Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: QCZsmfYw0HcVC8BSf8lr4Sw/w5bjBaYfMVdAl4r9E0k=
Subject key identifier: CA:CD:6A:94:7D:C4:1C:01:87:A8:7A:D3:70:E5:DD:27:9F:F8:01:B1
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019F951240A3F037B11CCEB3665698EE90C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 0A44
Signing time: Fri 24 Jul 2026 17:00:29 +0000
Manifest this update: Fri 24 Jul 2026 17:00:29 +0000
Manifest next update: Sat 25 Jul 2026 17:00:29 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: rqihQxrxwwvaeQBHw9X6EhXYD9MS4jCW4Pu78UDBqC4=)
3: xd89191APrZOUVHG3uZycN3SZ0g.roa (hash: IG6q5I2/G1oD/WZjTUVQ36euEC71avJGwrJIV9eTw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:40:a3:f0:37:b1:1c:ce:b3:66:56:98:ee:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Jul 24 17:00:29 2026 GMT
Not After : Jul 25 17:00:29 2026 GMT
Subject: CN=cacd6a947dc41c0187a87ad370e5dd279ff801b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:5a:53:5b:5a:f2:e4:57:e9:31:11:0e:ef:
34:b8:5f:c4:4f:06:28:e4:2f:0d:59:76:57:32:d7:
b4:6b:7f:36:e0:9d:c5:8e:11:d2:6c:5c:56:64:1a:
6f:f1:62:e9:1c:02:62:a9:1a:01:4a:f5:f5:0a:82:
91:c4:ea:68:19:8c:da:ec:f1:c8:dd:95:45:db:ae:
6f:4c:a4:07:6e:72:e3:ee:d1:e0:48:ec:4e:fb:76:
34:ac:1c:12:88:21:c4:6b:e3:e3:28:f0:33:99:0a:
a1:3f:84:17:aa:c7:26:c6:dc:a5:9a:9d:48:29:26:
dc:22:fb:5e:56:82:03:06:b5:84:bb:57:ba:78:e2:
cb:07:cf:9c:a5:34:40:3a:10:17:69:87:ba:1e:6a:
98:07:c5:d1:b4:03:13:da:f1:77:58:e8:87:a0:60:
a8:14:2f:9e:3c:65:26:62:f6:70:6f:1b:0e:3d:6c:
92:5c:8c:9f:d9:61:e5:85:22:eb:48:77:97:cb:54:
4d:ca:ee:41:b9:7d:17:c6:90:68:91:a2:c5:03:9c:
b5:49:37:ed:cd:8a:f7:99:1f:45:92:57:f3:b7:65:
40:5b:54:40:9b:c6:2a:93:16:1c:51:d4:22:08:7d:
c1:cf:6f:fc:cc:92:b6:03:e1:4c:2f:00:55:4c:20:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:6A:94:7D:C4:1C:01:87:A8:7A:D3:70:E5:DD:27:9F:F8:01:B1
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:95:76:f4:86:38:93:f6:42:f9:9b:5e:2d:2b:64:4b:be:4b:
d0:6d:41:b2:80:3e:ec:4e:8c:27:14:88:8b:fc:f3:41:4b:a6:
e4:0f:1b:f8:e9:96:a7:c4:4b:30:3c:79:54:f0:1c:0a:22:90:
96:9c:89:65:fb:e6:00:51:69:bf:be:f1:51:ae:16:1c:35:a4:
d1:34:40:56:72:61:dc:cd:11:0c:d0:07:4a:3a:f7:30:34:5b:
87:4d:12:54:e5:ca:42:dc:ce:6e:23:0c:b3:2c:63:ba:1c:50:
9c:5f:78:99:41:f4:07:4f:0d:f9:b6:6c:e5:b1:85:ea:52:b3:
bd:07:59:f4:c7:03:61:22:0d:f3:8a:be:29:e0:ab:f0:87:62:
4c:58:9b:62:41:7e:d3:62:4b:a9:52:56:e8:0f:04:e4:ad:57:
c0:24:2a:97:95:2a:1d:6c:47:cb:34:ff:24:c9:96:e9:07:ba:
a2:b7:00:7f:94:9a:b5:d0:e8:b0:2f:7a:56:f2:7e:00:c3:65:
78:8a:cd:c1:cf:14:70:ec:9c:97:8b:e2:37:da:dc:f1:c4:6a:
99:08:9c:3b:81:97:70:56:3f:3e:56:f5:5c:a0:c5:58:2e:49:
6d:2c:ac:ab:3c:01:c4:6f:ba:d7:cf:ab:69:d4:64:67:98:49:
0b:87:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:51 2026 by rpki-client