Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: tHyGZtCVRbVfyoXSEX2YPyoeCUuvrplJynV2R9JKw7w=
Subject key identifier: 92:F3:9C:67:EF:F1:C2:AE:7D:53:A6:84:A2:FE:D5:8B:85:ED:DD:4A
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019FAC3F4964F152ACAA8FD57DC88606891B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0C20
Signing time: Wed 29 Jul 2026 05:00:56 +0000
Manifest this update: Wed 29 Jul 2026 05:00:56 +0000
Manifest next update: Thu 30 Jul 2026 05:00:56 +0000
Files and hashes: 1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
4: eD-7vvIC4yFMSd8wn0aVmNn3KWc.roa (hash: YpQ2rQGoMH7sfcOIXaqt8pDd9AF0hUrRR4wRU/hj1hU=)
5: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: 77UUgMbd1/PWp2E44n3JCDuo/Fk868YYg9Wn9/cOD7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:49:64:f1:52:ac:aa:8f:d5:7d:c8:86:06:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jul 29 05:00:56 2026 GMT
Not After : Jul 30 05:00:56 2026 GMT
Subject: CN=92f39c67eff1c2ae7d53a684a2fed58b85eddd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:2a:17:db:dc:e8:e7:88:ed:20:80:39:96:
0e:b3:5e:37:d9:b3:67:68:9d:d6:be:95:da:c1:a4:
83:6f:df:a4:51:a3:19:30:61:51:db:14:42:bc:6a:
c1:4f:39:16:5a:5b:8b:b5:e8:9d:38:6f:a5:a1:d4:
7a:5c:f4:7c:3a:47:a5:47:51:f2:f4:50:68:61:ea:
84:2e:3e:0c:61:8e:45:9f:ad:ed:3b:2a:c6:e8:6d:
19:9c:a4:46:0c:c4:2c:1e:d3:9e:4d:ea:2f:1e:f8:
e8:ff:2b:2c:7e:ac:0a:20:b0:89:1a:1d:a6:22:36:
78:50:58:44:7b:af:20:2e:6a:23:53:c4:65:60:27:
ba:55:d5:07:11:cd:97:e2:95:4c:a6:f1:30:3d:06:
a0:21:ac:05:96:6f:c0:ea:e6:9e:ee:29:9a:5a:37:
b3:2e:a7:65:c1:71:f0:72:bf:da:22:1a:9c:e2:23:
b5:79:d2:55:cf:a1:6a:38:79:33:d1:f0:e7:e5:b4:
fe:71:5b:c3:91:ac:f3:57:94:09:68:6f:e4:6b:31:
3a:42:cf:da:fa:ea:b0:eb:39:f9:96:be:1d:fe:21:
e8:a5:c1:da:a6:59:1f:e6:b8:45:93:59:36:a5:64:
83:1a:fd:f7:20:13:29:dd:24:c5:af:35:98:02:2e:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:9C:67:EF:F1:C2:AE:7D:53:A6:84:A2:FE:D5:8B:85:ED:DD:4A
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:98:4c:3c:31:15:84:7b:b7:5c:09:e8:b3:77:bd:49:24:0d:
b4:b0:04:89:43:d1:4f:3c:80:0a:ed:cc:ac:1a:b0:71:99:a1:
5d:3e:4f:cf:bb:19:46:60:c8:68:a0:8d:07:31:49:38:8d:1d:
1f:5b:ee:f8:af:4d:8c:c1:8d:64:eb:cd:2a:51:1d:a7:64:db:
85:87:58:e8:36:3c:02:46:7f:11:27:c4:3d:d8:ba:a1:89:db:
a9:a5:6d:c0:16:0c:cc:b7:d3:0d:a1:58:05:67:fa:17:81:f9:
65:b3:2e:90:ae:0a:d3:be:27:40:80:c4:2c:9a:ef:d0:bf:13:
a1:90:05:44:ff:d7:df:43:af:83:2f:4a:7e:f6:bd:c4:46:cb:
4f:37:64:ea:4a:55:13:25:6e:4d:49:c9:53:78:ce:54:9a:fb:
a0:8d:f0:80:78:01:87:46:fb:d5:46:a7:82:a1:28:7a:84:8e:
e3:e8:13:8b:cd:9d:29:67:83:bf:b4:40:2a:b4:6d:60:5b:d6:
e4:12:fd:06:6b:49:6d:d3:38:24:86:ab:d8:d8:2b:60:24:3b:
1e:ce:d7:07:0d:cf:9e:44:25:e7:5d:8e:4e:aa:c5:3f:88:94:
52:ea:c2:ea:dc:63:12:ff:51:9f:e7:6d:d3:68:42:5a:ef:a4:
1c:73:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:43 2026 by rpki-client