Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
File: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft (raw, json)
Hash identifier: LSSy597wRDxkcta0g5uwaXJPRJnFrdAdklIz4QnBrNg=
Subject key identifier: 24:4E:23:CE:B2:22:D4:41:57:09:F0:51:6E:86:94:96:77:6A:8F:82
Authority key identifier: BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
Certificate issuer: /CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Certificate serial: 019F935AE318487EBAAB3525822A599D8F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:34 +0000
Manifest this update: Fri 24 Jul 2026 09:00:34 +0000
Manifest next update: Sat 25 Jul 2026 09:00:34 +0000
Files and hashes: 1: 1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa (hash: xS3Tyjiosi2JKWLFjDH1G3QDY2JB3RAWfG149pE1I9U=)
2: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl (hash: 2PLmiIn72JMNyCn/2tmLu/hrU5+Ou7ZAdRpflrL74U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:e3:18:48:7e:ba:ab:35:25:82:2a:59:9d:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Validity
Not Before: Jul 24 09:00:34 2026 GMT
Not After : Jul 25 09:00:34 2026 GMT
Subject: CN=244e23ceb222d4415709f0516e869496776a8f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:16:e5:d1:95:b7:7a:8a:86:5d:fe:56:97:
03:fb:94:1c:f2:3c:c3:4e:2b:60:fa:f9:8b:55:e8:
89:f3:bc:e7:f0:6c:9e:72:63:a8:8e:92:a0:37:8c:
bc:f3:7e:d9:5b:92:ec:bb:f9:f9:c7:2d:19:8a:fd:
59:b6:06:5d:e9:78:cd:26:8c:95:00:42:b3:8f:c1:
cf:09:4f:d0:7f:89:62:f2:e1:59:39:ca:a1:0e:91:
b9:ba:4f:83:6b:85:d9:82:1f:59:c5:76:52:35:e7:
3a:d5:70:ab:5d:e7:2c:3e:65:e8:b1:f6:ad:1f:a3:
61:f2:34:ef:00:1f:04:f8:4a:da:43:42:7e:c2:d5:
10:a8:74:3b:1c:c6:6b:ae:13:0d:c4:b0:80:3e:74:
fe:87:78:9e:18:b1:eb:dc:85:18:6f:a1:b5:0b:27:
c3:7e:83:35:bf:eb:45:42:fd:c3:48:01:16:c4:d2:
4c:70:5e:fe:94:be:bf:51:cf:7e:ad:14:d5:44:f3:
de:ca:c8:de:7d:69:2b:5c:80:11:77:e4:0d:83:08:
71:c6:62:af:3c:43:9b:d6:de:a4:99:6f:56:cd:d2:
38:e2:d9:6b:ab:f5:03:7c:42:9c:d9:9c:c0:e1:ca:
57:be:95:e1:3a:d0:10:20:e0:d0:67:22:16:5c:c3:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:23:CE:B2:22:D4:41:57:09:F0:51:6E:86:94:96:77:6A:8F:82
X509v3 Authority Key Identifier:
keyid:BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:6d:ec:8c:63:51:e8:ad:52:34:04:21:d0:e1:f6:63:e9:
41:95:14:c6:df:dd:ba:49:99:e4:e8:10:16:09:92:5e:eb:cb:
f3:5e:8b:4a:62:a5:11:75:91:84:5a:1a:07:8c:d7:37:4f:2b:
d4:58:3d:35:ae:9f:ce:e1:14:9b:ef:3f:cc:58:1b:25:ab:95:
b3:70:87:55:93:03:45:a7:cb:8a:8a:88:a2:69:1a:0c:2f:bf:
95:e9:a9:ec:ad:06:a6:da:df:47:46:64:52:d3:a2:fc:63:7d:
52:17:c4:6b:d8:b2:85:fe:8c:86:62:ae:00:c1:2a:42:5a:17:
94:5e:40:06:ea:ac:cc:0e:7e:22:a2:41:09:87:1a:f1:a4:f2:
30:11:51:f6:9d:84:9e:c5:08:f8:86:b9:8d:31:6f:a5:b5:3b:
9c:d2:4e:b1:eb:5c:64:6d:7b:aa:f0:76:be:0a:a2:7e:d9:11:
b0:b5:21:42:10:b9:d0:85:32:fa:0f:08:2a:f8:52:5d:47:4f:
5a:ff:76:da:47:56:e8:c7:58:59:19:b9:d5:7e:f6:1e:95:0a:
82:03:8d:fb:b4:4c:c5:b8:06:ae:68:4c:66:2b:91:6d:92:c2:
2f:d9:cf:c3:bc:36:92:c2:43:57:88:4a:4d:ea:f6:60:b6:f6:
6b:86:72:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWuMYSH66qzUlgipZnY9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWY0YWNlNzE5OTA4ZTVkYjY3ZDVjODdlZjA1NGFhMTY3
NjkyOGQwHhcNMjYwNzI0MDkwMDM0WhcNMjYwNzI1MDkwMDM0WjAzMTEwLwYDVQQD
EygyNDRlMjNjZWIyMjJkNDQxNTcwOWYwNTE2ZTg2OTQ5Njc3NmE4ZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwngW5dGVt3qKhl3+VpcD+5Qc8jzD
Titg+vmLVeiJ87zn8GyecmOojpKgN4y8837ZW5Lsu/n5xy0Ziv1ZtgZd6XjNJoyV
AEKzj8HPCU/Qf4li8uFZOcqhDpG5uk+Da4XZgh9ZxXZSNec61XCrXecsPmXosfat
H6Nh8jTvAB8E+EraQ0J+wtUQqHQ7HMZrrhMNxLCAPnT+h3ieGLHr3IUYb6G1CyfD
foM1v+tFQv3DSAEWxNJMcF7+lL6/Uc9+rRTVRPPeysjefWkrXIARd+QNgwhxxmKv
PEOb1t6kmW9WzdI44tlrq/UDfEKc2ZzA4cpXvpXhOtAQIODQZyIWXMO+owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCROI86yItRBVwnwUW6GlJZ3ao+CMB8GA1UdIwQY
MBaAFLwfSs5xmQjl22fVyH7wVKoWdpKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkI5S3puR1pDT1hiWjlYSWZ2QlVxaFoya28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It
MzQ2MDI2MjQ1NWIyLzEvdkI5S3puR1pDT1hiWjlYSWZ2QlVxaFoya28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy
LzEvdkI5S3puR1pDT1hiWjlYSWZ2QlVxaFoya28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6xt7Ixj
UeitUjQEIdDh9mPpQZUUxt/dukmZ5OgQFgmSXuvL816LSmKlEXWRhFoaB4zXN08r
1Fg9Na6fzuEUm+8/zFgbJauVs3CHVZMDRafLioqIomkaDC+/lemp7K0GptrfR0Zk
UtOi/GN9UhfEa9iyhf6MhmKuAMEqQloXlF5ABuqszA5+IqJBCYca8aTyMBFR9p2E
nsUI+Ia5jTFvpbU7nNJOsetcZG17qvB2vgqiftkRsLUhQhC50IUy+g8IKvhSXUdP
Wv922kdW6MdYWRm51X72HpUKggON+7RMxbgGrmhMZiuRbZLCL9nPw7w2ksJDV4hK
Ter2YLb2a4ZyAw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:39 2026 by rpki-client