Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: dp4lQ4JCYpsBlYg84ofVi/gB1LLIdh0KWw2SY2GiJGE=
Subject key identifier: 82:0F:47:19:F4:FE:F5:E1:8D:93:B2:62:A1:19:49:C2:D8:D8:A9:5E
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 019F91DAC34C6E82912F3D22DA2AFBF68C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0CF1
Signing time: Fri 24 Jul 2026 02:01:00 +0000
Manifest this update: Fri 24 Jul 2026 02:01:00 +0000
Manifest next update: Sat 25 Jul 2026 02:01:00 +0000
Files and hashes: 1: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (hash: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: TolIheeEkJ3zUAnYfIsCdWY9wpoL60OjK2Fxr1UI7z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c3:4c:6e:82:91:2f:3d:22:da:2a:fb:f6:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Jul 24 02:01:00 2026 GMT
Not After : Jul 25 02:01:00 2026 GMT
Subject: CN=820f4719f4fef5e18d93b262a11949c2d8d8a95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:9c:65:24:f2:74:96:e9:b9:e8:7c:f0:20:
d1:9f:c3:92:73:7b:7b:c4:cb:5a:ae:fe:e9:c3:06:
b4:ae:a0:27:bb:62:9c:6d:e5:a9:4e:a4:43:15:ff:
1d:b7:3e:30:86:0f:1b:a5:25:05:8a:94:8f:ea:df:
bd:43:f7:b7:6c:95:ca:05:cf:21:1a:4c:f6:27:de:
a4:bf:b4:72:c7:1b:6d:44:0b:a3:91:a9:d3:1e:17:
ad:17:af:a2:f5:73:a5:2f:0a:9b:74:4c:66:e4:dc:
62:b2:8e:da:ed:07:0a:59:f6:87:b1:ba:1d:3c:eb:
b0:4f:5f:0b:65:8f:8d:8b:3a:5a:23:8e:93:28:0a:
50:7e:2e:c4:0d:48:dd:53:aa:fa:2c:36:70:42:e0:
3c:7e:21:ec:a0:94:53:09:41:72:68:94:94:5f:44:
3d:7c:d3:ac:50:8d:df:66:ff:8d:e3:ff:76:ec:da:
74:c5:a7:b9:f5:f1:2d:84:ce:45:46:37:c4:ac:33:
e3:c4:69:64:10:1d:29:54:1b:f4:04:0c:40:36:61:
40:92:c4:cf:86:07:02:a8:ca:65:62:28:8f:22:fd:
e3:d1:8e:63:7e:20:d5:19:ad:21:30:83:6d:59:7e:
2c:20:83:06:55:8a:2d:92:6d:cc:63:a6:43:bb:b0:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0F:47:19:F4:FE:F5:E1:8D:93:B2:62:A1:19:49:C2:D8:D8:A9:5E
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a3:25:67:b7:82:8c:27:a2:77:32:65:d1:73:e4:bd:47:7d:
3f:6d:2e:be:97:3f:aa:95:a0:1e:a5:f6:2d:3c:7b:31:f3:a3:
26:c4:e7:90:19:a8:bf:bb:c4:18:d6:41:6d:d1:e1:00:f8:1b:
a1:7e:82:bd:e8:f5:07:c4:ca:42:e6:64:42:1c:52:fe:f3:b6:
b6:fe:e1:d2:16:28:63:c6:47:41:71:1c:89:fb:32:a7:1c:38:
a2:d2:71:97:ef:ef:c9:fd:8c:76:88:15:90:45:24:c0:e8:d3:
bd:88:8f:08:9e:f9:1d:b0:03:f0:8c:df:41:d9:b1:ed:12:33:
ac:9e:da:2f:79:96:3a:52:8f:ce:24:af:bb:98:3c:e2:72:62:
05:5c:fa:53:bb:e5:bc:aa:d3:3a:a0:90:43:8c:ec:99:99:ff:
bd:41:01:33:af:bf:35:5d:01:05:ec:51:8d:cd:51:2d:2f:b8:
94:bd:f9:5d:ef:54:3e:29:06:f8:6e:26:d8:3d:0b:7c:44:9e:
ff:ce:e5:99:8c:81:a7:46:72:ba:d9:d7:ce:d5:88:db:2d:b4:
dd:40:e4:47:fd:92:ac:5c:47:a1:ee:39:b5:a1:02:fa:e8:bd:
78:58:58:38:9a:d9:80:7f:d4:66:80:fc:fc:49:d4:b7:e1:82:
05:4f:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:26 2026 by rpki-client