Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: k0YhyRtdFZoaLe99KgLPgQFR/IoC4VnzTHHhF48IdWg=
Subject key identifier: 60:8E:90:90:24:EC:95:3D:D7:26:F4:62:1D:BF:A6:32:9D:B0:77:22
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019F92EDCF77259F77D204B5C4F223C10592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 04B1
Signing time: Fri 24 Jul 2026 07:01:26 +0000
Manifest this update: Fri 24 Jul 2026 07:01:26 +0000
Manifest next update: Sat 25 Jul 2026 07:01:26 +0000
Files and hashes: 1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: 0HuVenM+OW13Eeg6xbvbuLXlKnnOkxbigZhX9DDmZE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:cf:77:25:9f:77:d2:04:b5:c4:f2:23:c1:05:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Jul 24 07:01:26 2026 GMT
Not After : Jul 25 07:01:26 2026 GMT
Subject: CN=608e909024ec953dd726f4621dbfa6329db07722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:1b:50:3b:e8:07:10:79:cd:a9:dd:06:dd:
3e:95:db:a7:2b:70:f2:1f:fe:bd:74:cd:2e:80:c3:
78:58:c3:9e:4c:4b:cb:89:12:37:5a:7b:69:14:de:
aa:b9:a1:01:a3:9d:56:8a:38:80:35:2d:ed:ee:1f:
24:52:04:4b:27:f3:4d:45:4a:69:54:c6:06:04:e7:
1c:89:03:be:2c:3e:f4:1f:af:2e:c4:28:33:10:00:
48:2f:11:ad:fc:c4:e6:6f:f4:e2:c1:9f:9d:68:06:
cc:3a:5b:8e:20:c8:0c:4a:1a:d8:f8:57:7b:dc:f7:
53:60:bc:60:03:17:7e:1c:6f:d5:16:55:57:a3:6f:
63:5e:6b:f7:ad:fc:d2:ea:50:f7:03:7e:7e:2b:dd:
fb:45:fc:58:79:ca:7a:48:03:79:00:de:25:13:ea:
00:d6:45:8e:48:30:f1:3c:ab:11:45:91:ce:41:e1:
4d:68:19:2c:66:01:d3:15:4c:ac:5a:4d:e3:61:5c:
c9:0f:16:be:aa:ff:6b:da:4b:e6:32:ee:38:0e:7b:
4b:cf:0f:22:c9:7c:16:f8:b1:b3:76:93:db:04:ba:
e9:5e:92:cd:9f:77:26:5c:a4:b6:36:79:07:e7:7f:
b7:8a:38:37:97:ea:45:bf:9b:57:81:2a:a2:f1:4f:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:90:90:24:EC:95:3D:D7:26:F4:62:1D:BF:A6:32:9D:B0:77:22
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ba:ff:e3:48:3f:25:56:17:c0:f9:67:81:36:79:14:2d:dd:
97:ca:ed:a9:6d:a6:77:3c:f2:18:ef:05:e3:2b:35:6a:b0:01:
bf:3e:c1:91:06:8d:cc:58:11:7e:78:fb:f4:3e:1c:26:d5:71:
9b:23:b0:71:b4:ac:b0:eb:af:dd:a3:92:14:a8:2e:38:23:67:
47:f1:f5:a0:b5:0d:e8:85:10:03:af:8f:67:26:75:32:47:e4:
b4:f6:18:e3:f7:e5:7b:06:06:69:7d:f5:18:aa:2c:50:d1:74:
17:f6:75:05:db:5b:60:6b:37:ee:7f:df:ad:fc:37:1a:36:b6:
34:23:00:eb:54:47:63:78:5c:89:7a:5b:c2:f6:73:75:ba:66:
cd:9f:68:77:0e:ba:d8:4d:d8:3e:02:7b:fe:77:69:c5:76:09:
ba:ea:e5:16:91:85:a6:3a:71:58:20:52:ea:08:07:f0:8a:14:
18:58:d6:d5:52:c3:d8:cb:7d:94:ce:5c:52:43:4f:68:c9:62:
8d:1d:5c:59:94:48:6e:0d:ff:14:b5:eb:32:a6:c1:9f:6c:23:
e6:d5:31:b3:da:86:d0:82:53:61:a4:92:b9:4c:e9:26:6a:c3:
56:eb:ae:db:2a:03:e4:5b:c6:82:8d:fd:3d:54:c4:aa:ea:7a:
04:7e:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:57 2026 by rpki-client