Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
File: bVhePZVIlPD5w42RWoYnGlJ8eE0.mft (raw, json)
Hash identifier: bAGiGTyGm9NVipC8jSNaQBESiEVGV1xS36PKVUcZQAI=
Subject key identifier: E6:77:DD:61:A9:20:B2:7D:9F:7B:CD:F2:77:01:A0:93:D9:4C:67:DC
Authority key identifier: 6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
Certificate issuer: /CN=6d585e3d954894f0f9c38d915a86271a527c784d
Certificate serial: 019FAA87CE224C5754E363200217282BAA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:54 +0000
Manifest this update: Tue 28 Jul 2026 21:00:54 +0000
Manifest next update: Wed 29 Jul 2026 21:00:54 +0000
Files and hashes: 1: bD6xx0TpgrnIB9ZvoVqPvC8PyRc.roa (hash: QaBar+n/MedavkTYqGBlNpBfEOyuab6hMYyoPnfKNHc=)
2: bVhePZVIlPD5w42RWoYnGlJ8eE0.crl (hash: Biwdm9h/je/ZV1+qZkGJUyEDHtWl2kIQirx+uL5RlTs=)
3: dLMRQr4uK0MnxRDLYTdzEz1CvR8.roa (hash: fblIO6CiiR4a6/6Bya7xSY9w9n4FH+8mcCxhUe8CHEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ce:22:4c:57:54:e3:63:20:02:17:28:2b:aa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d585e3d954894f0f9c38d915a86271a527c784d
Validity
Not Before: Jul 28 21:00:54 2026 GMT
Not After : Jul 29 21:00:54 2026 GMT
Subject: CN=e677dd61a920b27d9f7bcdf27701a093d94c67dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:e8:90:fe:f3:8f:22:2a:55:ac:bf:f5:8c:
a3:66:27:83:91:02:c2:83:1a:b7:d0:ac:39:81:57:
f9:e4:44:86:23:65:a9:83:8e:ff:f1:52:7c:3f:22:
4d:e2:26:bd:6c:00:da:fa:d4:45:82:b7:bc:05:0a:
d1:bf:65:d9:2b:ed:f1:e6:7c:10:bd:3c:50:93:9f:
db:be:37:cf:31:72:dc:9b:e1:ea:0e:ef:4b:51:8a:
f5:bd:55:d1:d2:77:80:99:a0:72:9e:e1:0b:a5:0f:
b5:e2:81:e9:36:6e:1c:71:2c:29:69:14:19:dd:ce:
0d:86:c9:3f:76:e6:87:c8:af:84:43:ff:fd:2a:ec:
00:c4:2e:ae:71:a3:5c:b4:a1:0b:be:a8:45:4f:f0:
c1:16:32:dc:66:eb:a2:47:5d:1a:89:ef:58:a7:77:
de:73:e1:00:6a:44:28:71:55:4d:c7:24:1a:3d:17:
56:30:87:b0:dc:56:a1:fb:95:48:68:20:df:9d:7b:
26:ed:f5:4d:1c:af:e2:40:51:91:b6:48:3a:c5:27:
41:ac:5a:27:6d:5d:ff:63:3c:11:90:55:93:88:df:
06:66:eb:a3:26:3f:dd:f1:be:01:db:2e:1c:ec:15:
01:a5:1b:2b:98:be:18:be:a9:a1:77:b1:a9:57:a7:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:77:DD:61:A9:20:B2:7D:9F:7B:CD:F2:77:01:A0:93:D9:4C:67:DC
X509v3 Authority Key Identifier:
keyid:6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:30:a9:a2:64:f0:ac:f9:fd:f2:b7:75:06:9a:a5:70:9c:
1f:21:cd:b2:c9:3c:bd:99:c6:e6:e8:b1:33:93:13:3c:44:6b:
58:c9:fb:55:54:b8:5c:52:b4:18:4c:ab:5b:83:bb:c1:86:86:
ed:70:99:0f:da:2b:87:d6:09:14:54:3f:5b:6f:15:05:00:2f:
29:88:8f:53:1f:47:a5:8b:26:1e:61:99:1a:1d:9d:01:26:f7:
73:1e:e1:23:58:04:02:97:93:74:ce:41:c7:4a:94:80:4e:85:
3c:2c:5f:a6:03:3a:ba:c5:29:c6:a0:39:12:49:9d:31:c4:bb:
fe:d0:7f:02:77:e0:88:2d:f4:ea:64:f9:35:7e:bf:49:28:ab:
cf:ba:e9:25:af:a1:9c:7f:7d:81:f0:3f:3b:3c:87:66:a4:f6:
1e:ec:c0:1c:8e:b4:79:9e:61:b5:1a:60:70:37:7d:1e:59:45:
c5:a7:b2:f0:23:12:69:31:a7:7b:7c:46:e8:69:40:a1:9e:26:
0a:0e:e2:3a:21:26:b5:10:3e:f0:cd:2c:23:fb:f5:38:14:a9:
3a:c3:b3:97:fd:a9:9e:bf:25:58:cc:c9:39:ae:dc:68:81:1f:
53:56:94:37:71:ee:a6:8d:50:fe:45:43:a8:12:a9:92:52:f7:
09:8e:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:23:41 2026 by rpki-client