Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File: vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier: OSuOlkg7n48xHoohclmilDMA1PXRp23xvjQ5d4GtLoQ=
Subject key identifier: B5:85:88:C6:F9:82:5D:D3:9A:60:8F:D1:14:6D:25:47:D1:1D:CC:13
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer: /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial: 019FA7863DDE8F815F4A76EF734F1335C62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number: 0224
Signing time: Tue 28 Jul 2026 07:00:20 +0000
Manifest this update: Tue 28 Jul 2026 07:00:20 +0000
Manifest next update: Wed 29 Jul 2026 07:00:20 +0000
Files and hashes: 1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: p5gud5o07Ja58d+ha36lGDfx2NMoJRO+qA8ILo1ZRHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:3d:de:8f:81:5f:4a:76:ef:73:4f:13:35:c6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Validity
Not Before: Jul 28 07:00:20 2026 GMT
Not After : Jul 29 07:00:20 2026 GMT
Subject: CN=b58588c6f9825dd39a608fd1146d2547d11dcc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:5d:ff:f6:c8:ce:00:e3:73:bb:81:50:a8:
d3:e5:6c:53:9c:90:28:c3:72:77:5d:9c:c1:1b:39:
8a:80:8f:3d:6b:e7:e4:8d:48:ab:fe:1d:22:86:5e:
3d:50:b6:2d:9a:74:1a:e6:2d:6c:43:90:ba:53:f8:
6c:12:e2:c5:f4:7e:ad:d8:61:93:bc:64:d8:3a:1b:
e0:1d:cf:15:46:30:2b:3e:e4:58:b0:54:48:83:d0:
9e:95:43:e3:df:e0:84:f1:bb:f3:79:d2:28:4d:a0:
d3:ee:fd:2e:ee:15:4c:93:c8:3d:1e:aa:80:07:52:
44:82:a8:2b:d1:32:0b:60:4b:06:95:12:42:72:23:
96:32:72:76:72:1e:d1:c4:5c:de:91:9f:d6:7c:15:
4b:50:62:0a:08:0b:6d:ef:ac:78:85:70:d9:21:b0:
b4:67:5a:b3:29:69:2a:b1:bf:7a:7c:20:fd:a1:db:
49:b5:84:05:b0:94:e8:84:ee:45:93:3a:a9:36:6a:
fc:ba:cc:cb:17:3c:ce:71:fa:d8:6d:2d:ab:05:f2:
c3:57:38:65:ca:da:be:9e:11:3b:04:d8:bc:03:71:
b8:df:ff:4a:57:cd:64:36:15:0c:22:70:88:b4:ab:
3c:79:a7:a3:b4:79:68:18:59:98:b6:06:ba:9f:97:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:85:88:C6:F9:82:5D:D3:9A:60:8F:D1:14:6D:25:47:D1:1D:CC:13
X509v3 Authority Key Identifier:
keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:41:8c:69:4c:99:ce:34:4d:65:e7:f9:b0:3b:f7:64:c0:8a:
8a:2a:bf:c9:e1:0e:9f:f6:87:75:73:89:30:4a:61:e3:87:4c:
55:db:e7:88:dc:27:f7:6b:f0:1f:0b:05:35:98:3f:da:83:b1:
ea:ae:41:03:3b:03:44:9c:5e:b9:13:73:ed:a5:20:28:e3:a7:
40:f2:d2:ac:37:09:3e:d3:9f:27:66:9d:1f:46:c7:fd:b1:dc:
46:2a:4b:94:79:f2:2a:61:05:b2:0b:29:9b:aa:7d:ca:95:ab:
53:e9:5d:b8:bc:80:7a:d9:4f:3b:17:b4:ee:5d:36:cf:5c:c4:
42:c5:97:88:6d:2c:5d:13:3d:30:4b:af:ef:81:34:3e:62:45:
57:9b:d2:99:25:28:66:5a:01:2c:de:42:4e:7a:3d:ea:a0:0f:
75:e6:5d:a0:f7:7c:4d:4b:eb:20:85:8c:5c:40:af:1f:58:98:
0c:eb:22:10:3b:74:12:88:94:54:35:19:bb:b6:43:b8:9f:f2:
1d:11:f6:13:0d:ee:66:6c:ee:a1:04:c6:79:4f:42:b6:f7:4a:
1e:a3:60:b8:6e:6c:e9:bb:64:cd:f7:a1:c6:a6:41:05:2f:b8:
97:97:46:2b:50:e0:31:07:1f:16:7a:3d:bc:28:b8:e1:3e:9e:
83:8d:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:40 2026 by rpki-client