Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: UnobsyihY8ip0/j/b+Y6xi7hfnj0bRKzeeQ5+GLf1BM=
Subject key identifier: 4B:C8:00:48:A7:60:FB:1D:A9:AF:AF:84:C0:E0:D6:05:8B:C5:0F:CC
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 019FAAF5F8A6C9FF3B1E4C94852EEB930BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 23:01:14 +0000
Manifest this update: Tue 28 Jul 2026 23:01:14 +0000
Manifest next update: Wed 29 Jul 2026 23:01:14 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: VvK9+B2bSJW2kIsvOc502aQDjvEtLqnsUbjRbzMVzz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:f8:a6:c9:ff:3b:1e:4c:94:85:2e:eb:93:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jul 28 23:01:14 2026 GMT
Not After : Jul 29 23:01:14 2026 GMT
Subject: CN=4bc80048a760fb1da9afaf84c0e0d6058bc50fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:ea:9a:73:2f:b5:23:e6:65:07:bc:ea:24:
a4:8d:d6:90:b3:2f:19:4c:dd:96:ce:84:79:52:4a:
92:a3:47:27:37:c6:0f:84:14:96:3a:13:c0:83:2b:
9a:b7:e2:9a:9f:da:20:45:bc:9c:ed:2b:ec:3f:22:
8e:e3:d7:df:e3:7b:6c:b6:a3:2a:f9:d3:be:d7:57:
ae:02:f1:0e:09:92:76:24:68:03:4c:ff:f5:5e:33:
b2:37:c8:b0:b6:7c:38:fc:0f:4f:db:02:da:f6:ea:
a4:af:29:22:62:33:06:79:a2:9d:74:06:1a:74:29:
b5:52:d7:8f:f7:d4:5f:d1:f6:b6:06:7c:76:5c:10:
53:99:b4:f7:1e:c1:f8:b5:d7:16:1a:8a:18:ed:2e:
bf:c2:c1:35:54:ae:b8:41:e2:b6:d3:b9:f0:11:68:
25:a0:3e:16:9d:36:42:4b:9c:b6:42:5e:21:ed:2a:
f4:5a:4c:71:89:d9:5e:50:8c:8b:89:bf:03:58:04:
f7:d3:fe:de:09:c3:05:7c:8e:68:0f:17:ca:21:bf:
7e:d8:77:d2:89:80:c9:d9:df:c5:07:5e:44:e1:4a:
a5:41:e8:6a:fe:c1:58:ef:88:81:23:bc:9b:a2:33:
59:a7:af:b4:c4:bf:e8:4c:fb:59:43:7d:44:63:d7:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:00:48:A7:60:FB:1D:A9:AF:AF:84:C0:E0:D6:05:8B:C5:0F:CC
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e8:06:3a:d0:b0:ff:63:09:b1:5f:fd:5f:cb:03:df:c6:fd:
f1:e9:bb:ec:9c:6d:13:06:6d:5a:24:e7:2c:08:21:38:82:37:
35:08:c4:3e:7a:59:ce:9e:54:00:f5:86:94:10:f7:97:7c:d9:
a9:a0:c5:90:2f:b6:a9:5c:e5:6d:25:90:44:26:0c:4f:c3:9e:
16:bb:f8:ab:ef:d3:26:7d:a0:d4:10:83:96:e3:37:7a:68:66:
7c:57:25:a0:fa:d1:4c:40:0e:74:66:eb:7d:01:21:5d:30:6a:
b2:e8:17:79:c4:60:d2:4d:8b:72:84:e0:71:7c:d7:f6:4c:57:
ca:fc:52:c8:b5:1c:a7:8a:90:14:74:f1:58:4a:4c:81:eb:85:
21:db:7e:c1:97:79:db:3a:38:94:65:99:f9:db:bb:b7:ea:cf:
3f:f1:5b:57:83:82:c0:04:d9:7b:50:14:2b:52:26:fd:4e:e2:
f5:6b:74:aa:6f:91:ba:c3:73:1f:74:87:13:de:60:ba:1f:c9:
41:94:09:f7:8f:5a:58:d1:fd:9d:83:b7:d2:d8:5e:4a:07:f0:
ac:de:84:e1:c0:44:a8:1b:07:7f:0a:cd:e1:01:d9:c0:2d:9a:
96:8f:a9:5c:cf:d2:9d:30:b2:7d:0d:4d:31:1a:80:6e:1c:7b:
e6:40:74:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:07 2026 by rpki-client