Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: yM+lpeBidQwqYemJK5yvepx/V9kWwYlPxw5IgXnhqZs=
Subject key identifier: E9:46:8B:BD:BD:F0:50:79:3B:99:15:AF:FA:75:BA:19:32:AF:F0:5F
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019F9436BD75E189BFD37C992905FB6332CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0DC9
Signing time: Fri 24 Jul 2026 13:00:43 +0000
Manifest this update: Fri 24 Jul 2026 13:00:43 +0000
Manifest next update: Sat 25 Jul 2026 13:00:43 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: YUqUzLYkoxrM5a2sUmnMUPTmIsWPalIZcZ2Gsxf/Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:bd:75:e1:89:bf:d3:7c:99:29:05:fb:63:32:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jul 24 13:00:43 2026 GMT
Not After : Jul 25 13:00:43 2026 GMT
Subject: CN=e9468bbdbdf050793b9915affa75ba1932aff05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:a5:77:c3:ac:5a:e6:a4:6b:02:2d:1b:55:
c0:8d:bc:eb:e8:e2:7a:60:ec:53:53:71:a8:33:a7:
21:ea:01:af:21:1d:e5:d7:55:50:27:cd:35:8d:49:
2c:f4:62:63:dc:12:1a:f0:28:c4:21:b9:0a:5f:5c:
fc:56:3d:4a:62:24:66:57:78:76:d2:08:a9:d1:55:
81:c3:c6:b8:84:32:88:a6:2b:be:be:c0:b4:ca:43:
61:f3:87:12:55:76:f9:e2:ec:6f:7b:00:c5:6e:50:
fc:bf:76:6c:c0:d5:e4:81:ef:d3:37:d9:19:81:9c:
34:a1:36:84:ed:01:47:2e:f5:b4:31:c3:f3:dc:d9:
3c:d6:c2:ec:c6:c9:89:f3:2e:8b:26:e1:17:8c:77:
4a:9e:70:31:d8:45:18:ae:c0:30:be:b6:51:c6:e8:
60:c9:69:65:e3:a8:6a:79:ad:45:2a:8c:69:fc:30:
74:02:d2:90:ae:77:21:74:82:8a:4d:31:20:da:c9:
93:0e:9d:5a:94:1d:70:0c:4e:dc:8e:54:3d:31:08:
7f:37:8b:c8:ff:f8:bb:16:9c:a4:b8:10:b6:9a:20:
7b:32:87:7a:f2:99:dc:7e:9e:ac:2a:95:a7:85:8e:
7c:49:11:d2:93:db:0a:dd:47:47:51:ee:ce:92:22:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:46:8B:BD:BD:F0:50:79:3B:99:15:AF:FA:75:BA:19:32:AF:F0:5F
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bb:d6:fb:21:49:a7:cf:d6:75:8e:ca:31:55:75:a2:6a:a9:
4b:55:4f:c8:27:c2:c9:86:fc:cf:ae:bd:23:7e:80:9a:cf:0c:
3a:ea:f1:fd:88:aa:0b:2a:5c:e1:24:b9:ef:ad:3e:53:b6:ff:
f3:3b:d4:07:be:1c:a9:40:e1:df:4f:85:51:74:51:2f:2c:17:
26:e3:2c:d6:07:34:0f:4b:5a:94:5b:ba:6c:e6:38:51:22:ff:
e5:ad:e1:7a:0d:c8:60:00:1a:5b:34:25:f1:96:87:2c:93:45:
a9:1d:12:b2:b6:8d:ec:2f:cd:19:79:dc:10:e3:2a:63:df:78:
c5:d0:7c:d8:79:d2:50:c3:4c:dc:06:dc:81:b3:71:ef:cf:b8:
7d:86:9c:1e:a8:46:b3:63:11:88:04:6c:8c:78:ae:b5:e8:ed:
41:f3:e0:4d:31:32:8c:d6:9c:21:bb:4d:04:ff:26:4e:41:d2:
f4:8d:c2:d3:42:54:ff:be:bd:4c:8b:6b:31:20:00:29:0b:64:
9b:2a:ec:bc:d0:19:4a:ba:af:9a:bc:74:04:ed:47:8d:3a:8e:
82:5d:14:5c:35:0e:30:ab:d1:02:e1:27:be:f2:9d:6f:e5:17:
68:52:84:28:9d:b4:16:d4:b8:27:27:52:7c:03:89:8e:26:8c:
89:b5:fe:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:46 2026 by rpki-client