Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: XXH8WWXwUkwWibWiHrz53/aogFO3XPz/3rjYhr1wGIY=
Subject key identifier: DE:19:F4:58:57:FD:EA:49:BC:04:20:2C:51:29:7F:BB:17:80:5A:AE
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019FA9E2E85FF65987AD92A3B5E6C185D386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 171A
Signing time: Tue 28 Jul 2026 18:00:47 +0000
Manifest this update: Tue 28 Jul 2026 18:00:47 +0000
Manifest next update: Wed 29 Jul 2026 18:00:47 +0000
Files and hashes: 1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: uL7o5A8mlqbN7ansbTeap8pU5paK3YOlTvCUKUPUO5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e8:5f:f6:59:87:ad:92:a3:b5:e6:c1:85:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Jul 28 18:00:47 2026 GMT
Not After : Jul 29 18:00:47 2026 GMT
Subject: CN=de19f45857fdea49bc04202c51297fbb17805aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:c4:29:e7:5a:79:2e:ea:7b:eb:06:81:97:
77:06:7c:5a:bb:62:7e:62:ff:17:00:85:c0:7e:26:
c6:ca:ce:e3:6a:88:5d:c6:a8:c2:a7:f4:b5:f3:10:
f8:59:5d:cc:29:95:8d:2b:5a:b3:84:ab:54:0b:5f:
c6:cc:2b:da:ef:fd:88:1b:18:37:1c:e8:0c:5c:12:
18:e1:c0:55:f5:ee:84:d8:36:38:24:b5:95:ad:df:
97:9f:f6:65:00:f2:2b:54:47:a4:44:2c:74:5f:08:
67:df:0f:f9:16:84:a9:e6:9b:3b:91:df:4c:ca:95:
3e:94:e9:72:e4:54:7b:89:db:18:55:a2:73:dc:48:
ca:93:b1:61:d6:aa:76:c8:bb:2d:b0:49:72:70:a3:
00:4d:4d:11:26:41:b3:82:a8:e6:97:47:93:bf:dc:
20:05:e1:3d:4f:a7:0b:17:c5:50:7d:96:09:78:00:
70:5b:b5:38:56:e9:19:b4:6e:ea:e3:a9:90:3c:ba:
ce:0c:79:18:86:ad:7c:17:56:c7:f6:94:d5:65:c5:
9b:e8:c8:71:b1:31:8c:52:ae:9d:27:2b:59:8d:69:
2f:dc:e9:f7:85:0e:25:91:ed:0b:55:6c:da:ec:2f:
54:c9:23:18:55:62:7a:08:86:cc:61:a0:bf:ce:ca:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:F4:58:57:FD:EA:49:BC:04:20:2C:51:29:7F:BB:17:80:5A:AE
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:30:8c:45:14:66:45:1d:47:72:93:31:83:f5:fa:a0:82:8f:
e9:05:05:a0:6b:64:04:30:a8:01:30:04:51:d9:54:97:d0:5c:
e9:bd:35:05:64:63:4f:4d:ae:15:84:91:90:1c:b3:05:47:71:
46:dd:5e:11:05:ea:19:bf:58:b8:bf:b6:6d:c4:cf:36:93:d0:
33:48:fb:d2:38:e6:27:0b:70:12:62:f1:b9:b4:f8:d5:ff:e9:
c0:43:15:de:d8:f1:98:00:ea:19:1b:cb:81:1c:5a:9b:a4:0d:
a7:af:92:21:07:d3:7e:4e:2b:54:90:bf:3a:a5:28:a2:ac:a3:
bf:a7:ce:1b:8b:c0:50:76:ec:62:6b:73:fb:54:42:6c:92:6d:
a5:96:e6:5f:d2:d2:14:6d:c9:d2:1c:be:c0:02:93:f4:ad:93:
91:ac:e4:bb:dc:8d:3f:63:88:43:9c:0b:0b:f1:b4:16:0f:85:
19:bb:41:38:58:01:54:07:f3:67:45:d9:6b:7f:06:fe:7f:07:
77:75:35:98:08:30:88:32:9c:b7:2b:d8:53:30:49:b5:0b:d8:
7e:34:64:eb:00:a7:63:b6:14:6c:ef:27:69:b7:71:d5:9b:d0:
f0:2d:a2:87:04:a0:a0:e9:f6:4d:eb:79:04:07:1e:53:11:62:
53:5f:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:35 2026 by rpki-client