Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier: EdPoIjVcSC8/HeUyGNGuprplgOWW9Z3fCYXNYDwp444=
Subject key identifier: 3C:D1:03:74:6E:5B:FF:50:06:33:2F:73:EC:D3:95:A2:1F:1A:01:EC
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial: 019FA9078AE7C97449C2D4A69555FB2DCB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number: 03A9
Signing time: Tue 28 Jul 2026 14:01:11 +0000
Manifest this update: Tue 28 Jul 2026 14:01:11 +0000
Manifest next update: Wed 29 Jul 2026 14:01:11 +0000
Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: QjGeyGgTU9ZhNmC2h/CTVwLQ+PHQdboGclCz0iG+oIU=)
2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:8a:e7:c9:74:49:c2:d4:a6:95:55:fb:2d:cb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Validity
Not Before: Jul 28 14:01:11 2026 GMT
Not After : Jul 29 14:01:11 2026 GMT
Subject: CN=3cd103746e5bff5006332f73ecd395a21f1a01ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:24:65:29:66:e3:fd:c4:a8:36:9f:aa:5e:
99:0f:ff:2b:a5:05:86:3f:53:41:87:a4:95:6d:26:
c1:ef:4b:fc:47:69:c2:94:a9:a7:fb:68:bb:7c:b0:
b4:1a:b6:7a:c9:b7:c2:5f:7b:f3:ab:8a:b2:19:10:
ea:a7:97:3a:79:fb:94:6c:ee:4b:f1:f6:56:67:fa:
70:35:be:f6:b0:39:f3:0d:d2:15:42:b7:ba:be:fe:
da:b5:d0:ec:41:7f:a8:ec:25:34:83:82:2c:f7:de:
a7:b5:f4:cd:4c:c1:e7:38:9d:5d:d9:a6:47:b8:1d:
2d:ba:c5:bd:d9:ac:de:4d:c0:e7:84:0c:c4:e1:ee:
77:f4:5e:4b:49:1c:33:c4:21:55:79:80:d4:db:66:
8b:ae:d0:5f:ab:60:d4:9f:45:d6:02:5d:72:d3:7f:
4d:95:cc:3b:00:93:41:f1:0c:90:6a:ca:cf:d0:9d:
24:be:34:40:02:80:b5:a3:39:b0:34:48:2d:41:a7:
66:99:a5:ee:09:90:b2:ed:44:e6:48:1a:23:42:b9:
fa:f7:0b:05:63:af:cf:8c:d2:b3:83:b8:9c:0d:c6:
75:92:f0:24:50:de:4f:e8:12:20:11:ee:a1:8a:40:
ce:84:cf:09:3d:87:52:62:0e:71:e5:80:a2:d9:71:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:03:74:6E:5B:FF:50:06:33:2F:73:EC:D3:95:A2:1F:1A:01:EC
X509v3 Authority Key Identifier:
keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:28:63:5c:a1:82:89:92:b8:11:88:d3:a3:52:1d:a0:b6:
45:9f:0f:8c:8c:ad:63:3a:a2:94:cc:42:2a:4a:99:c4:48:0f:
30:c5:a2:8a:de:85:0b:b7:28:1a:d3:65:aa:58:f7:82:63:89:
20:23:2e:39:54:80:d3:41:8f:90:25:18:42:72:0b:ea:44:fe:
9c:77:5e:02:aa:3c:0c:db:e7:bb:79:98:a0:ff:fa:d4:50:f1:
71:de:34:39:bb:d0:10:10:14:5b:8b:b7:1c:a0:c8:95:56:9d:
2a:46:1b:22:7c:da:4a:67:f2:ba:27:61:83:b9:df:60:1c:8b:
e3:1c:91:b5:c4:db:3c:f1:36:65:c3:4c:3c:c0:b5:3e:d9:4f:
b1:92:49:82:c5:15:be:31:a9:3e:84:75:50:5c:c3:7a:43:b8:
6f:55:53:76:91:4d:46:27:8b:b2:53:c8:d0:0e:12:da:84:16:
89:c2:18:65:ad:c9:82:6a:07:52:f3:3f:c7:a2:30:dd:a7:88:
47:f1:c1:7b:00:d0:c0:77:4d:68:52:98:ac:09:a9:1f:ca:1c:
9b:eb:c6:17:b0:71:d3:7a:f5:7a:f0:0d:22:7c:e8:a1:11:33:
e3:f5:0a:d0:a3:73:69:2f:55:cd:1a:df:56:e7:76:ba:62:39:
a3:9c:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:44 2026 by rpki-client