Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
File: vQQTxuRIJSdlFDEhETiDjhM4VN4.mft (raw, json)
Hash identifier: bQvHu+SIPXPNMo4PA26TdUOqLLZ9yGfaIgfO/uDz2bY=
Subject key identifier: 25:C0:65:98:CD:87:0A:B7:26:24:12:F8:11:47:AB:9E:09:29:F0:01
Authority key identifier: BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
Certificate issuer: /CN=bd0413c6e4482527651431211138838e133854de
Certificate serial: 019FA7BD8437F69E3F3C35AFDA225CC0CA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
Manifest number: 016E
Signing time: Tue 28 Jul 2026 08:00:42 +0000
Manifest this update: Tue 28 Jul 2026 08:00:42 +0000
Manifest next update: Wed 29 Jul 2026 08:00:42 +0000
Files and hashes: 1: 1-lZlBceiWN8AElt1JnRsYUpL4tI.asa (hash: NCx5EFF8jGh46YgHJCKJlu5m+0OH02OtZU9OFQz+cKw=)
2: K5nTI3TLRfGi_oGQbxYTxF2eB7Y.roa (hash: 5nCS/Mov0JNCgcR42UHn2L1io6GH6DMm8igK0e3XvY4=)
3: vQQTxuRIJSdlFDEhETiDjhM4VN4.crl (hash: /of/d1TX83bQbkYjwlQUy2k6JzoY27eAzclYBgBDoLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:84:37:f6:9e:3f:3c:35:af:da:22:5c:c0:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd0413c6e4482527651431211138838e133854de
Validity
Not Before: Jul 28 08:00:42 2026 GMT
Not After : Jul 29 08:00:42 2026 GMT
Subject: CN=25c06598cd870ab7262412f81147ab9e0929f001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:46:8a:01:ea:7e:5a:ab:22:55:54:47:ce:
d4:7f:b2:98:da:21:45:dd:84:f7:f2:df:d0:7d:36:
a2:e9:9c:5a:19:55:a2:5e:96:51:80:69:7e:42:08:
91:a8:44:c6:67:64:f6:1b:1a:34:bd:69:d9:30:52:
e1:da:5f:28:17:c7:d5:72:1c:e7:2d:e4:f7:df:7b:
9a:dc:65:44:c9:18:da:d3:6e:3b:13:eb:2f:a8:58:
84:d0:61:fb:4c:10:5f:d6:a3:8f:1f:7f:62:8c:0e:
9b:4a:95:26:07:e8:73:9a:74:6c:e3:32:16:db:a3:
b0:b4:55:a4:5d:f5:68:a5:e4:71:53:e1:62:d2:01:
ba:11:04:b6:a9:91:7d:76:92:1e:74:58:b3:d1:75:
a2:1d:2e:53:3b:62:73:77:fb:56:2a:9c:1d:0a:ca:
ec:92:a7:86:42:e9:4c:4a:bf:7a:e4:fc:71:00:87:
0f:7a:24:26:e0:a5:b5:b1:97:88:7c:69:03:e1:f0:
f9:a0:f4:5e:11:92:cb:31:00:07:65:c1:cb:12:78:
04:c3:6f:bc:e9:22:a2:68:ed:a9:b1:d4:4c:83:b6:
c2:b9:55:a5:d7:80:0e:d9:b8:08:b9:f6:be:af:1c:
24:00:38:91:e5:92:ed:5b:a3:8d:36:bb:e8:66:46:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:65:98:CD:87:0A:B7:26:24:12:F8:11:47:AB:9E:09:29:F0:01
X509v3 Authority Key Identifier:
keyid:BD:04:13:C6:E4:48:25:27:65:14:31:21:11:38:83:8E:13:38:54:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQQTxuRIJSdlFDEhETiDjhM4VN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/90a34c-db2f-4096-8b36-e9b1ccf317bb/1/vQQTxuRIJSdlFDEhETiDjhM4VN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5e:98:65:34:33:3a:86:0c:51:a5:c1:32:52:31:08:4f:40:
06:10:27:fd:57:0e:8e:6e:e2:be:1e:5e:b0:3e:b0:41:8a:33:
2a:97:54:ca:15:19:3b:ab:62:87:a3:6b:17:4b:11:e7:f1:53:
7c:cf:ef:80:b9:54:eb:82:6b:69:5a:9e:00:29:93:d6:9d:d4:
1f:30:14:d5:76:f3:8f:32:0f:41:37:19:9b:b9:ca:f5:c9:0e:
b0:61:e0:7e:cc:4f:5b:8c:2b:17:29:07:ee:d3:6d:ea:ca:03:
ec:05:53:94:d4:47:fd:40:56:9d:1e:68:12:53:2b:ed:46:94:
0a:90:d3:8f:ba:60:c9:d1:5f:99:8a:d0:49:54:cc:d4:ec:24:
b9:3b:92:82:74:fb:6f:d8:1d:84:c7:a1:7a:33:7d:ec:58:76:
c6:86:68:c5:ae:92:ac:44:0f:c9:0d:5d:f0:e5:cd:df:ff:b2:
20:d2:fd:dc:82:91:d5:8d:00:e2:1a:55:aa:9f:f3:43:39:6b:
eb:c9:06:63:a3:49:1c:ba:0e:14:ff:31:59:95:c9:44:49:13:
ce:ed:23:ed:c2:a1:3e:73:38:ed:01:b6:e6:a3:60:ea:84:65:
4d:54:be:5e:5d:7d:83:6b:0e:da:31:c0:47:70:bf:92:b9:1e:
f7:d8:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:29 2026 by rpki-client