Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: KuDY/SR3UskExYVcZBk4iE/RX+aIrfTnfF7/KewgJkE=
Subject key identifier: 41:98:3C:9E:3B:82:7B:BA:54:3F:FF:26:7F:CA:7E:AE:85:0A:1D:32
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019F9391A70D9048716E583EE4A634B05C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 10:00:23 +0000
Manifest this update: Fri 24 Jul 2026 10:00:23 +0000
Manifest next update: Sat 25 Jul 2026 10:00:23 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: mfp/0PtDLc1btMunZFMdH6Y7gWPQ5YFkjXB8nDMO258=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:a7:0d:90:48:71:6e:58:3e:e4:a6:34:b0:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Jul 24 10:00:23 2026 GMT
Not After : Jul 25 10:00:23 2026 GMT
Subject: CN=41983c9e3b827bba543fff267fca7eae850a1d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:c3:26:c1:d8:7a:11:c4:cd:90:e1:c7:3a:
bd:fe:cf:e6:16:6b:6a:ca:93:ce:45:d5:9d:25:ed:
51:03:92:d0:48:68:51:16:e6:37:78:11:31:b1:26:
b6:72:9b:04:d0:11:f0:d0:df:ba:d1:99:b2:12:39:
90:6a:11:68:c2:1a:85:5c:d8:2b:e0:72:e3:6b:a3:
7e:da:0e:42:a5:f1:f7:29:6b:76:8e:67:a1:a9:d0:
3c:37:67:0f:0a:1c:33:72:26:e0:6a:72:07:3c:65:
84:5b:2f:9f:59:7f:76:11:b5:a0:22:25:1f:c8:a0:
bf:8e:2d:41:30:d4:96:a4:f8:56:cb:6d:89:9a:5d:
b2:5b:c2:c3:dd:c2:26:0c:de:9e:e8:a7:10:03:70:
27:24:1f:ef:6f:e2:81:33:04:dc:ba:44:da:a6:87:
22:0a:af:55:65:64:1b:f2:32:80:ef:b1:f9:6d:2f:
be:95:2c:a0:50:4d:c8:63:6c:dc:96:1e:3e:40:57:
9e:24:bc:ca:88:0b:a3:b3:c7:13:39:2b:28:74:4b:
39:3c:2e:78:36:11:2f:e5:15:d5:10:25:51:30:6e:
8f:92:5b:08:bc:62:ed:08:06:43:a6:49:07:43:a4:
ec:21:54:d8:94:c9:30:e1:2e:40:37:bf:aa:7b:a2:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:3C:9E:3B:82:7B:BA:54:3F:FF:26:7F:CA:7E:AE:85:0A:1D:32
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:73:a0:fe:bf:f0:fe:fe:99:7f:6c:3c:02:15:50:45:11:b6:
db:df:1d:58:61:df:83:86:87:de:5c:fc:4d:85:1a:af:51:15:
c4:e2:eb:d6:51:10:0b:8f:e7:aa:41:60:52:4d:29:9b:65:ad:
5e:4a:06:88:16:27:8f:35:47:7b:23:42:9d:a2:cb:1c:9d:9a:
ad:05:a5:30:01:4b:73:d2:c7:5a:0c:5c:d4:e2:47:7a:d3:64:
59:84:3d:2a:0c:6a:3f:a0:cd:19:00:eb:ac:19:16:a6:f1:09:
a7:12:77:ec:49:bb:a8:2a:ef:d6:1d:4a:ed:07:d2:fa:5b:be:
b5:f0:56:4e:19:5b:73:5e:32:f8:e1:65:7f:f5:9b:71:c0:a3:
a7:c6:c3:a6:a5:b8:f1:d2:1a:35:b7:56:b8:d8:9a:1f:61:15:
6c:9e:2d:85:48:16:6f:fb:9c:4d:82:6a:d1:a5:ba:73:08:9e:
d9:cc:1f:fd:9d:50:96:89:92:cc:8b:e8:fe:b3:13:da:6f:78:
99:1b:b0:25:30:a9:13:71:28:82:78:63:cc:36:cf:95:2b:da:
bf:fb:54:81:a5:d6:10:b0:47:ba:a1:0a:2e:8d:88:9b:d3:b3:
88:ff:0d:6d:eb:c5:c6:7a:f3:da:03:b0:dc:f3:3c:50:ff:cc:
b4:46:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:04 2026 by rpki-client