Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: jQuKcl/AclCM0b+KvavB0FM/9vVk4ybaenr3vdczezc=
Subject key identifier: 4D:8D:B6:11:15:AE:B5:9A:CD:B3:70:3B:52:BC:22:BA:DB:B3:C8:16
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 019FAD88AFA889385B48337EFF66C69EF979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 11:00:43 +0000
Manifest this update: Wed 29 Jul 2026 11:00:43 +0000
Manifest next update: Thu 30 Jul 2026 11:00:43 +0000
Files and hashes: 1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: iHDYIjc6qF0B8lSV2MpotYbOTE8vdWSZ/ryviwsHpcU=)
2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:af:a8:89:38:5b:48:33:7e:ff:66:c6:9e:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Jul 29 11:00:43 2026 GMT
Not After : Jul 30 11:00:43 2026 GMT
Subject: CN=4d8db61115aeb59acdb3703b52bc22badbb3c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:bb:94:ba:18:ee:53:95:4a:69:bd:3e:65:
ac:73:12:92:dc:c5:4c:43:b2:a6:c4:4b:a9:32:ff:
6c:0f:16:c0:ea:4c:c6:cd:e8:10:64:5a:44:4b:d3:
4f:1b:17:e2:19:dd:ff:30:cc:c2:f9:f4:01:a3:9b:
e3:71:0d:e4:ab:71:a2:17:76:a0:58:49:2c:12:f9:
6b:1f:cb:83:0a:4d:66:a0:35:1c:07:5b:e0:1c:1c:
77:39:c7:9b:a1:0b:e4:3d:81:85:dc:e3:ee:2e:a9:
c1:72:c2:01:7f:07:56:b5:9c:d9:58:a6:1e:21:34:
35:cc:fc:db:6f:23:6b:59:c0:fe:fc:22:40:31:e7:
ce:d4:04:04:ef:7d:22:75:0b:d0:f8:0b:25:35:fd:
2a:0d:9b:ba:81:4c:4b:3e:8a:e7:48:db:ca:00:0c:
77:74:68:84:e7:49:53:19:79:8a:83:f3:b0:dc:a1:
3f:4f:d9:9a:00:bf:4b:31:b2:26:69:e1:5f:83:b1:
47:69:ee:40:b5:3c:2a:17:8f:91:95:3b:ea:92:a0:
cd:c3:03:45:b6:32:35:62:d5:ef:b5:a6:3c:ba:bb:
7e:ae:85:99:94:df:37:b7:3d:a3:8d:1f:91:7a:2f:
64:69:f1:03:91:d9:ad:c0:d3:4f:98:3c:3b:fc:de:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:B6:11:15:AE:B5:9A:CD:B3:70:3B:52:BC:22:BA:DB:B3:C8:16
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1e:03:57:fb:3e:ba:4d:68:3d:8a:6b:3d:4a:3e:25:f4:da:
20:45:66:2d:ee:be:17:84:a0:de:6b:1a:8b:0b:30:ea:11:35:
fc:6d:e7:0e:30:61:ff:5e:06:c2:06:40:71:28:7a:6e:b4:0a:
ef:93:4f:bb:33:a4:5c:da:04:76:9f:74:6d:f0:72:42:56:22:
e1:4b:a0:94:ca:99:68:f4:d7:f1:28:5c:83:8b:87:9c:0b:67:
49:84:11:fb:82:99:74:d7:b3:db:36:bd:66:c9:3f:6e:ef:12:
c9:c2:8d:a3:05:c2:23:a6:4c:cb:f7:18:1d:8c:81:c7:c9:73:
f3:ee:0e:17:d3:d5:ee:4e:22:96:22:d4:6c:0f:bb:26:20:ab:
64:01:3e:9a:bf:26:91:8f:f3:fc:cd:91:2f:18:94:a0:57:b5:
6d:d0:31:69:cc:2b:40:c6:41:17:e2:71:71:23:21:31:44:a4:
be:10:9e:0e:91:49:87:3e:61:4b:28:6d:8a:d3:8f:44:86:0d:
c3:75:ad:15:e8:db:d8:bf:16:a4:18:b2:f6:bc:70:df:c5:73:
a8:1b:8c:a2:24:4a:94:5b:a5:f1:66:2c:5b:e1:6f:52:c4:81:
ec:4a:7d:be:52:0f:19:b2:70:fc:54:47:ef:04:10:4e:71:b3:
eb:c2:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:45:45 2026 by rpki-client