Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: JQPRzMyrLVD6CDO7us+n0dWEMJRMJYwxQ7hqXH18D9o=
Subject key identifier: 67:FF:7D:37:23:40:FD:45:A4:9E:87:7F:0D:74:97:15:76:CF:A2:45
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 019F9512B84F5E5CC6BDA880A3F407210DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 17:00:59 +0000
Manifest this update: Fri 24 Jul 2026 17:00:59 +0000
Manifest next update: Sat 25 Jul 2026 17:00:59 +0000
Files and hashes: 1: mLE7VosmydhVCMguYH3rQgmTc-M.roa (hash: mTYzchMKEO4uZTushftKzw0+5nZsPeA/JGcP5k+QnQM=)
2: peCptJnBjS01Jffe9zNkUarZyKY.roa (hash: NdN6bmU/0xsnoYufljMuvL8XIU6jhRkxeQ2tCu90AyY=)
3: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: IQjqAJ1z3ROcIOx8dsTElYnjyHygbIRvSyFyByip3no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:b8:4f:5e:5c:c6:bd:a8:80:a3:f4:07:21:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Jul 24 17:00:59 2026 GMT
Not After : Jul 25 17:00:59 2026 GMT
Subject: CN=67ff7d372340fd45a49e877f0d74971576cfa245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:16:40:bc:ff:07:18:24:a2:5c:65:cf:55:
c2:1f:5e:f6:55:2c:b3:02:81:c2:79:ed:f5:a9:42:
bb:b7:cd:52:e2:00:55:24:02:dd:34:e9:b7:0f:33:
7b:f7:70:20:e7:03:04:06:e5:19:1a:0b:59:31:4e:
36:d2:d9:da:49:c1:f7:c1:d6:92:1d:ec:bb:03:67:
7f:1d:f6:0e:40:39:df:f6:1b:37:88:b2:65:f4:2c:
79:da:fc:52:6e:09:dc:41:d4:53:33:79:83:79:28:
27:58:6c:ab:58:17:d3:fa:93:d9:b6:a5:93:02:5c:
d4:79:1a:cd:dc:4c:04:b6:de:7e:a0:17:1b:53:fa:
60:2d:e8:d4:db:f0:d2:00:32:26:de:c1:d7:5b:d8:
b6:a8:87:47:4e:66:8b:c5:17:c4:d4:36:dd:86:48:
6b:f4:d9:d6:9c:4d:9d:7f:91:09:8c:45:43:62:8e:
38:2b:ff:12:c8:b4:48:8e:db:c4:e5:20:8a:2a:ab:
b2:3c:56:21:fc:8f:04:6a:2c:2f:88:2c:a8:b3:f6:
2d:08:61:be:05:b6:04:29:63:86:88:12:9e:09:44:
a4:b4:8b:15:e8:a3:af:6f:9e:30:ab:c0:08:ec:ba:
aa:f6:bb:dc:c3:d6:4a:0e:1b:7c:a0:44:01:21:f0:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:7D:37:23:40:FD:45:A4:9E:87:7F:0D:74:97:15:76:CF:A2:45
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:03:ae:19:f5:fb:f3:48:00:99:22:c6:ae:2a:4f:3b:0f:2a:
10:9e:98:7e:b7:6e:a3:1e:f5:43:59:ae:45:8f:06:85:6e:3e:
30:9c:c3:f6:4e:55:98:e8:c6:c6:59:ff:a4:56:06:53:58:d9:
a4:f3:76:b5:69:62:a6:be:9c:16:64:0a:88:76:88:83:87:97:
6a:c1:37:8f:9d:6d:48:1f:50:a2:50:7c:17:5d:9e:61:3c:44:
2b:88:e1:1b:3f:0c:38:3d:cf:67:1f:59:c6:56:cc:d7:b0:b6:
07:a1:38:26:ce:c8:14:0e:ba:c3:a0:f2:cc:27:fa:4e:a7:27:
d0:3c:fe:07:0d:93:4f:72:e7:f0:32:8e:51:5b:91:18:95:f5:
47:51:63:20:ef:6b:e5:0a:66:16:9c:c8:07:38:47:cc:c5:cd:
8f:e4:6d:5b:2e:75:c1:24:25:2b:e7:b3:7a:5b:44:70:98:fb:
43:32:5a:d8:8a:c8:9a:31:17:c8:ca:04:a7:80:49:31:56:76:
d0:3b:2e:77:a2:21:b2:d7:82:ee:b8:46:cb:94:c3:bf:54:1d:
c6:c0:e5:e1:8b:c8:4a:49:70:e3:c7:67:f2:b8:34:c1:2f:54:
c6:29:e5:50:bf:62:10:35:52:7e:3e:53:ff:56:c6:ae:cd:90:
95:92:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:54 2026 by rpki-client