Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: c8uD5WXDgBNWcOfSt3shP94+fMTBV/2rgul1ABQR4ts=
Subject key identifier: D7:E9:C6:4D:E7:2B:0C:8E:E9:80:37:ED:96:2B:60:1E:12:1C:EF:1D
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019EC149694F22ADEE17270E181A391C891F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0A79
Signing time: Sat 13 Jun 2026 14:01:14 +0000
Manifest this update: Sat 13 Jun 2026 14:01:14 +0000
Manifest next update: Sun 14 Jun 2026 14:01:14 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: yK93Kc1Cv9COCE8gF8XxBfzXGfympYQgsYGGpzapOuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:69:4f:22:ad:ee:17:27:0e:18:1a:39:1c:89:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Jun 13 14:01:14 2026 GMT
Not After : Jun 14 14:01:14 2026 GMT
Subject: CN=d7e9c64de72b0c8ee98037ed962b601e121cef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:de:ac:ae:14:98:81:98:18:8f:88:4e:11:
d7:8b:84:5b:94:4a:20:50:bb:4f:87:49:7c:4d:3d:
f7:0d:bd:af:e8:96:b3:49:74:77:c5:78:7d:a6:16:
86:c3:c8:74:a1:05:ce:7b:54:85:ad:2b:ab:56:9b:
00:3d:1e:5e:d9:a9:78:08:cc:34:34:e3:20:d8:05:
e3:e2:34:b1:a1:27:c2:d1:9d:e4:42:9a:42:fc:4a:
23:22:7b:bd:57:52:3d:bf:83:17:af:b8:f0:21:72:
4a:d6:9a:59:68:7f:e4:89:bf:81:b5:c5:2e:1c:7b:
c9:8b:fc:3c:6d:d6:ad:0c:11:82:d2:43:6d:e0:9f:
bc:2f:b3:57:db:dd:89:75:6b:77:ed:1b:92:0e:46:
85:44:a8:a0:28:6a:93:7f:37:b6:4f:ad:fe:6d:c5:
df:64:4f:e3:c2:fe:32:ac:08:41:78:9f:ce:2b:1b:
ff:ec:e9:e3:3f:98:89:91:cf:66:5e:e1:de:0d:b1:
c1:55:e7:ec:34:8d:67:05:d6:43:e4:8c:4c:93:4f:
95:29:eb:ca:00:e4:0c:2f:77:25:90:db:8b:8a:db:
c5:1c:ab:c7:8d:d4:d8:84:b3:1d:d9:cb:b5:68:06:
58:ae:ed:ad:82:63:2c:4b:82:b5:73:af:7c:44:b6:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:C6:4D:E7:2B:0C:8E:E9:80:37:ED:96:2B:60:1E:12:1C:EF:1D
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:34:2f:21:f4:26:81:a9:64:44:dc:61:23:12:44:55:60:2a:
1a:22:92:9d:a4:ef:c5:91:3e:e9:44:05:48:24:d4:35:bd:a6:
e1:d5:c0:f2:a3:ef:61:02:e0:c8:b0:a3:1e:40:13:fb:74:6f:
1c:d2:d5:65:f3:a9:6d:46:6d:77:75:e4:c4:28:93:10:51:c2:
00:bd:02:0c:fc:fa:02:8d:da:de:67:6e:1b:8e:52:f9:cf:17:
d9:b1:4d:3c:7b:aa:d7:f7:38:78:fd:63:4e:bb:de:ca:12:69:
bb:a0:57:af:66:7d:64:f0:2a:a3:4e:3e:1f:7c:d6:2b:c2:66:
3d:93:16:50:d2:df:11:ab:f9:a9:33:22:c5:21:bf:11:76:2e:
48:8a:ba:10:34:15:5c:58:2c:f0:76:68:2c:b4:f9:1b:ae:55:
b8:5c:7f:15:28:83:e9:ac:e5:58:f6:aa:44:9c:44:5e:53:9b:
53:c8:85:ee:b3:00:0b:4d:71:7a:52:e5:8a:ca:75:68:5e:52:
a8:2d:67:d4:99:d6:6d:25:8a:84:da:a1:9e:82:ca:5e:97:b8:
00:70:f9:6a:38:eb:89:5b:c8:46:69:d6:17:df:70:3a:cf:e5:
f6:54:10:35:7c:4c:49:8e:44:29:d6:f6:a0:a3:46:f6:de:31:
4c:08:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:16 2026 by rpki-client