:3b:f7:1a:7e:04:e2:56:60:5f:94:cd:85:d6:e4:
2c:af:b1:07:16:f9:4e:7c:0c:06:e5:51:be:14:f5:
ee:92:e6:b5:45:56:55:7b:2d:3b:62:d6:72:a5:10:
06:bf:aa:05:7f:60:be:18:1e:2c:c6:76:d8:de:95:
7e:d1:d4:a6:0e:76:87:d0:23:75:ef:ba:a6:dd:bc:
33:d1:53:6d:09:c1:fd:34:6a:62:1b:8b:72:f8:26:
87:a4:22:0f:d3:08:ee:80:67:c6:41:1f:c4:64:8a:
cc:3d:86:7f:29:40:6b:f8:db:63:64:8d:44:30:a2:
ab:16:05:14:c4:5f:4c:e8:72:29:e2:2a:08:cf:36:
e9:c4:6a:5d:62:64:52:9e:6f:7b:d2:93:e5:78:d8:
8f:ab:45:76:e9:b7:54:7a:c8:02:13:1a:1f:60:0e:
75:42:eb:56:4c:45:61:02:ce:08:df:43:2c:d5:fb:
21:4b:fe:44:be:b4:9f:2e:f9:d2:f7:99:de:1b:1e:
ca:4b:47:5a:97:69:91:d3:84:8e:2e:d6:77:10:97:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3F:47:CF:8B:66:B3:89:33:04:82:A6:55:84:92:77:6E:F2:FA:FD
X509v3 Authority Key Identifier:
keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:31:dc:d4:cd:f5:cd:fe:79:13:50:41:c8:c7:9c:79:72:61:
71:da:d8:60:66:c0:75:73:7c:1b:5a:9f:59:75:52:fe:67:24:
51:e4:7a:d0:b1:ae:87:54:df:53:62:29:5d:ba:e2:35:70:57:
64:fb:5e:e8:72:5e:24:eb:e2:3a:71:b8:aa:c1:17:68:ad:d6:
e6:8b:d4:76:0a:36:86:12:23:8c:ed:b3:ca:ba:39:6e:0f:3c:
95:8c:97:68:f2:15:a1:f4:29:52:79:fb:df:71:e5:54:8e:fd:
c7:a4:39:8c:08:8d:fb:2d:36:00:f3:6c:97:37:7f:0b:8e:8f:
c1:42:89:26:7d:d1:73:83:2a:0d:4a:e4:5b:14:bd:6d:26:a0:
06:b4:00:d1:c7:f3:1e:b6:e9:86:88:2a:bd:bb:92:f0:64:a8:
ee:a6:25:b7:58:ed:05:84:4e:37:df:20:ca:bf:82:ce:02:32:
4c:54:21:ce:b3:df:af:5d:66:42:2b:7c:cc:1f:09:7f:ff:53:
64:d5:15:af:54:6e:7c:46:c6:97:80:d0:96:c9:d7:3d:f5:7f:
81:34:43:7a:81:3a:13:92:ea:ac:d2:65:b9:06:f3:c4:43:57:
cb:84:40:d8:0b:07:ea:bd:b6:b8:87:c7:c4:92:8b:e8:85:fe:
89:c5:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:47 2026 by rpki-client