Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: RdC8VzQYmthvclAUzQM4mVG0CC9o4KM8C2yJy4vCK+c=
Subject key identifier: 19:36:FB:A0:DB:0F:E3:96:89:CE:18:F4:AC:82:47:F6:C6:CA:04:43
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019FAA50C4C484E8DE457CDD2472D628CC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 068F
Signing time: Tue 28 Jul 2026 20:00:47 +0000
Manifest this update: Tue 28 Jul 2026 20:00:47 +0000
Manifest next update: Wed 29 Jul 2026 20:00:47 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: 9rz2MVGdYxhkWmsAn7BOjgSZlcSDjtOF0gaDwNvAW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c4:c4:84:e8:de:45:7c:dd:24:72:d6:28:cc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Jul 28 20:00:47 2026 GMT
Not After : Jul 29 20:00:47 2026 GMT
Subject: CN=1936fba0db0fe39689ce18f4ac8247f6c6ca0443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:b2:f2:7a:6f:f9:5c:9d:45:df:fc:73:f1:
94:15:84:a8:44:40:d3:13:f3:11:90:8f:2a:1d:b6:
3d:bd:c6:c3:0d:f2:55:f7:3a:d9:86:62:6b:c9:7a:
f2:49:d2:a5:de:36:6a:f6:e9:ee:75:07:68:73:ca:
35:c2:8f:3b:98:86:6f:78:24:89:88:d5:c2:58:0c:
58:5d:af:19:8b:96:d5:3b:94:d9:65:bf:6b:41:cc:
aa:16:ef:2a:d6:c2:c3:94:df:7a:ff:59:f3:02:ec:
a1:d0:16:66:6a:66:6a:9a:eb:56:35:07:5f:9d:06:
f4:98:1f:db:79:17:3e:79:ed:57:3b:64:b5:52:a0:
a2:c7:24:0f:0a:4b:a5:d5:28:15:f9:11:2b:c9:c3:
5e:b8:63:47:ca:f9:0a:c5:3b:a5:fc:f4:ec:c0:27:
78:e7:1b:dd:b0:af:90:16:d0:7b:4a:ad:69:b0:90:
78:d8:b3:36:3a:95:96:39:a0:24:99:48:d9:26:75:
5f:c7:f1:66:ff:e5:61:01:5b:df:84:cd:7d:35:e8:
5d:9c:6e:d8:e4:f1:54:35:c6:c2:4c:e3:ee:03:e3:
cb:93:52:60:4a:91:48:b1:db:66:bd:cc:93:3d:61:
d6:d9:7a:cb:bf:d4:0c:36:b1:5e:c2:c5:ad:f5:2a:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:FB:A0:DB:0F:E3:96:89:CE:18:F4:AC:82:47:F6:C6:CA:04:43
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2e:7a:47:c0:88:be:b3:9a:b0:64:9b:7e:43:5f:0a:d9:eb:
5e:fa:72:05:53:e1:9e:94:31:83:33:dd:8c:6a:7b:58:b6:6f:
bf:2e:63:f7:8f:58:bf:04:27:68:0a:4f:b6:87:8d:4a:a7:62:
e5:0c:e5:ee:85:8e:73:96:6a:bc:f4:a6:a7:6f:a1:fe:b8:19:
e0:b6:00:f4:18:92:9b:02:1e:8a:6a:1d:6d:50:f4:cd:d8:cb:
e5:67:8c:50:c6:e1:71:4a:4d:0b:b2:18:50:3d:67:5f:84:49:
55:f0:cb:91:67:3e:49:6d:9e:3b:b6:4b:83:58:04:0e:9b:9f:
5d:74:90:bb:d4:e4:70:71:6d:6b:fe:d0:89:c5:3e:fe:0a:fb:
3c:01:c6:0c:bf:c7:3d:3b:62:12:18:c1:53:2c:f7:12:df:4c:
47:7e:ac:cb:b7:7f:c4:39:2f:57:1d:99:37:e0:be:c1:1a:bb:
4a:46:d0:46:c7:e7:8c:d8:95:67:92:69:be:ac:43:14:57:31:
97:db:40:a1:19:5f:21:18:00:ed:cd:6c:71:93:28:44:35:60:
7a:db:19:6a:5b:fb:e9:6e:d0:da:06:ec:ed:a9:6a:3d:6d:d5:
7a:2f:de:ed:fa:d1:69:01:6e:6f:50:eb:1b:c5:eb:bb:97:1e:
4e:6c:a2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:20 2026 by rpki-client