Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: 0ufnz+EIo6+fbVjqtMZ4D8bOgFLrTG/h08G7GOIRWjE=
Subject key identifier: 8B:10:40:C5:F7:29:BC:BC:F0:E5:D0:84:5F:DD:6C:EC:8B:E5:DE:C0
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 019F95B75C5ED10AC50B56E5207FEB232CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 0712
Signing time: Fri 24 Jul 2026 20:00:49 +0000
Manifest this update: Fri 24 Jul 2026 20:00:49 +0000
Manifest next update: Sat 25 Jul 2026 20:00:49 +0000
Files and hashes: 1: J3APbr50rVneV9H1qg-HNNc-3lc.roa (hash: NXCP1NiFTqdVA1tneuQk89jFvEWiunEfCtSHBOd2xMY=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: 6YVp9kwgjWtutdiE97RJrXYO6CWv7zK+YqEoxDwBeU4=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:5c:5e:d1:0a:c5:0b:56:e5:20:7f:eb:23:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Jul 24 20:00:49 2026 GMT
Not After : Jul 25 20:00:49 2026 GMT
Subject: CN=8b1040c5f729bcbcf0e5d0845fdd6cec8be5dec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:75:79:ca:89:e5:a7:47:3a:83:45:64:21:b2:
dd:e8:cd:49:89:24:07:78:d3:bc:39:65:1d:aa:c7:
f9:42:59:4d:bd:a4:bf:49:5b:40:70:e8:21:55:95:
0e:77:f0:29:1b:db:34:88:8a:c6:95:37:bc:ce:d5:
d2:fe:86:3e:8e:6a:c2:2c:10:45:58:d0:40:22:3a:
50:b6:31:2c:d3:e9:15:ff:fd:52:7e:7e:ea:9c:9d:
1d:57:10:53:bb:a2:f9:e6:9a:33:a3:8b:99:50:66:
47:ea:d0:6d:5b:f5:53:46:75:31:b7:ac:4c:77:7c:
d8:58:19:74:2e:2f:db:6d:19:48:59:81:ef:a6:f7:
c6:70:30:2e:81:1a:5d:ab:13:4a:b2:39:0d:82:48:
e5:20:b9:1f:3c:5c:24:40:06:ae:63:24:c9:32:90:
16:5f:91:23:9c:d1:27:f0:25:26:6c:1a:5e:85:9d:
e9:f7:c3:ab:60:a6:94:ff:1f:03:16:f9:39:a6:48:
60:f4:6b:56:0c:c8:16:43:22:53:df:4d:d7:49:95:
7d:62:b9:fe:e9:fb:dd:e9:3f:d3:39:69:e5:df:d9:
f7:39:a5:8e:c6:c8:73:b4:f8:d8:d3:34:12:40:fd:
14:2c:5e:e5:53:64:3d:11:2b:4d:c7:64:a2:fd:8d:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:10:40:C5:F7:29:BC:BC:F0:E5:D0:84:5F:DD:6C:EC:8B:E5:DE:C0
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4d:94:a4:ce:2a:89:27:3a:e4:ca:3b:2a:ba:1b:e7:b5:d1:
72:77:0f:02:44:0d:31:41:8c:3a:f9:90:52:eb:5f:91:1c:0a:
d4:41:25:30:d5:3f:0f:e8:21:51:23:3e:27:b3:5b:33:8d:c1:
c7:57:9f:12:b2:44:cd:97:b8:c2:11:44:ca:c5:e1:c7:0c:d7:
43:90:3b:9d:93:ba:7a:d0:3c:4f:05:80:63:eb:7a:ea:04:03:
58:8b:bd:68:9e:f3:f2:ea:e3:ea:f1:8e:35:ca:5b:61:3e:4f:
d1:d6:5b:22:8f:1f:2d:8d:2f:d9:a6:07:06:29:07:9c:e6:77:
a1:1d:7d:73:93:c8:55:d0:d9:b1:5e:ed:ee:8a:6e:4d:b7:ed:
be:13:7c:f9:3c:1b:3c:ef:9f:24:c9:0c:90:08:8a:a4:8d:e1:
1b:9f:ad:75:11:ca:fe:f1:52:83:8e:3b:37:29:a7:3e:2d:24:
79:b7:4d:1a:72:5a:6c:93:89:92:9b:82:0e:e7:bd:03:1a:d3:
5a:2c:1c:86:ea:31:29:07:c4:82:8a:37:8b:10:fa:7e:8a:7e:
0b:53:ce:c3:e8:c9:95:4b:02:a6:c2:5b:28:7f:b5:43:c6:26:
3a:c9:9f:99:5b:86:c1:09:48:4c:3c:dc:db:ce:c0:60:ed:9c:
8a:d4:51:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:46:52 2026 by rpki-client