Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: 1DPYKoptKIs9lg8WHjlJ8aOV8MUoERj2x4V0qlByf/k=
Subject key identifier: 1A:7A:2E:B3:4B:89:67:0E:F6:79:A2:F3:E6:5D:43:7D:5C:16:B0:7E
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 019E1D9137228817BB5B3D2D3829860FF8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 1235
Signing time: Tue 12 May 2026 19:01:56 +0000
Manifest this update: Tue 12 May 2026 19:01:56 +0000
Manifest next update: Wed 13 May 2026 19:01:56 +0000
Files and hashes: 1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: TT603qJ0SI6+W2Xj6FjAQE8bapIXwA3XQ3r1UzljSmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:37:22:88:17:bb:5b:3d:2d:38:29:86:0f:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: May 12 19:01:56 2026 GMT
Not After : May 13 19:01:56 2026 GMT
Subject: CN=1a7a2eb34b89670ef679a2f3e65d437d5c16b07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:2f:c9:35:62:2a:6d:99:fc:33:22:89:5d:
a0:af:62:24:bf:0f:48:2c:e6:b1:18:ad:ff:5e:2a:
e2:1c:84:7a:c5:94:74:30:f0:91:4a:54:67:aa:20:
3c:f9:ba:ec:ca:10:30:27:9b:1e:a7:14:6b:34:25:
c5:d5:4b:96:b8:d5:bc:24:cc:2e:87:af:32:6c:ac:
f1:cd:e3:9c:ea:38:3b:1e:61:d8:1a:c2:b0:b8:64:
a2:77:3d:95:7a:14:8a:5f:4a:ee:43:7d:16:22:c8:
9e:56:28:f2:91:58:c6:00:85:27:68:14:1b:65:1e:
07:a9:62:62:c1:c7:97:c9:1d:ba:ac:ca:7e:cb:7d:
f5:3a:5e:f4:fd:5a:49:3b:0b:2e:5f:d0:c5:fc:30:
07:ca:73:7d:58:b5:b5:75:31:9d:a2:73:86:9e:25:
8b:b4:d1:fe:38:2a:fd:3c:d3:21:02:57:8f:83:64:
4f:98:da:3f:8c:9b:ff:ae:81:e6:ca:4a:4e:7e:c1:
8c:fe:95:55:69:0d:6d:cc:1b:f3:1e:19:3c:d2:7d:
c6:81:b4:ed:6a:6c:05:61:a5:cd:a4:e5:89:04:18:
77:3e:52:6d:81:f5:12:42:b7:20:8b:8f:b2:36:f4:
ef:c9:0a:af:f6:02:ac:e9:86:e8:39:35:74:07:94:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:2E:B3:4B:89:67:0E:F6:79:A2:F3:E6:5D:43:7D:5C:16:B0:7E
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:ad:a4:f7:38:ea:d2:f8:6d:f2:5e:30:c5:a3:1b:54:1a:
7f:25:bc:2b:0c:4c:88:4d:87:b7:f1:c5:a0:62:1f:17:06:f3:
47:38:95:94:a6:f9:22:65:a0:48:11:ce:27:e9:df:c6:83:d0:
99:d3:88:b0:3f:a0:2e:87:33:65:07:84:35:1a:d9:b0:69:5d:
0f:b3:a2:22:c0:fb:e9:1b:09:30:15:28:3d:b1:42:7e:c6:9c:
65:73:79:e3:31:2b:3e:3c:3e:fe:8d:30:b1:53:7e:1b:76:5b:
42:94:94:2f:9d:cb:fa:24:09:79:0c:65:9a:30:23:f7:0e:99:
0b:7f:f6:08:0a:c6:61:92:d9:86:2e:7a:d9:5b:55:ee:4a:4b:
2a:87:ae:07:a9:43:99:87:5e:ae:0e:c4:6d:cb:f3:97:ca:f1:
4f:13:9d:ef:49:2c:a7:8d:08:16:23:d3:7e:3e:4e:1e:0b:c3:
2d:3a:5d:c5:26:07:a2:b2:f3:a2:e7:5d:73:7a:66:29:ee:7a:
17:6e:ca:2f:9c:02:24:df:bc:31:c7:b0:cf:a7:6f:a2:73:b4:
ed:e4:be:4d:3b:f6:9f:7b:99:86:3e:dc:47:d9:1d:76:a4:55:
e7:77:6d:f0:1f:2c:6e:33:d2:c9:67:c9:f1:2c:d0:c4:73:12:
60:84:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:20 2026 by rpki-client