Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: PYYcQl6R/Z/VfbfbLQ0YARBPxB3oIv1U95t3iUjaqv0=
Subject key identifier: DF:D6:37:09:69:D1:32:AE:D2:AB:14:24:07:4E:CC:14:41:F4:BD:31
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 019FAAF5B68C5E669C5E62CEF45987605537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 02AE
Signing time: Tue 28 Jul 2026 23:00:57 +0000
Manifest this update: Tue 28 Jul 2026 23:00:57 +0000
Manifest next update: Wed 29 Jul 2026 23:00:57 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: EK6I85qDDu3RDJ/f/P7R/lV0Z38CPBX9GVV1iNq+YNs=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:b6:8c:5e:66:9c:5e:62:ce:f4:59:87:60:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Jul 28 23:00:57 2026 GMT
Not After : Jul 29 23:00:57 2026 GMT
Subject: CN=dfd6370969d132aed2ab1424074ecc1441f4bd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:84:00:b1:1e:6f:94:60:5a:fe:02:66:f7:
7b:11:d6:49:3a:6b:79:f0:89:7e:55:c7:90:99:8d:
58:34:0d:18:6a:28:95:12:e4:20:53:be:16:fa:51:
df:cf:fe:ac:23:f4:2e:91:cc:92:4b:af:56:82:6c:
2f:1a:07:0d:18:87:9d:ee:2a:9c:1c:a7:df:f3:74:
71:40:71:bb:33:ea:1f:fc:5b:34:df:a8:c8:de:b1:
b6:1f:b8:05:72:9c:be:f7:54:52:04:02:e9:f5:9b:
72:2f:83:ae:fd:c5:9d:f6:d6:db:8e:b1:d7:a4:d1:
ff:fd:10:d6:03:28:dc:76:a1:ae:53:73:b7:86:f0:
a6:b4:20:9e:a5:87:d9:54:85:8d:52:ce:36:f7:a2:
b5:ae:c8:c1:16:d9:b4:0a:cf:a5:7b:27:3d:69:07:
2a:2f:79:82:92:56:49:ee:1e:64:55:55:d2:81:ca:
64:69:85:59:63:87:d4:97:95:18:6c:48:59:db:2d:
f1:39:5d:29:38:82:75:35:7a:ea:1e:a4:08:43:29:
cc:24:fb:43:5c:b1:79:be:f9:99:2c:73:d7:d8:a1:
de:f7:06:b8:d9:81:75:a8:24:f7:66:66:9f:11:5c:
0b:65:eb:09:3c:ca:09:cd:08:be:f0:f6:dc:26:30:
91:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D6:37:09:69:D1:32:AE:D2:AB:14:24:07:4E:CC:14:41:F4:BD:31
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:aa:61:e4:77:57:48:39:18:d1:e8:52:b4:61:8d:5f:b2:4b:
9c:46:61:00:40:87:23:76:42:ef:da:20:49:97:10:40:cd:14:
ad:56:0b:8f:43:db:9e:09:17:87:91:f3:4a:6e:8f:c5:45:04:
81:09:c9:c5:f5:97:ab:6c:65:74:51:c4:cb:e6:dc:d7:ce:aa:
5e:0f:f6:c4:85:5f:d1:4f:52:52:37:65:9a:3f:63:ff:2a:04:
5b:92:75:59:3e:7d:09:2a:8b:1a:db:0b:06:bf:c2:7c:2f:ca:
5e:aa:ca:12:15:03:3d:c5:50:8d:5a:aa:53:a4:3c:7c:85:21:
e3:dd:56:ec:d0:e7:00:74:10:5f:e1:67:b1:cc:f3:49:c6:b5:
e6:54:8d:08:a3:4e:b3:2e:2e:09:51:26:7e:79:dd:79:b5:91:
da:1f:19:7e:02:67:44:a1:b6:c1:c0:74:fe:86:cf:2e:4a:f6:
99:f3:85:21:bb:39:a3:e7:c1:57:3e:4b:ec:e4:f2:87:55:dc:
c2:73:1b:3d:65:41:fa:31:82:8b:ad:ab:0b:d6:b7:a1:03:cf:
95:de:3d:b8:a6:f0:c3:db:da:49:a2:53:86:f3:cc:44:8a:53:
85:9a:75:ac:6a:b4:0f:22:62:49:f8:f6:73:6a:be:34:a0:99:
08:e4:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:34:02 2026 by rpki-client