Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: ajVfI/u8PbYv+or8JBKXUE21Ui04OWBGdye8VwWMYEE=
Subject key identifier: 35:83:16:45:77:6B:DF:46:94:31:B3:28:B6:E3:33:0C:AE:42:5E:A5
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 019EBFC7F770EC5F83248EF5717716A58536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 07:00:13 +0000
Manifest this update: Sat 13 Jun 2026 07:00:13 +0000
Manifest next update: Sun 14 Jun 2026 07:00:13 +0000
Files and hashes: 1: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (hash: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8=)
2: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (hash: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY=)
3: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: JNJYykGCArcouUnNuvW2CWEDvemDNXyQCCANs91atu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:f7:70:ec:5f:83:24:8e:f5:71:77:16:a5:85:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Jun 13 07:00:13 2026 GMT
Not After : Jun 14 07:00:13 2026 GMT
Subject: CN=35831645776bdf469431b328b6e3330cae425ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:a9:c3:1c:7c:75:80:dc:d4:08:46:e0:0e:
9a:96:7a:9c:45:82:f1:39:a4:89:cc:6a:7c:48:c6:
0b:33:e7:0c:68:3b:13:21:bd:8c:a7:87:89:f1:e3:
ae:10:da:0c:74:e0:6e:94:6d:63:2f:b5:7f:d9:80:
e0:e8:ec:05:a3:7d:aa:7b:12:14:ef:27:d2:e8:4d:
d5:d0:c6:39:b3:6c:20:e3:91:12:44:39:71:68:f9:
3e:17:20:8c:57:75:73:74:28:0a:7f:f2:f4:c6:97:
94:d8:bf:29:74:a7:e7:6c:7e:e9:6c:9f:64:5e:01:
b7:ef:c6:e8:95:2e:c2:36:51:c6:44:1b:38:9c:a7:
7a:d5:49:f3:f6:df:be:b2:fd:1f:fb:69:ff:3f:f4:
67:b2:38:15:75:76:61:ed:75:27:d2:a5:03:50:12:
fb:25:c7:ae:2a:1f:d3:1d:b0:04:2c:e4:b2:26:02:
ef:a6:7e:2f:ee:d2:9e:da:42:b5:3e:45:40:3c:ad:
48:e8:31:7c:1f:46:40:19:3c:98:98:ff:77:1c:80:
65:76:8c:7d:f1:1e:f5:9b:c5:77:70:9e:ae:1e:4e:
7e:2d:b4:00:f2:38:4e:6f:48:5f:87:f3:85:a5:b5:
8f:7c:39:26:82:5a:cc:75:bd:19:ed:8e:63:7c:59:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:16:45:77:6B:DF:46:94:31:B3:28:B6:E3:33:0C:AE:42:5E:A5
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:df:0d:b0:3b:7e:cc:fc:a8:2f:55:5b:6b:9b:30:b8:42:b0:
2c:e1:0e:aa:6c:14:89:5d:b8:c8:e8:16:80:14:fa:1c:cf:89:
48:19:33:0f:03:91:d9:8c:5d:69:2b:e3:09:fa:6a:65:81:4d:
9d:bb:76:54:c7:ba:7a:ac:17:a7:0b:e1:ad:18:7b:c8:b7:02:
94:bf:bd:4d:e8:f3:d5:1d:ce:e0:4d:f9:12:81:0a:c4:bc:cb:
55:7c:f5:63:82:27:ce:fd:96:b1:28:95:c4:c7:9b:6a:03:d0:
57:55:c0:88:aa:4f:ce:d6:d1:0d:0e:64:4b:ee:e4:5a:ce:6b:
d9:30:dd:0c:e6:4d:5a:84:db:29:b5:20:66:d1:89:56:a4:ba:
af:af:b2:91:79:22:0b:6e:06:69:36:4e:f5:10:cb:f7:f0:0f:
c9:8f:17:d4:8f:9d:4a:39:da:df:14:e0:80:f3:fe:62:3e:ef:
9a:af:79:2f:ec:5d:be:7d:36:02:04:d0:9f:e7:f4:6c:67:cd:
c5:53:49:23:ec:53:1e:c1:77:79:94:16:87:b7:6e:ed:7e:14:
0f:7e:e7:7a:63:a9:0c:17:38:ba:72:64:bc:46:e3:fc:fb:06:
28:f5:da:1a:90:d7:87:96:f8:66:24:15:36:3b:30:71:4b:95:
8c:3b:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:06 2026 by rpki-client