Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: go+/jNj6vJsCEJ0b9OxK0KKpEkKISeNZzXCUYwORD1s=
Subject key identifier: B4:A8:CE:7C:18:F1:C5:14:74:3C:4F:A6:FB:78:7A:47:B3:9B:91:FD
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019F954981C1BCA126DC3E8C187B06CC26A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 18:00:50 +0000
Manifest this update: Fri 24 Jul 2026 18:00:50 +0000
Manifest next update: Sat 25 Jul 2026 18:00:50 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: 5idyED2COdQHtP9qLflVutf54Ss9fUyc249v40uspLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:81:c1:bc:a1:26:dc:3e:8c:18:7b:06:cc:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jul 24 18:00:50 2026 GMT
Not After : Jul 25 18:00:50 2026 GMT
Subject: CN=b4a8ce7c18f1c514743c4fa6fb787a47b39b91fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:6f:91:89:49:2f:d6:33:58:1f:4b:ee:a0:
bd:f3:27:df:8f:72:99:54:a1:f6:10:31:d3:c1:6a:
85:f4:61:57:85:f1:c4:1f:dd:bc:13:3b:0d:06:33:
21:e7:94:e6:d4:d6:da:d5:d8:12:31:18:38:bb:be:
b2:1f:18:73:25:7e:2b:09:35:23:4d:ae:e5:92:7b:
28:bd:7a:0d:3e:5f:8a:ee:99:77:c3:8b:3d:7a:aa:
d6:ab:b5:c4:f1:8d:96:a3:5e:95:b5:9c:63:fb:80:
2c:e0:69:4f:b6:90:34:7a:ab:ec:7a:1d:4c:5b:6b:
51:25:bf:a4:ac:da:39:a2:ed:94:a5:96:20:1e:02:
99:fb:77:64:76:ce:98:b2:1e:85:59:fd:e7:c2:da:
be:22:d9:57:ea:e3:3e:17:24:0b:29:53:ef:0d:c3:
19:30:cf:7d:91:cf:c8:a2:3a:be:97:34:17:e7:5e:
30:77:31:49:4d:66:65:97:2e:1a:e9:73:fd:1e:76:
7f:dd:ce:3a:fa:bc:de:ad:5f:a1:97:f1:c7:de:22:
19:a8:b1:e5:c4:83:5d:e3:99:7a:22:20:a8:ce:2f:
61:c9:1c:f9:d4:1b:df:66:72:a2:4f:70:4e:7d:0d:
98:e5:2a:fc:87:de:11:cf:8f:d3:e7:83:b5:9f:92:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:CE:7C:18:F1:C5:14:74:3C:4F:A6:FB:78:7A:47:B3:9B:91:FD
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3a:21:20:5e:65:3a:41:7b:e9:19:6b:62:2a:02:93:de:d0:
ac:fb:07:27:4d:cb:b8:64:4f:2f:07:b0:0e:8b:de:79:52:eb:
ee:97:9b:6e:fd:5d:e1:2f:6c:04:63:ae:d6:90:bf:a2:57:30:
42:82:52:57:17:e0:8d:39:53:c2:ae:69:0c:39:2f:ff:65:e9:
24:10:b1:d9:f7:33:b7:f6:37:c3:14:b3:e2:3a:24:1f:e1:b2:
78:d6:bd:c3:cb:05:34:08:6b:a6:5b:02:37:20:b6:b0:4d:18:
09:46:1e:41:18:3a:52:78:5c:57:8a:d8:cf:d0:2d:4c:51:40:
ee:11:23:c3:51:44:53:24:f9:ff:17:f1:16:94:ed:fd:7b:7d:
04:57:49:f8:b5:fa:85:4b:99:a7:b6:c3:07:bc:c3:b6:bd:a1:
c7:bb:6c:0a:b6:ad:e5:eb:bf:58:0d:ca:1c:d6:7e:aa:19:d4:
5d:df:66:8c:ee:09:bf:cc:74:a0:84:88:1a:a2:b0:c4:5a:27:
08:1d:44:47:40:c2:b9:58:ba:4d:54:f7:1d:ba:f2:89:2d:60:
2f:70:19:f7:ec:d9:e9:a4:6b:f8:1e:2b:7d:c5:53:fe:5f:ec:
70:60:eb:6b:84:c3:fa:28:85:98:67:3a:33:5c:37:04:3d:60:
42:38:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:19:00 2026 by rpki-client