Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: KzZQtsD9NYqtHXJoua1QV51QKWk0gJ89OyN6gfWMaCc=
Subject key identifier: 61:76:D8:A3:A4:97:1F:E5:95:84:77:14:08:B2:CA:FF:46:F4:05:CB
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019FA907989E6E8001FD634A05A41A7BBA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0AF1
Signing time: Tue 28 Jul 2026 14:01:14 +0000
Manifest this update: Tue 28 Jul 2026 14:01:14 +0000
Manifest next update: Wed 29 Jul 2026 14:01:14 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: Y8iCjaDuGEqiXSpX/BhDPomrZzzG8b6Uu1c6I01b91Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:98:9e:6e:80:01:fd:63:4a:05:a4:1a:7b:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Jul 28 14:01:14 2026 GMT
Not After : Jul 29 14:01:14 2026 GMT
Subject: CN=6176d8a3a4971fe59584771408b2caff46f405cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:06:a3:94:73:21:5e:6f:7d:fb:61:39:e7:
38:57:61:48:b3:41:3d:f0:80:5b:f2:06:2a:ca:a4:
5f:05:43:c4:5d:0f:1f:9a:c0:5e:36:9e:e4:8d:05:
77:cd:57:d6:72:5d:26:be:8f:fa:97:23:b2:4f:79:
c3:fd:e7:5f:a4:c9:31:0a:0f:d5:48:3c:9b:25:f7:
2a:69:d0:34:1c:44:bd:a9:df:fd:b7:a0:03:49:3a:
bd:0c:dd:76:ff:3d:6c:60:c0:8d:cb:a2:fb:c5:b7:
7f:17:70:70:a4:01:c1:79:67:24:68:01:f6:12:97:
e2:91:ee:f3:df:f6:35:8e:ba:22:be:06:7b:7a:d2:
da:98:cf:ee:99:9f:12:68:39:ad:5c:79:67:83:21:
b4:b3:34:92:d9:17:b6:c2:d6:85:ef:5d:c3:cb:28:
7c:8e:09:f6:91:de:d1:6b:66:1b:9c:37:4e:b3:e9:
78:6b:e2:3f:19:14:6b:ac:ea:c1:b1:07:cb:58:7b:
91:13:af:c2:69:e0:e0:6c:0b:b8:4b:70:51:24:ef:
2a:e0:dc:a6:4d:e4:87:b6:c5:da:d6:10:97:c7:57:
15:30:f9:4b:c3:73:35:19:61:77:9d:8e:e5:33:d5:
16:97:1e:51:a2:7d:f9:7b:d2:0d:94:d2:27:78:64:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:D8:A3:A4:97:1F:E5:95:84:77:14:08:B2:CA:FF:46:F4:05:CB
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fb:0d:98:6c:31:de:c4:cb:01:99:a2:1c:29:ef:83:58:b3:
4e:da:21:bf:a9:3f:d8:8e:a4:d2:fc:7f:0d:5b:a6:ab:d4:36:
36:18:42:76:8c:13:3c:20:35:9b:13:d1:00:57:07:35:fd:05:
93:8a:1f:37:fd:ef:2e:27:9a:d8:af:34:7c:ec:bc:df:78:09:
5e:8f:41:6e:fb:9b:69:88:0b:ce:dc:88:f6:ca:1c:26:ef:51:
d4:12:c1:e8:47:36:df:90:be:2c:e2:10:98:fe:51:e5:78:f9:
da:04:8a:d0:a2:a1:c9:22:56:dd:34:db:ad:17:8a:64:4c:13:
cf:28:6a:a6:96:ae:dc:aa:73:ae:21:1e:bb:07:09:6a:fe:de:
d4:d0:45:4c:74:39:d8:cc:1b:e7:63:dd:e9:ee:a6:92:b8:0c:
d1:a8:26:9c:db:65:b2:e5:04:f7:ef:68:3d:46:bc:67:15:76:
6d:8b:c0:cc:86:f6:12:e1:b8:c8:a2:91:ac:4b:86:73:82:a4:
71:91:99:2b:1c:f4:2b:22:57:95:d8:43:76:a6:c6:40:47:7c:
74:e5:51:b3:54:e0:22:ac:5a:eb:5b:80:77:83:74:f6:ce:dc:
2e:2e:4a:1b:f5:ef:ba:e4:39:29:35:ba:35:85:40:c8:92:26:
88:94:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:18 2026 by rpki-client