Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: r1cEpJO2OYKPxg56kBiGfLVdx5CAWfrPXvIapi8M+LU=
Subject key identifier: 62:57:09:8E:F8:24:3E:7C:7F:F6:34:7F:17:28:0D:A0:6E:7D:03:C5
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 019FACE403A8206D5F1E438B92F5F688F90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 08:00:52 +0000
Manifest this update: Wed 29 Jul 2026 08:00:52 +0000
Manifest next update: Thu 30 Jul 2026 08:00:52 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: 1PLNUdc/Uv0WxH/6xb6A9TK877S/sQfy+Ecv0ekBlwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:03:a8:20:6d:5f:1e:43:8b:92:f5:f6:88:f9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Jul 29 08:00:52 2026 GMT
Not After : Jul 30 08:00:52 2026 GMT
Subject: CN=6257098ef8243e7c7ff6347f17280da06e7d03c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:33:2d:0e:ac:1a:90:37:ef:63:60:73:68:6e:
e9:f6:64:61:42:99:59:0e:b2:f1:51:73:35:99:47:
9c:dd:6a:75:fb:30:42:0e:4e:9c:06:b8:62:70:41:
dd:3a:81:6c:b4:34:fe:e6:c7:9f:b4:df:4f:34:e1:
55:21:ef:62:a4:65:d8:db:3d:b6:7c:37:e0:84:1b:
48:29:90:75:43:56:f9:54:7b:94:56:53:7b:14:66:
28:fb:43:8d:8f:89:b5:aa:21:1c:9c:23:e0:67:f4:
f6:a6:ae:c0:d1:e2:64:7f:b3:ae:f9:ba:f7:2f:1c:
26:55:be:9e:2b:5d:36:cd:9f:0d:61:d1:f9:32:48:
37:bb:8b:e2:4e:a7:d2:69:65:c4:f4:86:f1:ff:e2:
60:18:04:f7:74:43:ae:ac:53:fe:b5:d6:ed:b3:89:
1e:44:9e:f9:5c:f4:bb:d6:69:db:9f:3a:91:93:c1:
8e:bc:79:c0:da:e7:52:77:bc:cd:24:2f:7f:6e:9c:
cb:cc:e0:71:70:b6:4b:67:51:10:84:c9:cf:19:36:
2b:c5:0c:af:77:68:65:20:4b:c9:cd:10:9a:4a:95:
4d:ac:3a:5a:3b:2d:ec:db:b9:2e:d4:9a:98:15:f0:
43:6a:d8:8e:61:66:de:ed:71:ec:4f:77:c9:48:e6:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:09:8E:F8:24:3E:7C:7F:F6:34:7F:17:28:0D:A0:6E:7D:03:C5
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2b:17:ae:54:c4:e7:4b:73:4d:da:3e:bf:eb:d0:1e:d5:2e:
03:cd:bd:07:97:4b:3b:e0:12:4f:6c:e1:bf:7e:ee:61:8f:35:
27:07:7e:60:2e:5c:f8:ab:32:bc:4b:70:40:84:d8:ed:06:f9:
99:59:a2:c6:d1:5c:d6:39:6d:4e:1c:93:5c:22:15:71:df:ca:
09:1e:9a:2e:38:71:99:99:43:95:44:da:9a:aa:2a:08:07:cf:
43:eb:ca:58:7a:f8:60:ba:cf:fe:2b:d1:56:30:62:c9:84:97:
22:ae:4c:8d:88:6f:8e:f7:25:49:c6:48:ce:b7:26:a5:08:14:
bd:f7:44:3e:4d:a5:d8:c4:7d:fe:6c:d6:7f:24:e7:25:24:e9:
42:7c:03:8c:f3:54:77:ba:f5:b3:0a:6e:ae:91:37:27:36:3c:
00:69:9c:2c:09:b7:e3:46:22:9e:1e:c0:2e:27:6f:94:31:ed:
d7:28:a4:e0:d7:97:f0:6a:4c:30:b9:da:9f:47:f6:b7:cd:df:
ce:26:86:a0:d0:42:94:56:5f:e9:dc:b9:7e:54:bd:7b:f9:c3:
1e:3b:a4:f7:3f:a6:65:d3:03:30:67:fb:a3:dd:ee:0f:16:40:
19:5a:54:0a:f0:a6:78:0e:76:a8:93:34:1d:af:20:7b:20:4d:
01:e0:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:09:47 2026 by rpki-client