Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: a4oG69T52CBm5fSEPC9ilSj4v3ZQPbFyb5tkpbdc5vg=
Subject key identifier: 14:31:8C:77:17:E5:80:08:CE:E9:01:B8:60:24:94:15:9F:54:E4:AD
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 019F935B38FA781B22E75D42092C57230882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 1947
Signing time: Fri 24 Jul 2026 09:00:56 +0000
Manifest this update: Fri 24 Jul 2026 09:00:56 +0000
Manifest next update: Sat 25 Jul 2026 09:00:56 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: F3kMPkS3OTx6KCyp0pJ4oMeJg/ZjIpVTyAl7wWTdXbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:38:fa:78:1b:22:e7:5d:42:09:2c:57:23:08:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Jul 24 09:00:56 2026 GMT
Not After : Jul 25 09:00:56 2026 GMT
Subject: CN=14318c7717e58008cee901b8602494159f54e4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:06:f0:d0:b0:8e:63:84:b7:da:08:b7:4a:
98:42:99:c6:d4:f3:dc:7e:0e:11:2b:2c:1a:f8:34:
57:b7:cb:30:5c:19:ab:f3:fb:16:ed:38:11:6a:6b:
f6:36:e6:41:c1:63:c5:cf:67:7d:14:dc:ab:f4:68:
7f:56:8c:77:11:8d:96:13:c8:aa:79:e2:db:fa:f1:
d5:72:e4:bc:d2:bc:bc:39:52:d0:68:1d:b4:42:9b:
24:a4:d9:ff:8e:ae:84:33:e0:3a:9c:78:e8:94:fc:
99:58:2e:af:b9:6a:2f:ae:62:02:e4:58:12:21:54:
43:59:ac:ab:bb:0b:a1:b6:95:21:1d:92:e1:80:5e:
4a:9a:93:e2:f2:05:9b:64:05:f8:a9:9a:38:b2:8b:
89:c3:a2:87:61:c7:83:19:ef:a8:24:6b:39:95:2d:
5f:5b:60:46:4f:79:c0:a0:82:c7:5e:5f:38:63:44:
c6:bf:46:81:7e:80:15:fa:06:28:29:4f:09:e5:b0:
44:73:59:0f:9a:f2:2c:08:a2:bb:9d:d8:43:6b:8d:
dd:7c:f6:49:d6:2a:57:68:b0:70:16:72:98:67:f3:
c2:df:e1:d8:41:5c:74:99:ec:2a:2d:71:12:2e:1f:
ac:f6:67:cc:b6:a6:44:29:5e:61:66:15:17:08:63:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:31:8C:77:17:E5:80:08:CE:E9:01:B8:60:24:94:15:9F:54:E4:AD
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:75:92:39:ac:15:5c:4c:4c:25:a1:e9:a9:e4:18:7e:fa:
91:37:4c:a0:da:d4:67:ae:cc:26:c5:fa:6a:80:a6:ba:f0:47:
eb:23:b5:30:57:8e:19:84:94:ad:1b:9e:12:9e:5a:3b:e7:11:
85:f4:de:e0:c2:bd:b5:1a:0c:08:40:8e:dc:0a:15:26:d4:00:
88:bd:67:7f:6b:05:9f:77:87:c7:e6:d0:f3:2e:1e:5e:e4:fd:
f1:62:b5:f5:6f:be:97:16:46:ce:03:f7:79:64:06:b4:08:0b:
cb:4b:73:49:87:2d:af:ee:60:2c:21:c0:37:ec:8b:86:54:21:
ba:e1:3a:a9:75:f9:35:b3:f0:f9:37:03:30:dd:53:76:74:44:
65:37:2a:21:3a:1b:2d:ff:18:d7:2a:e5:d7:9a:25:34:5e:52:
a3:24:e5:9b:00:4b:99:7a:e1:f2:ec:bc:9c:00:ca:24:63:5e:
c5:19:3f:5c:7f:8c:e2:16:37:77:d9:ae:3c:04:4b:f8:bd:89:
c7:03:e0:f3:87:37:75:5b:be:40:3d:1a:d0:9d:8e:ae:17:42:
ea:c2:08:49:b1:91:99:f3:5b:85:26:1f:c5:83:f6:67:65:fb:
9e:64:8e:6c:2e:2d:01:00:b3:ad:92:d1:d4:e9:60:b7:fd:75:
2d:99:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:18 2026 by rpki-client