
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
File: VwLHy8I1Jyt6zNez8LDkfGHHXis.mft (raw, json)
Hash identifier: 43uqAsRCMnOHuAIZzLWHV6dscBP8K9JcrXoV7SZB+sk=
Subject key identifier: E3:6A:5A:8F:12:21:ED:7F:33:95:77:6B:D6:29:7C:47:ED:2B:D8:4C
Authority key identifier: 57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
Certificate issuer: /CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Certificate serial: 019F95499C578B2005244710EE2076D2902F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:57 +0000
Manifest this update: Fri 24 Jul 2026 18:00:57 +0000
Manifest next update: Sat 25 Jul 2026 18:00:57 +0000
Files and hashes: 1: Dv1loStZYAsjb_Af0DKMu_bevS8.roa (hash: Zb9q97rROgQhDovcWngVEaqZebMrRktFUPt7d2lNmQc=)
2: VwLHy8I1Jyt6zNez8LDkfGHHXis.crl (hash: 7RzXuNl4mFz50XMIcWSAGnJvglGxBxBlOfNFKU3JeE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:9c:57:8b:20:05:24:47:10:ee:20:76:d2:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Validity
Not Before: Jul 24 18:00:57 2026 GMT
Not After : Jul 25 18:00:57 2026 GMT
Subject: CN=e36a5a8f1221ed7f3395776bd6297c47ed2bd84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:1a:29:f4:c0:8f:c8:be:23:0c:e1:86:18:
64:7d:98:3c:e0:42:9e:d5:78:dd:c9:7c:6a:cd:f2:
2a:4d:4c:50:6f:e1:b6:bd:d0:bb:ab:1b:d7:bb:58:
60:02:fd:b9:cb:c6:2f:1b:d9:2b:7d:12:6b:57:70:
9a:64:67:e8:de:27:8e:4c:84:ca:d3:c0:d5:85:24:
45:93:62:ca:39:db:5e:92:7d:c3:65:49:b0:dc:6b:
6d:ed:ed:1b:35:66:d2:38:1b:1f:54:93:d1:b1:fa:
b2:15:45:55:e1:79:ae:ea:92:e3:6d:91:e0:11:6e:
28:6e:38:2f:7b:c6:60:24:81:d2:56:47:2c:38:8f:
ef:21:eb:ff:81:66:98:59:86:7a:a5:a9:ce:2c:d5:
d3:10:ec:50:cd:92:8c:84:07:47:2f:69:10:a4:a7:
1f:a1:e8:28:42:36:4a:5c:9c:01:6d:b8:48:53:76:
5b:4e:15:1b:7d:60:95:8f:1b:a2:9b:db:a6:2d:12:
5f:1c:8b:d0:0a:54:a9:de:01:66:b8:ee:5d:b6:a9:
64:89:a4:25:63:64:aa:d7:7f:a1:dc:ac:e1:dd:6c:
a8:6d:48:49:d1:f1:29:00:23:6c:07:a8:10:79:fd:
97:ac:06:4f:20:71:be:2d:1e:09:35:71:d0:1d:c4:
28:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:5A:8F:12:21:ED:7F:33:95:77:6B:D6:29:7C:47:ED:2B:D8:4C
X509v3 Authority Key Identifier:
keyid:57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a8:1a:f1:d1:a0:d0:1f:6c:cf:c1:36:5b:65:e3:13:49:45:
32:4c:fe:2d:48:7e:73:3a:73:8b:01:70:b9:ec:1a:95:81:bc:
23:bc:af:23:e3:e2:6f:58:d1:17:fb:2f:7b:64:72:5c:c0:03:
ab:06:a7:cb:05:a9:0b:4c:11:b1:56:81:44:67:4a:e7:52:90:
30:3a:30:2c:7e:ba:1e:42:99:e2:9f:5f:60:b4:4f:80:f2:f5:
9a:18:1f:9d:a9:31:c9:6f:81:cb:78:d1:4d:0c:91:ef:ce:fb:
9c:50:09:b3:16:ce:e1:43:0f:94:97:8d:07:7c:fb:eb:00:05:
69:ad:31:ab:a1:c8:df:4c:d2:b9:f6:9d:0a:30:e5:c6:42:b4:
55:22:ac:93:94:74:18:2f:76:68:be:92:a8:c5:a4:a9:c6:56:
da:f5:d8:5a:dd:9b:1e:56:3d:fe:b4:9d:77:45:1f:5e:24:90:
13:6b:e7:3b:5f:e6:f7:54:cc:b4:7e:f8:c9:09:e2:43:f2:e8:
64:94:ee:7d:00:13:e2:7a:8c:f1:de:37:fb:a1:75:f9:75:65:
e9:bb:ad:a6:d1:4a:26:df:2b:8c:65:f4:c2:68:c0:6a:f3:e4:
09:5c:94:a4:65:d2:f5:6e:5b:1b:41:5c:07:45:40:b5:fc:4f:
32:8f:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:06:15 2026 by rpki-client