Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: IlqNmWn/ZGZyTLJVLRQ/aYuzb2sj39J8Tu5Wg7Y5CeU=
Subject key identifier: 84:4D:3F:17:86:11:3F:E5:97:91:FA:95:04:95:1C:15:13:3E:45:08
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019FAA198F4970453E61247FFEEAEA257CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 19:00:29 +0000
Manifest this update: Tue 28 Jul 2026 19:00:29 +0000
Manifest next update: Wed 29 Jul 2026 19:00:29 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: srHALFTxgk38BFjFosa8a98rPaK4bjKiZb73inG6eiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:8f:49:70:45:3e:61:24:7f:fe:ea:ea:25:7c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Jul 28 19:00:29 2026 GMT
Not After : Jul 29 19:00:29 2026 GMT
Subject: CN=844d3f1786113fe59791fa9504951c15133e4508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:05:41:82:e9:d2:ef:ba:4f:33:16:37:e6:
9c:f3:d9:70:6a:40:e8:5a:87:4b:53:53:83:6f:b0:
a4:cc:c2:55:39:e3:d7:6b:36:db:e1:63:77:0e:5e:
09:19:07:1b:7a:44:c5:44:ae:54:bf:33:32:66:9f:
22:5c:99:bc:72:0c:33:f4:d4:70:b5:95:c0:cf:b4:
58:3d:ae:de:a0:ed:e6:4a:e0:d3:0a:01:68:93:41:
05:66:77:5d:73:9a:0e:4b:89:05:d6:56:8e:d2:1d:
f8:d8:55:1d:cd:9f:3e:5c:19:31:46:a6:ab:65:5f:
4d:82:d5:2c:86:df:8d:1f:94:5e:3f:f4:67:c7:52:
93:da:1f:84:43:29:5b:62:20:74:8d:f9:42:7d:8e:
34:37:ca:ac:95:ab:49:e7:31:f5:14:ca:4d:9a:60:
d7:fe:8c:dd:80:41:97:c8:6c:b8:9a:b4:a7:8b:2d:
4b:4a:5e:5c:ee:88:01:91:7c:9f:c7:77:36:9a:39:
9b:cf:f8:d5:1b:f6:73:62:3a:48:8e:15:bb:42:36:
f6:06:7c:4e:04:7f:3d:ea:cb:c2:63:58:b7:ed:23:
43:d4:2d:a5:14:83:58:7c:f8:5a:7c:b0:dc:fb:a5:
2e:9d:5c:fc:c4:2b:92:56:f2:c8:2b:33:43:aa:17:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4D:3F:17:86:11:3F:E5:97:91:FA:95:04:95:1C:15:13:3E:45:08
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e5:65:13:e5:34:79:08:60:99:90:d1:ea:2f:a1:88:2e:8e:
25:5f:f9:8d:4a:de:94:dc:0a:ab:96:bd:12:9c:66:b4:e6:9f:
45:41:33:9b:07:48:79:ea:49:25:7c:1b:10:7f:f2:5b:e8:76:
71:6f:10:91:d3:d5:2a:9e:b3:ce:0a:b3:97:10:68:81:34:d8:
c7:7e:fa:bf:60:76:5e:c0:f6:e9:e8:6d:33:97:a4:ac:57:31:
68:33:90:1a:0c:7a:60:40:b2:ae:27:87:05:77:5f:3e:ff:a7:
b4:00:5c:b9:3c:c7:26:d1:88:70:4e:db:4b:4a:60:43:89:43:
35:05:c6:74:1c:31:da:3d:00:d7:0a:d2:5a:7f:16:0c:bb:53:
d6:72:4f:c2:84:94:cb:48:9e:35:a4:d1:f6:6f:a9:02:08:82:
1a:93:0a:5e:f3:59:3d:4c:50:dc:38:8f:a1:4e:f8:86:b8:a9:
1b:e5:89:9f:f8:52:c6:2f:6b:f1:4e:8b:2f:16:11:d2:45:40:
c0:6d:46:5e:a4:3b:5a:50:2c:ea:25:b4:41:86:61:c7:47:14:
4a:fc:3f:c5:4c:77:01:7e:93:76:56:24:8e:12:ed:10:76:60:
4e:7e:56:ca:08:69:58:b3:73:8a:06:53:b3:95:76:df:97:12:
a2:4b:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:29 2026 by rpki-client