Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: g6HUCFHUdZ7s+GuG3v5Eax4+750QIYNbL+U7d4HE8zc=
Subject key identifier: B5:75:54:E5:50:96:40:38:49:CC:89:D9:18:A1:67:88:1F:E4:6A:86
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019F9624D55FF9435AD972592A1B0D80A3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 22:00:23 +0000
Manifest this update: Fri 24 Jul 2026 22:00:23 +0000
Manifest next update: Sat 25 Jul 2026 22:00:23 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: 9jFOaVrwUThsVJZPG19lQj0rzVab16mDlQQcQ5BSZnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:d5:5f:f9:43:5a:d9:72:59:2a:1b:0d:80:a3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Jul 24 22:00:23 2026 GMT
Not After : Jul 25 22:00:23 2026 GMT
Subject: CN=b57554e55096403849cc89d918a167881fe46a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:52:47:9d:15:0e:7b:f6:f9:6e:fd:22:04:
4b:3d:7d:7c:d5:92:bc:a7:3a:1f:8c:48:54:84:45:
1c:cc:3f:61:14:1b:15:0b:ff:25:05:6f:e0:e9:da:
c6:70:bf:62:65:50:ca:27:74:0e:fd:ec:d6:95:07:
3e:0a:de:b0:90:e2:66:ad:9b:46:da:1b:75:0f:ee:
78:a7:fd:73:f7:bc:f0:8d:cc:b3:3a:9f:ec:27:c7:
39:5b:e9:33:13:78:7d:53:5b:16:d4:41:9f:c5:38:
b3:2c:bb:1c:95:ea:64:1a:11:e0:ce:05:6d:d8:a3:
da:e8:8c:50:1b:4d:e0:a3:40:25:29:aa:97:af:6b:
5b:0a:27:d1:f6:ff:03:ce:71:6a:a1:a8:29:17:0b:
7b:1a:47:42:8d:4b:97:64:66:cc:b6:79:d8:20:7c:
85:62:45:49:4e:8d:ed:ee:27:ad:91:45:24:2e:fe:
91:a7:8a:a7:8e:12:95:64:63:cf:9a:7f:20:8a:af:
ae:d9:2b:c9:62:1c:48:2b:60:c5:2c:ac:de:45:17:
1c:7b:64:a0:35:a8:5e:71:c9:e5:31:b8:bf:96:09:
c6:41:25:4d:03:55:bc:63:f5:c7:2a:41:16:1e:09:
07:20:38:f3:c1:b2:1e:13:6e:13:07:ec:a7:d6:fc:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:75:54:E5:50:96:40:38:49:CC:89:D9:18:A1:67:88:1F:E4:6A:86
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7a:5d:0b:c1:86:5a:28:4f:d4:8c:4b:00:01:37:ba:83:5f:
52:03:3c:9d:5d:c8:b0:de:30:b3:a8:a6:6f:c9:de:7e:91:a4:
de:7f:ef:63:34:b8:11:9b:b0:d9:2c:78:b1:18:3c:39:e9:bd:
f9:71:4a:c9:87:94:4c:bf:f9:d4:51:f1:be:73:27:b0:69:36:
91:a0:09:98:b9:48:2a:f0:28:b6:15:40:ed:71:4b:3a:7e:5d:
08:1a:91:b7:85:f8:50:41:dc:d2:c4:90:6b:b4:6a:ae:ce:b4:
71:bd:4c:2e:7a:92:2c:ae:e2:1f:68:9f:8c:58:3e:f2:13:ad:
ee:f9:b5:55:55:12:57:91:0b:f0:fd:3a:51:f9:b0:20:93:3f:
9a:d5:92:41:87:63:72:aa:a8:c4:76:d9:c7:65:28:e1:d1:b9:
4d:12:75:17:d7:40:fc:0e:bf:ab:90:e0:56:44:17:a1:65:30:
1e:2b:3a:4b:6d:03:b5:d7:9a:ce:06:ff:f4:b8:9b:dc:e8:1b:
aa:b4:50:7c:9a:50:b5:e1:bc:9b:1e:10:82:c8:47:b8:80:91:
10:2a:b7:8f:fe:52:e2:91:07:6c:b4:2c:27:cc:88:f5:53:14:
f5:d0:04:af:58:82:70:ca:f2:92:0d:52:18:cd:b1:71:ff:dc:
9a:f5:e6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJNVf+UNa2XJZKhsNgKP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTBhOTQ5OTc2NzJhOTIwYTI5MGNjYmZkMDQ5MTI2Zjcw
NzVjOTkwHhcNMjYwNzI0MjIwMDIzWhcNMjYwNzI1MjIwMDIzWjAzMTEwLwYDVQQD
EyhiNTc1NTRlNTUwOTY0MDM4NDljYzg5ZDkxOGExNjc4ODFmZTQ2YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSdSR50VDnv2+W79IgRLPX181ZK8
pzofjEhUhEUczD9hFBsVC/8lBW/g6drGcL9iZVDKJ3QO/ezWlQc+Ct6wkOJmrZtG
2ht1D+54p/1z97zwjcyzOp/sJ8c5W+kzE3h9U1sW1EGfxTizLLsclepkGhHgzgVt
2KPa6IxQG03go0AlKaqXr2tbCifR9v8DznFqoagpFwt7GkdCjUuXZGbMtnnYIHyF
YkVJTo3t7ietkUUkLv6Rp4qnjhKVZGPPmn8giq+u2SvJYhxIK2DFLKzeRRcce2Sg
NaheccnlMbi/lgnGQSVNA1W8Y/XHKkEWHgkHIDjzwbIeE24TB+yn1vxu7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLV1VOVQlkA4ScyJ2RihZ4gf5GqGMB8GA1UdIwQY
MBaAFL7gqUmXZyqSCikMy/0EkSb3B1yZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTIt
M2E2MDYzY2ZlYTk1LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTItM2E2MDYzY2ZlYTk1
LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXpdC8GG
WihP1IxLAAE3uoNfUgM8nV3IsN4ws6imb8nefpGk3n/vYzS4EZuw2Sx4sRg8Oem9
+XFKyYeUTL/51FHxvnMnsGk2kaAJmLlIKvAothVA7XFLOn5dCBqRt4X4UEHc0sSQ
a7Rqrs60cb1MLnqSLK7iH2ifjFg+8hOt7vm1VVUSV5EL8P06UfmwIJM/mtWSQYdj
cqqoxHbZx2Uo4dG5TRJ1F9dA/A6/q5DgVkQXoWUwHis6S20Dtdeazgb/9Lib3Ogb
qrRQfJpQteG8mx4QgshHuICRECq3j/5S4pEHbLQsJ8yI9VMU9dAEr1iCcMrykg1S
GM2xcf/cmvXmaw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 04:10:58 2026 by rpki-client