Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: JtKsUpZBGexZ94S9hTNxRR+4B8G3HdWPAqRRakouQhs=
Subject key identifier: 18:FA:27:90:8C:00:53:84:2A:CB:5F:B4:9F:A1:A1:FE:6A:AC:F9:1B
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019FAAF55F827AEADC8DF6B822D1173A3BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 23:00:35 +0000
Manifest this update: Tue 28 Jul 2026 23:00:35 +0000
Manifest next update: Wed 29 Jul 2026 23:00:35 +0000
Files and hashes: 1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: 8LCOgmXe0E6+whN9+8idNwaaZdHyLCg8GhKRJxcGmaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5f:82:7a:ea:dc:8d:f6:b8:22:d1:17:3a:3b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Jul 28 23:00:35 2026 GMT
Not After : Jul 29 23:00:35 2026 GMT
Subject: CN=18fa27908c0053842acb5fb49fa1a1fe6aacf91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:5c:b1:ed:ae:50:dc:e0:73:0a:3a:88:4d:
58:7d:95:45:c7:73:a1:5f:71:f2:fd:0a:9e:40:11:
58:36:06:37:8d:59:a5:40:6f:0d:c9:ff:7f:75:1d:
4d:3d:19:08:84:31:8c:b0:39:76:fd:ec:9a:96:22:
bb:26:a1:15:df:81:4c:29:43:ce:9f:85:07:f1:c4:
de:4a:cc:4e:d0:96:d1:a2:82:5c:35:1e:d6:23:1a:
48:a2:5c:ee:38:54:d6:00:c8:05:af:30:55:14:1c:
ab:23:4e:13:57:e6:4f:81:68:51:01:70:b8:c3:e0:
d0:e2:30:ca:a4:f4:35:56:79:69:9b:84:51:7b:bf:
6a:da:4e:90:26:1d:0e:65:d1:88:76:0a:e1:8a:6b:
63:7b:38:1b:fb:fb:e2:2b:d3:94:9a:28:d8:eb:f8:
46:45:99:e6:f9:a6:5d:25:28:2e:b5:b9:c2:bb:b1:
db:ef:fc:a9:06:19:75:ba:a5:7a:07:6b:38:a5:ee:
4c:d1:ce:7f:59:e2:08:e2:c1:f0:26:18:c7:11:d5:
ce:1e:23:8b:ed:1d:3c:1e:00:81:50:8b:f3:3c:ad:
c8:39:4b:93:78:d5:b0:00:6b:db:01:e9:82:cf:16:
39:83:32:36:df:48:51:03:39:1d:a0:d8:f4:ee:49:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:27:90:8C:00:53:84:2A:CB:5F:B4:9F:A1:A1:FE:6A:AC:F9:1B
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6e:a1:2f:db:01:81:aa:3b:fc:05:37:8d:2c:d9:e9:f2:45:
e1:c4:2d:57:0d:a2:ec:65:02:95:45:d5:dc:2f:c8:71:08:81:
a2:2f:8d:0b:2c:d4:06:70:4c:96:6e:be:ed:79:22:44:07:75:
9d:bd:7c:e3:d2:7a:18:c9:84:95:b8:62:ef:1f:e5:93:a7:41:
5d:22:69:50:d7:62:6a:62:a7:4a:1b:f4:9a:29:d9:5a:f9:96:
8d:81:a2:38:9a:20:46:1e:97:e4:66:1d:0e:7b:90:3d:09:61:
5a:4a:af:8d:f7:31:76:bb:7f:83:e9:0b:21:52:20:31:0b:76:
88:62:d7:21:41:ac:b4:71:f5:dc:0c:e0:b0:0f:da:bd:4f:35:
19:4a:7a:c1:d4:9a:31:d0:8e:eb:c7:cd:f9:a3:8b:d2:91:8a:
25:df:ab:81:b1:53:2d:e3:c3:2b:cf:4a:7f:5c:11:bc:f9:f4:
d8:5c:69:5e:82:23:7d:3d:cf:ff:0b:58:30:1f:20:15:fe:a8:
29:9c:6c:4d:b6:ad:0f:16:9a:41:83:4c:ac:be:66:b1:d1:79:
89:34:ba:6d:75:83:ae:fc:47:4c:74:1b:65:bb:f3:f3:d9:29:
88:e2:9d:ca:ff:d3:1b:81:6c:00:6e:f4:e4:d4:41:23:2a:1a:
c4:29:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:52:52 2026 by rpki-client