Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier: qjiM7mjiFOnpW2NO0ZoKp508saGt9Nb3xYxCmWjaFo4=
Subject key identifier: DF:0A:34:FE:EB:62:79:50:1F:FB:EB:C4:93:A8:43:5D:54:12:72:FE
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 019F93246B143FC40D56B7C1FA05C1EA0353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number: 0CFA
Signing time: Fri 24 Jul 2026 08:01:05 +0000
Manifest this update: Fri 24 Jul 2026 08:01:05 +0000
Manifest next update: Sat 25 Jul 2026 08:01:05 +0000
Files and hashes: 1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=)
2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: jvsxFZ/2akdJMWL1kh3Icq7tOlEVIUZ/9xzZuY+Bf7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:6b:14:3f:c4:0d:56:b7:c1:fa:05:c1:ea:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: Jul 24 08:01:05 2026 GMT
Not After : Jul 25 08:01:05 2026 GMT
Subject: CN=df0a34feeb6279501ffbebc493a8435d541272fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:85:49:06:2e:73:65:f9:df:fe:c8:37:e2:
ce:94:1d:45:2a:65:d2:46:25:87:75:6e:2f:93:83:
e1:fc:eb:cc:26:a3:18:b2:e2:1e:a2:bf:34:bf:6b:
39:f8:70:55:69:2c:c2:6f:c0:6a:f8:a9:4a:5a:0c:
76:1e:97:a7:80:77:f0:10:af:98:8f:be:5b:a4:05:
eb:74:29:1e:9f:60:65:ad:1d:e7:18:92:50:06:5f:
d5:01:2a:51:4e:fa:ae:10:cf:f5:37:8b:70:0e:17:
a3:6d:21:ae:e5:94:a0:36:5c:02:e9:79:cb:c8:fa:
98:ed:84:e4:a3:dd:f6:92:1a:bf:3f:4f:bf:ed:aa:
b9:c3:a7:50:aa:3a:57:58:34:b9:e4:aa:69:cb:e0:
f9:3d:1d:a1:92:cd:d0:47:48:d5:87:15:73:e8:71:
23:ab:54:c2:c1:8d:32:64:d1:d2:db:2b:c2:49:09:
85:41:b3:72:1f:68:d4:25:e2:06:18:a8:9a:ef:c6:
66:bc:89:98:19:f7:1b:28:2f:51:3d:51:88:f0:f6:
dd:3d:a9:8c:44:8c:95:c9:31:27:06:3a:26:24:66:
f9:7e:a9:b5:16:c4:a6:3e:9f:94:45:f3:91:66:18:
ee:98:0c:ba:b8:13:4a:0a:ac:25:4d:6e:c1:98:d0:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:34:FE:EB:62:79:50:1F:FB:EB:C4:93:A8:43:5D:54:12:72:FE
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:50:a1:21:a1:d7:80:32:f8:ca:83:89:0f:3e:ec:94:0c:61:
f6:30:fa:fa:ff:ca:f1:86:a7:dc:af:b2:24:ba:32:45:30:3c:
bc:ea:11:96:dc:c5:51:47:e9:a9:1e:4b:25:77:04:3e:86:2e:
bd:8a:d7:71:c8:a0:28:a5:df:fb:6a:49:84:b5:f5:73:cf:d8:
d1:44:d2:d8:08:4e:a9:6e:0f:7a:39:66:92:2a:7d:22:b6:eb:
d9:ff:45:ca:45:b6:64:f6:d2:6d:59:12:00:ff:ec:09:08:17:
05:70:c1:21:33:54:e2:a3:80:0b:14:dd:af:72:e4:46:ef:6e:
0d:0f:c1:2d:5f:2d:df:45:e8:9b:0d:39:19:8f:da:18:4f:75:
92:1e:31:8a:72:62:2f:e1:af:fe:fd:16:ef:50:80:1e:55:9d:
bd:33:02:c1:65:ea:fd:7e:36:fd:d0:43:21:8d:72:95:74:53:
d1:c7:10:7b:d5:77:5f:a5:cf:5a:a2:d6:10:b8:70:08:3f:6c:
4f:21:bb:34:e5:2b:2c:d5:b9:1c:6f:0d:39:01:c7:df:b8:7b:
1f:c9:fe:72:4b:9a:46:1f:63:ff:91:3e:39:b1:47:7c:40:8c:
53:5e:42:4b:36:f5:94:96:0c:1b:38:08:1d:bc:3d:36:25:ff:
90:0d:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:09 2026 by rpki-client