Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: 4h7e8UFGa/gniTqQn3DgGP0330sbhCybQ4uBtGl0tsw=
Subject key identifier: F5:B1:19:EB:37:E6:FC:72:CE:BC:27:74:67:21:27:05:C9:BB:DC:E4
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019F90C829CFD54619A39CF78BAE7CEE6468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:01:04 +0000
Manifest this update: Thu 23 Jul 2026 21:01:04 +0000
Manifest next update: Fri 24 Jul 2026 21:01:04 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: Yu58WkFkTRGzh0XsEuGypr6bH37Ye8CPNpVEj3Bw87M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:29:cf:d5:46:19:a3:9c:f7:8b:ae:7c:ee:64:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Jul 23 21:01:04 2026 GMT
Not After : Jul 24 21:01:04 2026 GMT
Subject: CN=f5b119eb37e6fc72cebc277467212705c9bbdce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:81:38:e1:90:76:7e:6a:0b:ae:7d:60:1b:
c8:bf:97:1d:62:24:76:c4:aa:fa:c4:f0:e7:b7:f4:
a3:d4:05:bc:bd:e9:57:7c:53:61:56:17:f7:2d:00:
ed:a8:59:ed:58:68:52:ed:13:93:84:a4:9c:cc:7b:
fe:95:9c:6a:eb:0a:fb:ff:9f:34:f2:6c:6d:93:57:
61:06:17:e9:fb:c8:51:1d:5d:2a:5b:1d:77:d1:03:
44:6c:cf:68:50:08:84:a7:b6:e3:2d:d3:68:da:05:
75:19:ed:6b:1d:b0:14:ab:81:6a:a9:ee:78:b2:74:
96:05:1b:80:30:e8:13:ea:11:86:26:56:6a:53:a5:
c1:94:da:35:95:33:2f:3c:5e:c7:e6:58:a0:02:52:
6c:46:02:a5:05:28:83:6b:e5:9a:be:41:17:20:03:
c4:b2:17:3d:91:72:cf:8b:e2:e5:13:28:c1:20:a9:
aa:18:1d:7e:c2:48:ef:82:a8:35:29:02:ee:06:25:
5b:2f:4f:0c:dd:21:87:cd:2d:95:24:bc:70:23:10:
22:5e:b2:40:09:46:17:a5:6e:e6:18:4a:56:58:b8:
1b:b3:20:36:27:c9:02:bc:f4:68:c3:dd:45:44:98:
77:e2:8b:27:f5:84:29:88:cd:30:77:dd:e0:f2:b5:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:19:EB:37:E6:FC:72:CE:BC:27:74:67:21:27:05:C9:BB:DC:E4
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:2f:49:96:57:b1:13:0c:c6:af:05:2f:61:28:8b:af:c9:a5:
8a:35:6b:30:18:0f:f8:0a:d3:b2:04:73:1a:1b:d9:13:2f:ed:
6b:71:1e:5f:4a:ef:2f:00:d5:cc:80:85:10:70:cf:82:7d:9c:
81:53:04:db:53:46:0c:d2:53:31:b4:2b:56:07:47:92:2a:74:
86:cd:47:48:fa:8d:d1:70:c5:b0:4d:76:b4:fe:55:b0:39:0e:
27:a6:08:11:91:54:07:35:67:bf:9c:66:21:0f:e8:47:5f:52:
7d:13:3d:13:e4:7c:d0:b8:d1:b2:14:3f:8d:88:64:f7:f2:57:
0a:37:89:96:47:d7:8f:3d:d0:12:7e:c2:c7:91:93:5a:04:c7:
4c:ff:c3:53:0b:44:12:92:08:86:c0:8a:49:de:4e:85:ee:a3:
e4:2c:70:e7:fc:2a:de:af:ac:e3:d7:7a:76:23:f2:49:93:68:
33:0e:d2:f1:14:61:59:0f:bd:28:a3:a1:64:75:d9:1f:d1:80:
1a:fb:07:1d:54:43:eb:fd:c9:ff:0d:93:43:48:24:85:8a:bb:
1b:ba:74:44:23:fe:1f:01:00:06:25:f8:ed:eb:40:fb:ed:c9:
31:7c:b3:f2:ba:7d:83:2e:d4:58:46:e0:a7:12:3d:6d:67:c2:
5a:4e:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:41 2026 by rpki-client