Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: zDc80qzMA08oLJG3SpaN3EXvVbr9nuyiukI8qYIZwd8=
Subject key identifier: 12:19:DB:DC:44:7E:86:7C:A6:BB:98:6E:D2:2C:96:59:FE:1A:76:B6
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019F90C840867C9C4FC5FD14ABC157D50E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:01:10 +0000
Manifest this update: Thu 23 Jul 2026 21:01:10 +0000
Manifest next update: Fri 24 Jul 2026 21:01:10 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: 08KdOAXEDgUuu6hRzxgnHLx5lnz3MPIKcWv2ghqC1oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:40:86:7c:9c:4f:c5:fd:14:ab:c1:57:d5:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jul 23 21:01:10 2026 GMT
Not After : Jul 24 21:01:10 2026 GMT
Subject: CN=1219dbdc447e867ca6bb986ed22c9659fe1a76b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:e1:50:4c:31:50:7b:76:54:21:5a:fd:c2:
65:da:0c:48:e3:64:e0:4e:b4:31:db:fd:9b:7a:84:
3f:69:b7:5d:2d:c0:71:a8:a4:46:b9:2e:cb:6a:4d:
57:42:9a:58:10:42:ec:2c:21:85:c5:75:05:58:e4:
9f:01:d5:df:c9:9e:8d:71:58:51:10:01:57:07:e9:
dd:3a:46:da:81:1e:a3:40:11:1d:f2:5e:5d:c7:e5:
e3:20:42:ab:61:f7:3a:65:39:ab:d6:53:e5:52:d3:
95:3c:37:ea:42:f4:dd:e7:ff:a7:39:0e:6c:64:f1:
e7:21:19:d2:b4:ce:e6:55:b0:5c:01:34:d0:76:7b:
16:5e:6b:b2:c1:cf:b7:52:e6:cd:27:93:c5:c5:86:
28:ca:fc:fd:b3:20:68:b5:df:db:9d:03:f1:66:81:
36:40:1f:9b:1a:c5:a4:ab:34:6e:0f:9c:05:6d:48:
d2:f2:16:1f:2a:ba:24:9c:55:f7:c5:1a:1c:61:29:
88:1e:00:a1:d8:d1:20:9e:b8:22:07:d5:42:31:76:
af:e0:b9:a4:73:bd:bf:02:34:46:7d:8e:20:ae:f9:
00:ce:50:eb:95:63:f4:8d:70:a8:80:0a:8b:04:db:
87:f4:93:68:bd:8b:41:a6:6a:a7:0a:5d:e4:fb:49:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:19:DB:DC:44:7E:86:7C:A6:BB:98:6E:D2:2C:96:59:FE:1A:76:B6
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:83:16:de:7e:09:a9:0e:34:fb:6d:56:77:ff:ea:e2:de:8c:
4c:37:6c:54:0f:63:89:33:51:8d:d4:df:ce:f4:f7:05:44:19:
1b:c4:49:d6:df:80:8d:ec:7b:dc:2b:7c:30:13:3e:bd:bf:a3:
81:c2:4c:b4:d5:5f:12:53:4c:44:dd:b7:a9:71:98:84:97:35:
07:07:74:fb:a7:07:af:66:17:7b:0c:0f:73:a8:fd:ab:d1:3b:
75:22:28:ed:fe:2b:d3:35:b6:b3:99:ac:d3:25:25:5b:e8:b1:
c4:e4:ea:cf:5c:19:50:39:3b:de:f0:16:80:8e:12:52:e9:4d:
05:9d:d0:6b:fc:09:3c:65:2d:91:3f:4c:da:f5:b1:40:ae:b6:
a7:b9:6a:59:a7:f6:7e:c3:d9:ca:a7:9e:ae:b2:4e:87:a7:26:
5a:ff:4b:73:9d:9e:99:47:6e:1f:73:a9:b7:d9:45:e0:c3:13:
68:75:d4:3b:65:31:f8:b3:00:58:3e:ae:a4:57:ee:03:4b:25:
8d:fb:40:eb:72:ea:9f:75:ac:6c:dd:94:7d:a8:ad:2e:09:c5:
78:66:e3:bc:28:55:0a:5b:2a:5a:4e:e8:76:f7:52:36:08:e9:
3b:33:03:3e:d4:46:24:f9:1b:77:bf:83:0a:98:70:03:a8:ee:
92:96:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:31 2026 by rpki-client