Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File: VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier: tsrsenapwrtUbbIE9UdPK46zkvjGksP6HzbOJcvtxAU=
Subject key identifier: 7F:05:AB:77:6D:2D:06:DC:B6:88:1F:D0:CD:A4:85:BB:51:DB:FB:68
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 019F92ED2689BF4CB3BA52B8AF2260DAACFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 07:00:42 +0000
Manifest this update: Fri 24 Jul 2026 07:00:42 +0000
Manifest next update: Sat 25 Jul 2026 07:00:42 +0000
Files and hashes: 1: FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa (hash: o4fOKN67hOq3ekX5RPCUgwu3ftf0QCCHscRuqhwqtT0=)
2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: kPSVPzXocxSvaZ3RXVmjtwp0ByV7nYD+jSvnSCYe9Wg=)
3: YogSL5izPYypDSpRN-bhm7FC-Zc.roa (hash: SYMSdL9jKWAhxjZJN7qyE8Onp0ESoc3LmqO5sBgdEyM=)
4: mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa (hash: 7MjOgwhf1xPnvfegvDmAvTWCavPasFV1fKSbjNEHbXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:26:89:bf:4c:b3:ba:52:b8:af:22:60:da:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Jul 24 07:00:42 2026 GMT
Not After : Jul 25 07:00:42 2026 GMT
Subject: CN=7f05ab776d2d06dcb6881fd0cda485bb51dbfb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:c8:56:57:43:6e:98:47:7a:31:99:2c:57:
74:67:65:4d:e6:e1:9f:d5:c2:3e:c1:af:e7:bb:83:
31:00:2a:b5:ae:23:40:5a:e3:84:80:f2:cd:40:39:
c0:a5:dd:79:5e:35:f7:e6:0d:8a:13:27:69:ba:1f:
8d:e8:d8:45:db:e5:69:9a:13:65:c8:80:90:cd:4c:
9d:b9:ef:e8:ad:cb:61:db:38:7f:15:55:be:59:04:
40:8c:65:22:c5:f0:a0:e8:97:68:72:2d:f7:7a:23:
82:18:ad:57:4f:a5:85:0c:78:eb:c3:45:3b:ae:d5:
bb:f4:9f:5a:70:96:55:c0:f6:25:08:db:57:a3:80:
75:b7:64:0d:3a:cc:35:1c:3c:c4:35:96:40:87:2e:
30:74:06:ed:e4:a9:49:f2:f6:8c:8b:90:dc:29:e5:
97:0b:06:fc:f8:d3:11:c8:9f:a7:bb:88:d2:d6:90:
c0:76:fc:b8:d7:4f:fc:50:03:57:e2:d9:81:ed:0e:
30:f7:34:0a:63:ec:14:b5:a0:a1:5a:6a:41:b9:6c:
04:99:5c:71:5c:e0:8a:ce:db:31:c0:0f:74:ae:77:
e2:c5:20:ff:a0:44:7c:8c:17:b4:4e:f6:9d:14:29:
15:b8:cf:ac:dd:b8:a4:07:d7:72:1e:54:a3:c7:7b:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:AB:77:6D:2D:06:DC:B6:88:1F:D0:CD:A4:85:BB:51:DB:FB:68
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:eb:96:d3:a7:7e:c7:ca:e8:1f:43:61:86:b8:44:c8:ee:08:
04:c5:d2:87:ef:af:29:e5:90:5b:e9:44:0a:f4:00:d6:cf:0d:
6b:84:e0:64:fe:aa:b4:65:6f:e1:5a:29:21:dc:cc:a5:1a:4a:
3c:a7:16:df:9d:c7:40:93:48:1f:c7:d9:9f:c9:10:af:ba:49:
1e:ef:64:d5:0e:ac:06:ca:d0:2e:f8:2c:23:62:b2:4c:7a:9c:
0d:21:e2:62:53:6f:69:01:88:63:ff:4a:d4:89:bd:5e:90:97:
9b:a9:01:58:94:f1:1a:f6:43:69:36:7b:98:e0:c7:74:f6:1d:
7b:1a:55:30:1c:c5:93:c6:0e:42:88:17:b4:1b:0f:c5:8e:88:
3c:e0:a0:d3:1a:7d:ec:fc:15:0e:9f:4b:63:85:0c:12:9d:6c:
e6:1d:3b:4c:4e:44:46:d4:dd:0d:b3:87:fc:c0:64:dd:7b:aa:
03:fc:f1:20:c7:51:0e:92:9a:79:15:83:d1:3b:ce:6d:4c:bf:
c6:c4:65:f1:ec:2f:f7:21:c2:87:f1:07:90:88:fc:6f:84:0c:
7f:76:23:e4:03:b9:bc:3e:7f:f3:4a:6c:6f:97:19:ef:44:f5:
d8:9d:46:39:f0:4c:b6:4a:c9:e1:42:11:36:be:e8:68:81:ed:
43:37:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:41 2026 by rpki-client