Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: hikNUNpZ9BUqdeecIpqSMFMLI4O3EYM++E+ApecZjGA=
Subject key identifier: C4:5B:ED:70:51:E6:EA:5E:D3:D3:0D:D5:C0:E1:E5:D4:44:2A:B3:B6
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 019FAAF578560CD63F8D08DF4217FEEDBA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0CFE
Signing time: Tue 28 Jul 2026 23:00:41 +0000
Manifest this update: Tue 28 Jul 2026 23:00:41 +0000
Manifest next update: Wed 29 Jul 2026 23:00:41 +0000
Files and hashes: 1: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (hash: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: lIE6Inh9xqBNlcgS0wNSP2lzBikACN5d/Dm+nGPEewI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:78:56:0c:d6:3f:8d:08:df:42:17:fe:ed:ba:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Jul 28 23:00:41 2026 GMT
Not After : Jul 29 23:00:41 2026 GMT
Subject: CN=c45bed7051e6ea5ed3d30dd5c0e1e5d4442ab3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:f2:1d:14:71:e6:aa:c7:2a:30:a0:11:33:
08:29:0d:6f:2a:f6:4e:d5:a4:fd:ff:64:2f:0e:57:
b4:65:b5:87:1c:97:4c:28:71:32:8a:52:bf:3f:86:
68:12:40:6a:2d:8b:48:3c:e2:fe:ea:ad:5e:34:3c:
fa:55:6a:55:8b:d5:c6:84:cb:21:2f:bc:b4:86:c7:
32:00:fc:36:2e:7b:ee:a7:f6:c5:a6:d4:32:f8:6b:
e1:4f:18:40:60:d3:c0:26:d7:89:d2:33:58:9d:0d:
4c:45:51:d0:80:10:fd:4e:1e:5b:cc:ac:d0:6e:0c:
7b:3a:f6:95:b0:53:8b:e6:d7:51:26:5a:ac:58:3c:
d8:b2:bc:d5:60:75:c3:b8:9d:da:b4:ec:3e:07:25:
29:81:ea:94:ae:e2:31:e5:f4:5d:08:83:5f:2d:80:
97:9a:d0:32:19:59:e0:de:e5:d0:c3:58:3c:b2:23:
9f:14:b0:35:a0:fd:a3:8d:f7:0c:dc:80:11:24:63:
ea:ab:ba:f9:4b:5d:ca:f0:67:00:cb:fe:f5:74:6a:
5b:6e:36:85:1a:51:80:95:92:b0:ba:d9:eb:9f:b3:
21:58:f6:44:4d:80:68:5d:ea:61:81:a3:35:b5:e1:
d7:50:62:3c:e9:8a:8c:b6:80:cf:04:39:2a:3d:6b:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:ED:70:51:E6:EA:5E:D3:D3:0D:D5:C0:E1:E5:D4:44:2A:B3:B6
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f8:de:90:87:17:cf:55:1e:e2:54:0d:60:b8:11:59:40:65:
b8:f1:92:4e:b5:38:9d:71:04:7d:0f:6e:b8:1a:fc:92:42:e7:
a7:28:c5:e8:fd:52:20:34:3e:95:31:47:5d:b8:67:30:e4:ff:
ed:54:35:7f:cb:59:e6:48:a5:26:10:d9:69:f9:48:4a:b8:81:
ae:b0:bb:7a:9f:e5:b3:42:07:5d:54:41:bb:87:f6:24:6f:37:
0a:3b:f0:b4:af:dd:79:40:80:42:11:05:f7:7e:e9:a1:81:a0:
43:c4:f7:99:42:e5:47:9b:c1:56:29:48:01:85:a5:71:e3:0b:
71:41:2e:03:a0:e6:e1:ef:b8:1b:70:24:8e:0f:0d:5c:6e:96:
99:0d:ec:3c:49:f0:d2:0c:78:a8:dc:27:f8:be:f0:9a:db:e2:
5a:49:66:f2:d0:b8:8f:be:27:52:f4:b6:ff:d6:a9:05:4a:9c:
9c:85:c5:8f:87:d5:f0:96:46:2f:11:72:08:73:ce:4c:7c:a4:
23:6f:9a:91:bc:0f:ae:9e:72:f2:53:6c:4b:6b:fd:7a:b0:eb:
40:72:f0:71:7c:df:19:17:8e:09:e1:0a:05:1d:30:38:1b:0c:
86:4f:ef:5a:18:98:a3:23:d2:97:fb:3e:0f:93:59:58:12:f5:
d1:84:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:51 2026 by rpki-client