Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier: hXTois1WxRULnP65HoqdlcHCgTUmQJH22Iash03j8jA=
Subject key identifier: 3D:3F:4F:C3:C2:56:04:2F:53:37:27:21:BE:84:49:58:65:A7:C3:E6
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial: 019FA93E044A2BB445F049F2B02D19B0CBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number: 0CA0
Signing time: Tue 28 Jul 2026 15:00:41 +0000
Manifest this update: Tue 28 Jul 2026 15:00:41 +0000
Manifest next update: Wed 29 Jul 2026 15:00:41 +0000
Files and hashes: 1: 3ch1Jb7sFGYOGbilPvREcxXxE6k.roa (hash: J6u00YHUjiuGwv/53UMv+yM4klhV4JggG1AUNdLNZVQ=)
2: mNC5GkRzpe0TcIftq03m_ZQlLiM.asa (hash: l/sJ49tKEXd94Ikw8096y/GdUHEWeA7yG1kPodLn6rw=)
3: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: uLD8NoU0sP+IfVmIWNN0y7Jf2Q5zhZXtUn9NTc8LbuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:04:4a:2b:b4:45:f0:49:f2:b0:2d:19:b0:cb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Validity
Not Before: Jul 28 15:00:41 2026 GMT
Not After : Jul 29 15:00:41 2026 GMT
Subject: CN=3d3f4fc3c256042f53372721be84495865a7c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:c1:12:bd:09:00:86:36:0f:96:87:34:dc:
9d:b8:a7:db:34:15:8a:7c:d7:e2:3e:af:08:83:0d:
06:e4:5c:89:5a:e8:39:9a:2e:48:f9:92:d9:18:22:
b9:52:73:3b:12:77:68:c6:f5:ac:19:b5:9c:1a:d8:
30:18:16:97:d5:f6:4f:6e:23:f5:6c:97:13:66:62:
6e:4c:10:b6:76:33:b9:d6:56:26:2a:44:86:5f:f4:
1b:c3:b9:ec:66:b9:db:b2:90:f2:a4:e7:7f:4b:15:
f1:eb:03:fd:b1:c8:f2:b9:13:91:dd:7e:03:d8:99:
14:5a:31:ff:b9:84:74:2c:08:47:ce:b8:0d:8c:e3:
a1:08:b5:cd:bf:e5:da:55:ee:12:8f:04:0d:cd:83:
16:fc:23:9a:38:87:01:bd:38:fc:11:2f:df:22:57:
cb:3d:0e:d6:5f:4b:c5:1e:b5:ec:5c:37:62:a5:bf:
57:a1:de:b5:70:32:d7:2b:a5:d9:70:74:56:22:58:
32:ce:fc:ff:09:39:4b:85:d7:6a:df:b3:89:a2:bb:
23:17:07:a5:0b:4b:a7:da:f7:80:cb:50:da:a2:f5:
41:57:f9:86:29:8e:c3:26:33:da:a8:66:4e:d1:d8:
5a:7d:38:93:b8:08:e4:2e:e0:29:20:9c:00:61:f5:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:4F:C3:C2:56:04:2F:53:37:27:21:BE:84:49:58:65:A7:C3:E6
X509v3 Authority Key Identifier:
keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a9:a6:61:97:ed:3d:c8:e6:46:25:75:bf:71:b0:48:a6:64:
41:ff:e5:73:b2:8b:3a:de:b5:b9:97:02:72:aa:ba:9e:98:78:
09:67:42:ea:57:97:a6:de:56:62:78:54:e1:7f:63:88:66:ae:
3c:d7:34:ca:c4:7c:ee:c1:85:7e:30:35:25:74:f0:67:73:63:
0d:61:5a:e9:e9:53:dd:fe:84:1c:7f:18:d7:8b:9f:31:5b:0c:
98:88:e5:30:c9:11:35:50:eb:a4:ac:e0:5a:f7:ba:dc:93:94:
e7:9d:c8:7b:26:9e:1a:51:35:20:dd:f7:9a:d8:e3:2c:30:dc:
76:ba:50:e6:de:46:7a:34:1b:56:bf:ae:1e:7a:b0:a2:b3:bc:
f7:06:30:e1:ba:98:29:3e:19:f3:b6:f1:75:ed:c1:64:7c:65:
fc:32:2e:77:e0:c7:7f:02:89:29:b8:9c:de:7b:08:10:e3:9a:
89:fe:30:56:f7:09:6d:e4:ca:62:fb:ae:ba:60:3f:88:06:0b:
23:56:b6:1b:ac:77:3c:c4:d9:25:9e:61:53:41:33:f2:c7:d9:
02:07:c2:32:c6:01:76:0b:c0:30:6a:48:47:68:db:ca:bf:50:
25:f3:3d:5d:fa:52:96:d2:a5:a5:c5:4e:f1:36:d0:47:8d:26:
bb:b2:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:56:27 2026 by rpki-client