Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier: nQHY82MeivraGt7C05a9yUDOuUDOqM6QSQXDQ82o4BQ=
Subject key identifier: 05:74:4C:3B:C2:8F:F4:A2:8B:58:86:BC:F4:52:23:C9:66:7F:E3:DA
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 019FA898F7557E37477C36A7C9372D1EA86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number: 19E5
Signing time: Tue 28 Jul 2026 12:00:24 +0000
Manifest this update: Tue 28 Jul 2026 12:00:24 +0000
Manifest next update: Wed 29 Jul 2026 12:00:24 +0000
Files and hashes: 1: 5OsbbnnHwhVNORbPHv-OJIeuoGI.roa (hash: XRJA8VpJASXYSnFu9o5yKclI6PUgREHgPT2bBiqSOmk=)
2: XiD6lDrgMPuS8eayCDVkIbui-4s.roa (hash: SBkJkhDft5A8cF6t/KuhZfif5su+kzjqoUhMEaiSsSk=)
3: pBECGuvlqI1JRG7h1KFoBdoLOQQ.roa (hash: g1yrRU6vVwlNdEkW9jmsyPMMiYUAGVw0ecH5Z2RUhlM=)
4: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: hDhEa8ZwMaOmGGlM3va/u1oKoDsxIVTW7ruoSBcNS68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f7:55:7e:37:47:7c:36:a7:c9:37:2d:1e:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Jul 28 12:00:24 2026 GMT
Not After : Jul 29 12:00:24 2026 GMT
Subject: CN=05744c3bc28ff4a28b5886bcf45223c9667fe3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:d3:be:19:5e:f1:e6:7d:7f:47:f8:95:c8:
64:39:03:a6:14:e6:c4:b7:61:d8:b9:a8:04:a1:8d:
9c:2a:60:2e:05:b6:a1:2c:6d:37:8d:ce:8f:64:98:
29:9f:81:fd:27:d5:e7:18:da:45:04:76:e7:5f:eb:
61:d4:de:9a:a5:68:c3:1e:94:59:f6:2c:e1:2c:5d:
fa:50:d6:e8:fb:56:2e:c3:7c:7f:25:ea:b6:6a:4a:
77:bf:42:87:d5:d4:93:04:05:6c:a1:5d:d8:36:53:
38:17:f9:81:7d:a0:35:0e:d7:ca:c2:6d:f4:19:10:
c2:bb:e6:5d:65:49:e9:5c:af:1f:b7:4a:53:f2:bf:
c3:5c:af:9f:71:f0:50:4a:d8:af:34:9c:72:9d:31:
46:f8:06:0f:ca:d7:31:61:70:0c:bb:91:d1:83:3e:
69:7b:51:62:e6:89:6c:2e:f4:08:cd:bf:3b:1d:d4:
c8:e9:c3:98:12:74:fc:e4:1f:ba:85:08:a1:07:4a:
f4:7f:29:30:99:46:4a:dc:c1:8e:15:97:1a:f3:4b:
f6:86:47:e4:0e:ee:44:97:67:21:16:e7:fc:55:81:
8a:71:cc:35:32:a8:a6:0e:ba:e8:1b:ea:71:67:4b:
92:4b:54:b8:17:10:80:54:21:90:9d:c0:7a:11:c9:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:74:4C:3B:C2:8F:F4:A2:8B:58:86:BC:F4:52:23:C9:66:7F:E3:DA
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b3:85:a5:54:fb:35:5a:ab:ea:43:5d:a3:5e:1a:3c:c0:a0:
de:af:5c:54:d6:89:89:3a:22:1b:8a:d3:5f:ef:76:16:3a:1d:
fb:dd:bb:7f:99:65:e3:4a:8f:49:93:dc:d3:ad:3d:5d:1e:d5:
63:e9:d4:c0:f9:68:e1:4b:e5:b2:29:43:9d:44:eb:ab:7d:4b:
85:f5:1c:5c:76:1b:47:59:cd:3f:47:f9:cf:34:4e:2d:79:b8:
00:65:8f:67:bc:46:a1:13:e7:a8:57:9c:f5:aa:46:9c:eb:81:
de:dd:eb:08:f6:db:0f:a6:e0:f8:92:50:81:1d:43:46:f9:79:
0b:e0:ff:d1:79:c6:23:db:bb:fb:22:97:a7:8a:9c:72:3b:41:
d1:5a:2b:c2:6f:91:90:3c:ef:43:40:50:0b:bf:c4:10:6b:a4:
48:57:de:82:f2:86:e0:c4:79:2d:6f:8d:cf:67:b0:39:50:da:
1e:97:4a:24:7d:33:16:11:47:f2:f6:7f:04:4c:9d:7b:f4:ff:
55:c5:d7:74:58:5a:87:37:db:b2:4d:d9:85:bf:de:38:2a:ca:
11:4b:51:c4:54:ac:b5:43:9c:69:d8:a9:fc:b0:67:6b:45:08:
f2:61:e0:5a:36:da:70:80:f3:a2:a6:0f:2c:ee:38:b9:d1:e7:
f4:81:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:44 2026 by rpki-client