Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: +ZWt3i9HsOvJLviygGcdrcui0BdAhEyBRSPSCW/dqP8=
Subject key identifier: 88:34:4A:EC:73:19:51:B4:53:DE:E1:EA:9C:F3:6C:0D:63:79:23:A9
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 019F921197686D2E11D3FF178D998D54C1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 03:00:54 +0000
Manifest this update: Fri 24 Jul 2026 03:00:54 +0000
Manifest next update: Sat 25 Jul 2026 03:00:54 +0000
Files and hashes: 1: H5XIBQIDLJQjSp39OuEv8vt1cZ4.roa (hash: xpiWSsWy5a1LyppV6vCGdX0tXvaYKw/9ibIsF5wlKgg=)
2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: bNhT+6mf0/vaFEntdTVOYdSHXfklnlUI6LggJ9JdOig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:97:68:6d:2e:11:d3:ff:17:8d:99:8d:54:c1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Jul 24 03:00:54 2026 GMT
Not After : Jul 25 03:00:54 2026 GMT
Subject: CN=88344aec731951b453dee1ea9cf36c0d637923a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:5c:14:dc:7c:d9:24:26:2b:ef:7e:83:c3:
43:5b:2f:ac:17:b6:29:73:5b:2c:da:29:0c:76:84:
40:b5:67:cf:56:58:ba:06:95:c1:58:44:12:c3:62:
04:b3:0b:fd:77:36:9e:05:13:19:ea:62:5d:98:01:
c9:09:10:a4:01:71:bd:c2:b5:ac:a8:5f:ec:e8:3a:
7d:42:b3:ee:76:40:dc:6f:8b:d8:0c:f7:71:29:a7:
d8:fa:c0:43:d0:e7:ff:9c:95:f0:23:bc:c0:18:98:
05:54:65:ef:32:b2:54:1a:f3:75:fc:9a:80:44:52:
c4:9d:e6:20:3d:4c:13:a0:5c:8b:26:fd:cd:31:d2:
53:62:e4:8e:68:52:89:84:22:3d:ff:50:e5:8f:16:
dd:31:93:c7:84:c3:2c:b0:6f:4b:ad:0b:f8:62:cc:
37:f4:49:aa:4f:35:d4:3e:97:dc:79:de:1f:41:d0:
1f:9d:29:d9:ee:e3:52:be:a8:c4:5f:c2:f7:09:41:
1c:05:4f:39:3d:9b:43:49:58:5b:15:34:13:ab:c3:
47:79:cb:7a:7a:a9:48:10:8d:61:a8:86:cb:a2:69:
c9:ab:65:39:4a:a2:3e:23:f5:63:e6:f5:52:0b:82:
06:89:00:08:10:6a:4a:45:fb:3b:7b:de:c4:62:46:
1c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:4A:EC:73:19:51:B4:53:DE:E1:EA:9C:F3:6C:0D:63:79:23:A9
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:04:0d:b1:bb:89:a0:20:22:7a:39:df:21:2f:44:c9:b7:19:
15:15:2b:f3:5e:1a:dc:3d:de:5e:88:3a:0b:ae:07:ec:27:09:
6a:64:2f:e5:62:5b:1a:d6:37:3c:45:2a:53:da:61:d4:35:68:
30:2a:1b:bc:80:7f:5c:c9:9f:1b:4f:97:d2:f4:e3:cf:09:56:
94:7c:88:5a:76:3e:b2:91:23:43:33:0c:d4:17:da:6c:9e:69:
1e:19:ab:69:c7:11:c5:48:4d:90:3e:4e:cb:3f:27:9b:9e:88:
5f:07:75:38:6a:5a:cd:ef:a5:c6:26:46:69:5c:47:82:00:aa:
a7:dc:50:fe:94:56:ab:5d:51:4d:f0:e5:12:93:57:64:5f:18:
13:87:28:8a:8b:15:dc:6a:f9:ac:48:0e:17:77:71:01:71:35:
31:5a:e6:f7:ae:81:c5:cf:2f:ed:32:e3:7c:18:46:8b:d6:e5:
f4:fd:dc:42:f4:eb:72:7f:3a:dc:ac:63:e2:71:78:c0:5a:7e:
02:82:fd:19:70:20:cc:99:8c:87:2a:45:75:33:aa:d2:52:86:
34:c2:e6:6d:dc:a0:c4:d3:54:d5:12:77:ad:ea:1e:19:8e:a8:
6a:c6:09:99:cd:a0:4f:e1:8a:b4:21:da:02:9e:ee:63:f2:c4:
89:aa:c5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:43 2026 by rpki-client