Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: 6CYIXqQS3EHJLFz0O1Ni4/pueK63vEP8kr9r4LEqyno=
Subject key identifier: 6F:AC:D5:89:F1:49:47:9F:5F:B8:E1:35:11:DB:2D:E5:1E:AF:4A:82
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 019F935BBA004867570F8F2FC30EE7CF8831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:29 +0000
Manifest this update: Fri 24 Jul 2026 09:01:29 +0000
Manifest next update: Sat 25 Jul 2026 09:01:29 +0000
Files and hashes: 1: MyEobwPvVlPZfo18i7oAV1Xhf8s.roa (hash: +PGToJCT+bUcRHVwTrA1c0sAhKUye1v74DJg5l+yDRc=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: FkKM1FM5O1icLB9pOlCLMBsMP1fuIKzR4oIDqJJ08SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:ba:00:48:67:57:0f:8f:2f:c3:0e:e7:cf:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Jul 24 09:01:29 2026 GMT
Not After : Jul 25 09:01:29 2026 GMT
Subject: CN=6facd589f149479f5fb8e13511db2de51eaf4a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:73:ee:1a:68:99:50:d7:55:e4:88:04:9c:
a5:fb:fe:57:ab:54:bc:22:8e:d8:9d:01:ce:e5:a9:
0f:2a:61:c2:48:dd:fc:b4:d6:32:2a:4d:f2:83:8b:
b7:8b:05:96:7f:d3:53:7b:05:36:62:f3:81:81:df:
ed:6e:4f:37:92:56:dc:0a:f7:1c:b0:77:b0:16:24:
59:0f:ae:1a:c1:8a:5b:99:fc:05:63:2c:4a:6d:5a:
1d:5f:b2:d9:3d:cb:d2:2e:8e:ba:56:87:79:92:7e:
a1:15:65:f4:e1:5f:37:b5:46:0d:24:9e:37:46:e4:
26:fd:02:7b:98:ba:c6:9d:8e:e9:ef:f3:02:63:c0:
3d:59:6b:cc:7b:3d:69:e1:12:13:07:9a:85:38:52:
15:36:9d:6c:1a:68:61:99:30:3e:98:94:66:44:9c:
51:2a:b3:f9:cb:dd:e4:f0:ec:b9:cc:9f:20:3d:d6:
6b:27:59:70:46:cd:43:96:41:74:0e:7a:31:57:92:
5a:23:a0:04:db:d8:bb:7d:89:a6:ef:83:26:03:87:
f2:19:e1:d3:23:5d:43:15:15:f6:b2:6f:6b:23:f8:
46:4d:a6:50:c7:7b:b5:ef:66:ef:1c:b6:45:01:d6:
9f:02:50:4e:39:ee:29:4b:9f:43:35:b2:3f:1e:e0:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:D5:89:F1:49:47:9F:5F:B8:E1:35:11:DB:2D:E5:1E:AF:4A:82
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:78:21:8e:a3:01:20:29:dc:7f:68:10:0f:1e:cf:a4:39:10:
11:2c:b7:af:c2:9f:83:c8:e4:1c:83:61:b1:a1:8f:2d:4f:07:
d1:b4:fa:4a:09:12:25:7e:b1:c3:0b:c4:b7:48:6c:a5:41:23:
6a:32:71:f5:1d:ef:4a:43:7b:7e:b5:f2:be:39:d1:29:4d:1d:
8a:8b:ac:db:ae:28:e3:73:90:01:ca:31:28:56:5b:29:fa:02:
f8:aa:1a:0a:fe:32:8f:31:ed:20:fe:e9:4d:8b:00:7c:58:59:
d7:a8:e6:13:e7:c5:89:e3:25:9c:69:13:6d:be:9f:0e:f5:b0:
6f:8b:cd:85:f0:13:eb:aa:5a:7c:ad:b4:67:48:46:76:6c:33:
12:c3:b4:8f:50:29:fc:11:76:65:bc:70:ec:01:de:a7:06:88:
e7:3d:89:20:46:b1:a3:ef:03:80:24:8f:30:23:f7:33:6e:6e:
b5:6b:0e:fd:48:0d:6d:a5:16:64:ba:b7:67:76:2b:d4:99:22:
60:e9:95:a8:05:b8:bd:3e:69:33:90:de:65:c3:6d:60:13:c4:
66:29:10:17:51:6e:13:9f:71:76:88:5d:2e:d1:66:d5:67:02:
02:3c:bb:fa:f7:e1:ad:53:f2:3f:93:8d:74:dd:5e:43:5d:2e:
54:58:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:11 2026 by rpki-client