Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: lIvLNBF4PUS7VAbyEE4aT32dsfZnkCqS5SHWCAe3UAA=
Subject key identifier: 6E:E7:31:83:AF:1F:DD:E9:19:D6:2D:C3:CB:02:E5:FF:48:93:E0:1B
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019EC2CA1173AF4994261246B0C9F860D2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 21:01:23 +0000
Manifest this update: Sat 13 Jun 2026 21:01:23 +0000
Manifest next update: Sun 14 Jun 2026 21:01:23 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: 7uqZXCKUsAaWbhhxsVd6+TYjT/yhzykfjLvvMbjcgDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:11:73:af:49:94:26:12:46:b0:c9:f8:60:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jun 13 21:01:23 2026 GMT
Not After : Jun 14 21:01:23 2026 GMT
Subject: CN=6ee73183af1fdde919d62dc3cb02e5ff4893e01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:e0:6a:57:de:03:f6:02:ab:ad:02:bc:f0:
25:05:7a:5a:53:cf:5d:dd:55:98:d5:60:90:e0:37:
2f:dd:97:e2:ab:58:00:f2:f4:86:cf:e5:a4:c3:07:
a1:88:cb:f6:1c:36:81:82:7c:62:e5:b3:8a:41:81:
c9:ce:ca:84:0e:2b:79:3a:61:96:d9:c2:22:ba:15:
f7:21:7a:d1:50:00:9a:89:6a:9f:21:d4:35:ea:ee:
06:9f:43:63:41:f5:bf:b3:40:8e:fd:a9:b8:36:ab:
76:a4:65:66:56:8f:a8:26:ee:e3:53:71:8d:a4:2f:
84:0a:c8:3b:3b:82:0b:77:4c:e0:aa:89:c1:dc:a6:
a3:0f:a7:01:5a:c6:ee:79:a2:7b:23:2a:30:c2:fb:
74:c7:61:00:2c:c1:77:8d:e0:cd:f3:88:4a:e1:ef:
c0:29:07:cd:7e:29:27:3b:2e:82:dc:e9:6b:71:05:
c6:bd:71:d6:32:79:a5:7d:56:9d:d3:3c:5c:ba:cb:
d2:0b:44:64:de:be:61:20:89:10:51:da:da:c1:d0:
58:72:18:df:8e:d4:43:fd:b1:f7:db:51:5f:83:c5:
68:af:3d:23:e7:3e:c1:05:88:dd:a1:c0:0c:05:0a:
66:7b:20:94:67:36:11:89:15:39:97:a9:bb:ee:3f:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E7:31:83:AF:1F:DD:E9:19:D6:2D:C3:CB:02:E5:FF:48:93:E0:1B
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:93:1e:31:86:ae:e2:e8:fc:46:33:51:c9:25:ae:9c:15:92:
c3:3d:db:4c:fc:3e:ce:9a:39:51:ae:54:69:21:31:3a:46:bf:
78:55:5f:18:02:d1:86:1d:32:ce:f5:ac:5a:cc:46:09:0f:af:
9b:d6:3c:ce:e9:72:35:c1:cc:18:b8:99:19:f8:ce:91:a2:4e:
6c:49:eb:b3:c3:af:09:ba:9d:f0:74:e8:bc:89:4f:94:2a:03:
25:50:48:25:a1:a8:d7:a2:08:d0:66:85:f1:17:96:e0:d2:e6:
e0:a2:90:2b:ce:88:d0:a2:ed:2c:9b:04:b4:a9:65:18:5e:d0:
3b:9a:33:61:6b:45:51:ad:8b:07:ef:e0:d7:85:a3:b1:83:35:
14:1e:81:3b:2e:bf:1b:be:05:49:f4:77:43:cc:43:4a:16:34:
c7:fa:c6:a0:08:e8:d9:59:a3:9b:af:e8:c9:37:80:e8:cc:31:
30:8a:d2:bf:b4:a5:d8:9c:b9:d6:b2:1d:49:48:a4:be:ac:e2:
25:8a:db:6d:32:f4:4f:cf:e2:95:a4:ff:bf:42:49:77:c2:e9:
e2:15:db:82:d6:a5:b1:51:2e:b2:78:ec:62:e8:3c:de:11:fc:
3d:da:bb:64:10:25:8d:4f:db:0f:55:b9:81:c2:4c:75:eb:92:
37:8b:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:59 2026 by rpki-client