Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: FY97MhA2VyEiSODMEyMFOiMZHE2LQkii1qt4bEk9mkI=
Subject key identifier: D2:42:CC:6C:05:FA:57:D2:57:17:07:10:1D:02:CE:7F:82:E2:E3:E0
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 019F93FF6569E201C8A13B7DF9D1AE0BB69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 032B
Signing time: Fri 24 Jul 2026 12:00:15 +0000
Manifest this update: Fri 24 Jul 2026 12:00:15 +0000
Manifest next update: Sat 25 Jul 2026 12:00:15 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: 7eYEVLjO31De20OfeEwxP1tQhuJHTRPnikcQSlTtNyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:65:69:e2:01:c8:a1:3b:7d:f9:d1:ae:0b:b6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Jul 24 12:00:15 2026 GMT
Not After : Jul 25 12:00:15 2026 GMT
Subject: CN=d242cc6c05fa57d2571707101d02ce7f82e2e3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:29:98:cd:b1:46:34:32:dd:14:17:67:74:
a2:b1:93:5c:bb:71:f3:49:c9:68:b4:c4:9b:b4:b0:
dd:4f:a3:8d:3c:c3:ee:f4:cd:fe:e1:a5:83:23:cc:
8e:cc:a1:d2:e9:d9:09:5e:1e:10:c3:30:86:f6:09:
f9:08:98:c2:41:fb:24:46:6c:55:62:db:12:52:41:
d0:1e:04:0a:88:b4:6a:e4:07:1b:0a:69:3a:06:89:
94:74:6d:b6:b9:24:65:eb:0f:a8:87:a1:48:7b:ea:
77:f2:2d:14:c8:68:e3:0b:7a:d3:44:e2:54:84:35:
38:cd:1f:75:d2:86:cb:92:88:bb:06:33:9e:dc:e0:
89:fd:7b:99:33:fd:0e:3c:9c:5c:29:d8:ad:b3:ee:
31:47:0e:88:a0:e1:0d:07:e2:09:88:fc:e6:01:c1:
12:8b:63:c2:5f:6d:ce:13:68:54:72:37:50:ab:27:
5a:1d:c1:f9:8a:e0:d6:46:5f:59:15:9e:61:1b:b5:
b9:63:32:34:7b:98:e6:ac:f0:bb:4c:78:bf:1f:cc:
de:fc:92:f2:8b:16:32:3a:21:18:e9:99:3a:41:a7:
2f:da:ef:d0:f6:13:d9:55:f7:01:1e:ee:eb:41:6e:
0d:af:09:bb:de:6f:d7:06:c4:d8:7a:c2:84:07:14:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:CC:6C:05:FA:57:D2:57:17:07:10:1D:02:CE:7F:82:E2:E3:E0
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9c:09:ad:cb:06:3c:35:17:26:b6:01:75:8d:30:94:15:d6:
99:fe:bb:8d:27:7e:0c:41:48:20:b8:e6:0f:0d:f3:84:93:fd:
fe:dc:e6:36:a2:34:4c:34:da:05:81:e6:48:49:7c:23:a6:3b:
9a:28:02:10:8d:fc:7c:1a:fb:ca:76:b1:95:bf:9e:e9:b6:0a:
53:5d:e8:a9:2a:4e:7d:a9:10:9b:f6:d7:a2:b9:e5:32:e3:b7:
91:e2:b3:03:b0:dc:35:0c:58:89:bc:39:b2:1a:08:13:57:98:
16:d4:fa:ac:38:8c:52:e3:76:dc:f2:43:70:58:27:be:bd:c9:
dd:00:5d:99:6f:a4:7a:bf:07:3f:55:fb:cf:fb:80:ae:ad:3b:
43:6f:3b:8f:30:82:c7:11:0a:df:e2:27:14:74:31:93:d6:8a:
e1:7a:d4:1c:c2:1d:08:5d:69:04:eb:4c:3c:fe:9a:ad:32:71:
24:43:bd:26:8b:3f:fa:6d:64:e9:ec:d2:27:f2:0f:c1:d3:21:
9f:bb:9d:21:c1:53:60:cc:17:5f:1e:3c:0b:01:7a:7c:f1:98:
7c:6f:59:35:29:d4:c1:7d:ea:92:d7:1e:ce:38:ea:04:71:90:
e6:93:d4:21:c9:c3:c3:9e:e4:df:e0:4d:a6:7b:dc:8f:2e:e7:
1c:85:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:01 2026 by rpki-client