Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File: RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier: tpxd9Q7oJbF9qkX1RHbIn+fBZyEBRxwQSw1VVb8WLXY=
Subject key identifier: 86:AF:5B:47:B6:FC:A9:1E:F3:21:8C:CD:46:EB:03:14:FA:1B:57:FE
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 019F905A387D373AF71CA519BDA512CD87BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 19:00:59 +0000
Manifest this update: Thu 23 Jul 2026 19:00:59 +0000
Manifest next update: Fri 24 Jul 2026 19:00:59 +0000
Files and hashes: 1: 7lFYs7eKgq5MTaDO4e_G6n4_rC4.roa (hash: IJh5ThEm6TXUbPCunEfndZGbjB6YP5UPF/UHUKZqQrg=)
2: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: +Et7wWIedM4Rz/pjQrELyBa5ZY7vkROMRD1S4sEdCdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:38:7d:37:3a:f7:1c:a5:19:bd:a5:12:cd:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Jul 23 19:00:59 2026 GMT
Not After : Jul 24 19:00:59 2026 GMT
Subject: CN=86af5b47b6fca91ef3218ccd46eb0314fa1b57fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:6b:09:de:e7:0d:ad:e5:73:51:06:ac:2c:
dd:29:78:d6:b4:81:da:e2:4d:f2:8d:81:2f:66:65:
0a:09:d5:13:58:55:14:f2:c5:f8:7a:9f:e6:4d:bb:
a3:1b:46:9c:0f:0a:35:ce:9e:84:ab:df:ef:92:a9:
a9:c6:79:d7:1e:aa:94:e3:99:95:d0:29:b7:5b:4c:
80:c6:82:83:f8:aa:b0:c1:0e:0d:b4:cc:f8:2f:c8:
82:aa:b1:c2:b0:0b:ff:d5:b3:63:77:d2:fa:de:de:
a8:98:c1:c9:32:a6:39:79:e4:b4:b3:8f:c5:1c:66:
9c:46:f4:67:c7:42:58:a1:41:5a:0d:e6:b0:6a:ac:
8a:41:49:c3:7c:8a:45:54:15:84:cd:df:5f:76:7c:
99:99:ae:ea:34:39:7a:7f:09:a5:62:b4:62:7e:f4:
36:91:75:a3:79:f1:34:a1:f9:1a:85:2c:a6:7f:47:
fb:50:2d:37:44:b8:fc:e4:01:1e:2d:b5:b6:bd:34:
98:40:c6:5d:61:d0:c1:bc:9e:a2:13:3c:34:6a:e3:
6f:f0:b4:33:48:73:c4:7d:70:5d:84:50:f7:3d:b1:
57:de:b1:41:82:34:55:02:e0:c4:02:f4:78:4c:9d:
16:49:f5:cd:8b:bd:fe:62:27:8f:99:29:53:30:c0:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:5B:47:B6:FC:A9:1E:F3:21:8C:CD:46:EB:03:14:FA:1B:57:FE
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6a:5e:95:09:94:ec:d9:c2:ca:c7:31:85:1e:d6:27:69:8b:
6f:7c:49:41:ff:53:1d:17:38:9b:c9:44:33:3a:e1:82:c1:6a:
87:e5:71:2e:5a:be:a6:26:6c:7f:4d:92:c4:96:57:be:c8:24:
af:c8:dc:5c:8f:e0:02:b7:de:df:72:d9:93:64:3a:34:0a:4e:
85:65:40:cf:ef:b4:14:c0:22:bd:07:b9:f9:e5:41:b4:6a:ef:
8c:90:e0:f0:91:78:96:21:92:37:6e:fb:cc:26:1e:3e:c6:41:
0b:8e:d7:a2:b6:68:05:de:c6:71:2f:78:cb:31:c2:80:60:77:
5d:d6:0b:da:d3:af:73:cf:5f:f2:80:1f:1d:3e:f9:19:ac:ad:
4d:47:a0:78:40:d3:c0:eb:ca:e6:b3:9f:7c:c9:b5:fb:fd:59:
74:4b:c9:8a:5d:9b:62:81:51:72:17:19:1f:45:b6:3a:b6:b3:
63:c1:91:0d:cd:fd:e9:ba:f7:31:fc:64:cb:99:2e:cf:77:4e:
dc:59:58:e9:0c:43:e2:dd:4b:5a:bf:2e:ea:83:51:4b:cf:2b:
8d:e8:f8:19:67:ea:6b:cb:45:72:b5:49:69:99:b5:f2:95:52:
1e:e5:4d:10:44:f0:6e:b5:27:13:4d:a0:fa:0c:0f:e9:5c:69:
49:f7:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:35 2026 by rpki-client