Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier: 5PC6vjf4eBIeduh8xo4eF+i6OkQQ3nG+DND+djSBFX0=
Subject key identifier: AE:01:87:7A:AE:40:F4:68:9A:CE:9A:73:AE:60:20:9D:9C:22:4C:5B
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial: 019FAB9A6584CAD1CB5D8C1CD9EDE50148DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number: 0298
Signing time: Wed 29 Jul 2026 02:00:50 +0000
Manifest this update: Wed 29 Jul 2026 02:00:50 +0000
Manifest next update: Thu 30 Jul 2026 02:00:50 +0000
Files and hashes: 1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=)
2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: oIZF16Ag7FnaRuqo+H0LiLGzatiSPmsQkt///NcH8LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:65:84:ca:d1:cb:5d:8c:1c:d9:ed:e5:01:48:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Validity
Not Before: Jul 29 02:00:50 2026 GMT
Not After : Jul 30 02:00:50 2026 GMT
Subject: CN=ae01877aae40f4689ace9a73ae60209d9c224c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:6a:24:9c:2b:22:4d:ef:8b:d3:9d:d8:6a:
2d:1f:d2:61:11:9b:44:5d:95:9a:09:24:8d:38:94:
32:1f:97:00:ec:04:d0:aa:20:92:4d:ef:cb:f8:bf:
3c:82:a9:48:ad:f1:bc:85:47:8e:81:12:de:d5:3c:
1a:a0:8d:ff:65:a2:6e:c3:47:2e:57:7e:66:cb:b0:
fa:35:08:4d:97:d7:d4:da:93:a7:ff:e9:dd:29:f6:
a1:57:90:7a:b7:be:16:82:d7:51:7c:40:21:c1:52:
cf:23:25:de:51:20:83:bb:1a:dd:05:21:40:44:1e:
df:93:2c:69:8c:70:64:8d:fa:02:16:0d:6e:33:1f:
21:ca:f6:f1:16:46:36:25:39:81:01:60:9f:a2:1e:
ea:c2:65:cd:c7:50:46:c9:2a:67:8c:54:72:11:a6:
f1:e1:45:62:ee:1f:38:ea:13:dd:5a:bc:73:14:4e:
a9:f9:ff:1a:53:cc:a8:ba:61:9c:55:23:6a:5c:e5:
92:9c:3c:20:9f:c2:f3:56:55:05:e3:76:3a:df:ed:
c6:2e:d4:2a:8b:f4:ec:9a:81:60:06:d3:cc:14:61:
4f:97:10:ae:ad:bb:a0:c1:fe:19:de:20:b3:44:20:
c4:6f:35:03:f6:80:13:f2:8e:e2:10:b2:3d:65:0a:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:87:7A:AE:40:F4:68:9A:CE:9A:73:AE:60:20:9D:9C:22:4C:5B
X509v3 Authority Key Identifier:
keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:05:03:78:99:13:d9:e8:0d:8e:71:2e:38:b5:77:0d:56:79:
6e:16:22:f0:2c:79:76:90:b9:d9:4b:27:9d:8c:fb:72:2d:1f:
f3:23:ac:2f:41:d5:df:08:11:e2:2d:7a:62:9f:47:64:d6:8a:
50:97:47:60:53:40:a6:ae:0d:9e:2e:28:a0:8f:e9:52:d4:13:
18:3e:b3:25:17:a4:20:02:87:13:e4:e0:1f:97:6c:f4:91:c4:
ab:a7:4b:ab:a8:14:71:96:e7:89:8c:cf:4a:d3:5e:dd:ec:31:
02:9d:e9:5d:4b:f4:ca:c3:ad:7b:fe:d2:45:86:2d:48:71:cf:
3c:b9:cf:96:a5:db:b0:78:cb:5d:75:2f:86:1d:2a:80:ab:df:
64:8b:9f:78:75:f7:ab:01:31:c5:74:82:28:ec:03:c8:b8:fd:
bf:87:7a:15:c2:e2:a9:c1:09:7f:c7:23:d1:4a:43:c1:03:43:
6c:62:c2:b4:1b:b6:60:ad:2a:7b:4a:36:ff:b2:34:b0:c5:a4:
50:de:9c:75:76:d9:a6:52:3f:74:c1:3f:b4:3f:cf:98:19:5f:
e9:6f:60:41:e7:14:fa:d2:17:65:7f:3f:b1:a9:f1:3f:d7:c3:
1d:39:a5:a7:1c:73:ed:ee:01:9e:d0:fb:04:f1:28:03:ba:f2:
1e:6a:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:14 2026 by rpki-client