Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: /pcJNoiifirOzl2mD1iMB0GarRh2FtD16lFiBGSMjlI=
Subject key identifier: 73:58:44:CC:CD:53:DA:7E:DA:89:ED:D2:17:8D:43:A7:C4:17:2C:36
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019FAB636345DB4A3547CEA8446D506A203B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:00:45 +0000
Manifest this update: Wed 29 Jul 2026 01:00:45 +0000
Manifest next update: Thu 30 Jul 2026 01:00:45 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: jpRslHevOxJ8/FYmngtwUe7s7KiLFhtEje5Zby/44SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:63:45:db:4a:35:47:ce:a8:44:6d:50:6a:20:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jul 29 01:00:45 2026 GMT
Not After : Jul 30 01:00:45 2026 GMT
Subject: CN=735844cccd53da7eda89edd2178d43a7c4172c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:15:2d:8f:88:12:19:0b:a9:cf:a0:68:26:
88:c8:07:31:13:d6:40:04:6c:74:38:0c:e1:12:33:
01:b1:5f:0d:3e:39:eb:cb:31:07:53:32:15:26:be:
26:52:bc:91:4e:9c:c2:af:2d:3f:f8:87:3c:b3:f0:
5d:92:3c:62:3a:1d:6e:69:21:07:e4:23:10:f5:66:
26:ac:38:41:d4:59:f9:98:fd:a8:b3:cc:54:0b:0a:
db:d2:c3:2e:61:3a:5f:a7:4d:20:87:a1:59:79:f5:
26:b5:66:20:94:ad:84:e3:0a:a9:6a:ae:76:cd:94:
63:50:aa:bd:ee:ba:af:69:6f:9f:8f:53:db:94:af:
fb:fd:b7:6b:ff:ee:ab:1e:57:01:2c:c3:fa:fd:8b:
a2:82:f8:60:e6:be:27:37:d2:82:5c:40:2f:02:34:
f8:83:2f:f8:a2:35:c0:07:a3:4f:fa:40:60:d3:48:
93:6e:9f:60:e3:20:3d:99:f6:a8:43:15:bf:eb:2d:
0b:42:1b:64:cb:7c:ab:6c:3e:f3:c7:93:9f:39:48:
84:fa:67:ca:69:1d:a3:a4:42:43:8f:52:b1:c3:59:
79:c7:c0:1b:9d:13:cc:83:c4:4d:6a:67:f4:78:3e:
18:7b:bd:1e:8e:40:10:da:ce:ca:da:eb:f9:ba:1f:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:58:44:CC:CD:53:DA:7E:DA:89:ED:D2:17:8D:43:A7:C4:17:2C:36
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:c1:ca:94:79:e8:7f:e7:29:4c:be:e8:99:e9:7f:ef:2b:
b1:b7:e3:72:d9:09:57:55:52:00:0e:9e:c3:ab:bb:de:b7:05:
5a:6b:71:ab:5d:91:cc:72:48:19:65:9f:a4:64:2d:6b:ab:49:
49:4c:4b:32:bf:8d:b1:54:fe:8a:68:2f:11:14:04:04:77:fb:
6b:3b:d8:c6:c9:32:38:e1:a3:04:f1:fd:6f:80:2c:c8:1e:be:
e9:7e:cd:e5:1c:72:27:37:29:f5:51:b8:ca:c8:a5:08:15:a2:
9b:08:9c:aa:89:47:54:92:45:c8:2f:f8:45:c6:77:af:00:45:
e1:f4:4d:d9:05:d8:01:0f:be:75:b2:8b:8e:16:d2:a5:ee:bd:
3b:b5:ef:ee:82:09:58:e7:d7:eb:89:aa:71:1d:bf:b8:1c:ca:
53:fd:02:0c:ba:a5:ae:fc:53:3a:6f:e9:77:c7:b7:23:a3:9b:
6e:15:46:c0:3d:e1:d3:f3:dd:3d:d1:1c:f6:28:c1:45:74:40:
6f:31:b7:1a:2a:e3:bf:79:e9:ab:30:3e:c0:eb:0b:9c:6e:88:
97:19:16:62:61:e8:96:b1:f6:e3:4a:07:95:9a:ad:0d:4a:88:
14:dc:66:3d:c1:b8:81:11:ba:ff:38:2a:d1:c3:d4:e4:35:44:
93:79:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:13 2026 by rpki-client