Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: 5x4BsmHgZAo+05WWSUHdCrJFlM4QrFEVSIlKCgOuEW4=
Subject key identifier: BD:35:73:B6:68:CE:83:EA:8B:82:47:61:C4:55:2E:1C:9C:B4:2A:D8
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019F916C36B7E18BA0D48B05A4E1E7E0745E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0E53
Signing time: Fri 24 Jul 2026 00:00:15 +0000
Manifest this update: Fri 24 Jul 2026 00:00:15 +0000
Manifest next update: Sat 25 Jul 2026 00:00:15 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: 1bIySXLGO4HYbPxdObZvRXTZeJ6bvOjPA54k2abzpjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:36:b7:e1:8b:a0:d4:8b:05:a4:e1:e7:e0:74:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jul 24 00:00:15 2026 GMT
Not After : Jul 25 00:00:15 2026 GMT
Subject: CN=bd3573b668ce83ea8b824761c4552e1c9cb42ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:f9:f4:52:a5:3e:d4:9e:80:15:6b:82:ac:
7c:84:93:dc:85:77:9c:cc:42:1a:0c:88:33:c7:ef:
9a:37:9a:26:a1:c7:cb:e2:7d:96:31:d0:c0:79:55:
a3:b9:f3:c5:a5:7f:66:2a:1a:4e:1f:bf:8e:93:b2:
53:6a:b2:be:1e:9b:4b:04:71:d4:bc:a7:cb:66:f6:
5d:7e:64:ee:d7:81:22:5f:81:77:fe:07:43:09:a6:
70:68:eb:97:fc:0e:01:42:38:57:4d:1b:a6:71:5e:
3e:d7:1b:b9:3b:22:c8:e4:fd:ed:61:c5:b7:2c:d9:
a8:a3:ef:94:fe:a7:32:a7:d4:de:51:8b:47:20:fb:
af:06:a2:40:87:26:8b:c1:6f:46:89:07:66:37:db:
b9:9f:fe:67:49:44:08:92:4b:4c:99:5d:ca:7d:e8:
e6:03:47:b1:20:44:8c:72:05:36:d3:b9:94:10:89:
fa:46:2e:80:01:e6:ea:b1:8a:28:00:42:a1:83:43:
cc:88:cd:9d:24:0a:a3:26:7e:2a:36:da:e7:e4:f7:
c1:16:37:31:cc:85:84:b3:23:62:ac:e4:22:a6:72:
e6:0c:5c:68:bb:3e:13:73:61:04:b2:c6:26:7f:c3:
47:a6:ac:ab:8c:7f:81:39:2a:89:6e:ef:dd:4e:59:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:73:B6:68:CE:83:EA:8B:82:47:61:C4:55:2E:1C:9C:B4:2A:D8
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:4c:a8:01:9a:9f:be:bd:c8:fa:eb:3b:0f:25:11:b3:62:
75:d0:97:b1:0a:37:74:30:37:93:75:f8:18:6e:9c:18:cb:6e:
45:56:07:c1:d0:15:f2:a4:16:d1:89:86:86:68:dc:53:66:e2:
a6:52:52:01:5b:86:b6:d3:fa:ea:77:42:00:03:04:8f:9c:4a:
45:92:4c:05:40:24:37:7b:fc:6a:41:1c:13:6b:7d:2e:0e:2d:
93:d8:76:8f:f6:d6:fd:fa:5e:2a:bc:20:9a:b1:b0:b1:ab:0d:
40:2f:ef:51:f2:16:bf:0f:8c:97:cb:3f:48:4b:62:ad:d3:43:
16:fd:1d:75:73:97:aa:53:45:8d:13:cf:04:1d:61:71:fd:37:
65:76:fb:0c:7d:98:26:f2:8b:26:3b:09:20:89:3a:c9:5e:17:
f6:2c:1a:49:b6:95:d7:1f:d9:41:68:7d:6d:10:61:67:5f:69:
84:87:96:ac:0c:d6:06:ed:32:28:7d:07:9b:aa:4c:79:f5:d7:
52:85:f2:5f:f5:79:a2:9b:92:1c:2c:ac:83:50:e9:1b:5c:14:
ec:11:81:21:14:10:c4:f2:6c:7e:5d:e8:2b:2b:51:fc:c0:02:
2f:be:f8:4e:1c:56:af:90:b2:64:a1:7c:b4:e1:1e:04:55:94:
67:3c:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:58 2026 by rpki-client