Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: iDM125PsE/6K0yRkpJ5+0LbbORTLtpMWLtUX+7IaU9k=
Subject key identifier: D2:EE:4A:E5:52:BC:BA:CC:C4:99:94:28:61:A0:D4:62:C1:D6:9B:A6
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 019F916D4FE652BCB4BC2A5D01ABB6B6A5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 077C
Signing time: Fri 24 Jul 2026 00:01:27 +0000
Manifest this update: Fri 24 Jul 2026 00:01:27 +0000
Manifest next update: Sat 25 Jul 2026 00:01:27 +0000
Files and hashes: 1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: b+Bk5lBWHPNmB3ZUyxaa5X84iX/K/dO+DpWzMtZnzi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:4f:e6:52:bc:b4:bc:2a:5d:01:ab:b6:b6:a5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Jul 24 00:01:27 2026 GMT
Not After : Jul 25 00:01:27 2026 GMT
Subject: CN=d2ee4ae552bcbaccc499942861a0d462c1d69ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:e3:08:1c:ba:2f:5a:1f:f8:4c:74:e3:6f:
8e:c2:56:4d:98:3c:34:b3:e9:bb:c1:c4:0d:56:3d:
b1:27:68:c0:70:93:58:68:d4:2a:65:c7:68:5f:76:
cb:63:91:71:4c:21:55:84:79:38:d0:25:47:32:a4:
25:09:ba:fa:9f:ba:77:13:2e:00:8d:ec:a4:e4:30:
e6:6c:ee:40:9a:12:a8:1c:b8:26:15:62:7e:66:35:
24:a5:3a:e4:76:31:9c:c4:b8:aa:64:1a:04:7d:28:
c3:9b:b0:66:6c:e8:cc:b5:ef:5b:49:7f:02:b7:13:
9f:e8:97:5c:33:7e:70:21:a9:4e:54:18:7d:01:53:
e4:32:a0:b3:0f:e5:ab:71:96:6d:e4:2d:78:44:aa:
56:c6:aa:8b:85:7c:49:0d:98:54:f2:2c:df:4e:ff:
8e:49:bb:b7:1f:d3:95:cf:13:02:54:25:ba:aa:d7:
02:08:2c:26:66:88:0d:9d:f4:b1:86:12:4c:65:af:
7c:b7:1a:a1:db:99:db:48:dc:15:c7:20:2c:05:72:
cd:40:e0:31:ef:b5:d1:8d:e8:7e:a4:da:87:72:ca:
4d:90:13:60:70:15:42:f8:f7:26:46:41:da:f5:a7:
5d:4a:c3:5e:29:27:fe:29:26:0d:9a:6c:62:49:cc:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:4A:E5:52:BC:BA:CC:C4:99:94:28:61:A0:D4:62:C1:D6:9B:A6
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:b9:69:50:7a:16:44:df:5f:9e:66:2e:da:01:e4:00:fe:
03:d4:5e:8a:88:fa:5a:9c:c6:79:a4:77:b0:34:d3:96:4a:01:
a8:13:26:e0:c8:66:cf:a4:6d:06:53:b8:85:6c:af:e5:c3:c2:
a6:99:ff:87:eb:88:79:87:83:89:13:52:c8:7f:6d:ec:4b:c2:
d8:62:97:37:8b:17:8f:3e:a6:3d:db:e4:ce:22:f6:fc:1a:ab:
19:27:43:d0:c1:52:d2:91:9d:30:f3:76:c4:ec:8f:65:7b:58:
50:69:4d:98:35:9d:bd:e7:50:b3:8e:6e:be:2f:b2:58:d3:ca:
3b:db:8f:00:01:89:35:f0:6e:52:54:6e:d3:7a:41:4a:31:0a:
04:2a:27:35:cd:8f:52:84:40:c9:a3:ee:23:f9:a9:8f:76:42:
ff:94:36:a2:3f:6c:95:c9:c4:fd:f0:88:c4:ba:ae:cf:ea:1a:
29:7f:f8:72:5a:5e:bc:d7:36:b1:9a:41:1c:2e:bb:28:51:47:
73:c2:44:55:6d:0f:5c:8e:f3:a0:f5:c9:17:dc:c8:8e:a3:d0:
54:69:25:04:97:75:9c:b2:53:6f:c8:92:29:e7:51:92:6d:69:
04:cb:a9:8e:fb:2a:eb:0d:05:44:64:87:51:fd:62:c6:2b:2b:
59:aa:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:18 2026 by rpki-client