Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: n8sqG5s5jpnxurzzPmE/vERanv3H9QGBO9OI+qrwpgQ=
Subject key identifier: 4C:BF:5A:68:19:BD:5F:3F:FA:45:ED:9C:68:2B:9C:39:72:DA:EC:4A
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019FACACE7A04A9D19D70075D91EEACE6703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 07:00:40 +0000
Manifest this update: Wed 29 Jul 2026 07:00:40 +0000
Manifest next update: Thu 30 Jul 2026 07:00:40 +0000
Files and hashes: 1: PSVFcWDsclvNsUoU022_OpYiWTo.roa (hash: aQdUeRuBKi+rDHfkrmS1dmqV6ZktJA8BSCadqiZ5eyA=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: DQR7ib97axPF1GHu5tBKGwUGAG1xaVdzmQ55Fym2ZsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:e7:a0:4a:9d:19:d7:00:75:d9:1e:ea:ce:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Jul 29 07:00:40 2026 GMT
Not After : Jul 30 07:00:40 2026 GMT
Subject: CN=4cbf5a6819bd5f3ffa45ed9c682b9c3972daec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:b0:d1:c3:bd:28:8b:85:4c:82:09:79:93:
0c:e0:c8:3d:e5:46:15:b9:78:bf:03:f2:7d:9f:3b:
01:5e:4b:19:85:bc:13:1d:4a:0c:d5:a7:81:d9:47:
5d:3e:e4:9f:d4:9f:d6:6a:eb:10:b4:25:50:8b:77:
f7:4b:e6:7f:26:f2:d0:63:62:f0:dc:67:db:9b:4c:
de:3a:29:20:c3:28:40:8f:dd:54:be:b1:16:1b:5f:
9a:9e:0c:de:bb:21:8b:39:5b:e8:ed:0e:e6:9b:6e:
19:d4:27:29:8a:75:1e:d6:ae:0d:8e:7d:a5:c0:1b:
54:05:3f:36:ac:e6:c5:15:d8:6e:bc:8e:a4:19:8e:
a3:66:c2:ca:47:01:25:1f:39:94:00:ff:1c:cf:ce:
3a:80:fa:77:90:dc:eb:bf:82:0d:0a:35:9b:89:26:
65:ee:4d:ba:2f:9e:ab:1b:57:0f:92:02:a0:71:51:
5b:b1:71:c2:ac:18:8c:c1:34:b4:3f:b3:ae:87:52:
6a:ef:a2:65:c3:3c:bc:66:e3:8d:59:2e:44:f4:4d:
dd:b5:60:3b:35:5a:ab:96:9e:56:b8:06:9c:0c:da:
81:e1:45:5a:b4:3c:ee:c3:47:58:a8:2d:6b:04:96:
06:36:38:4e:a0:f5:29:9f:93:ba:c6:c2:a7:13:db:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:5A:68:19:BD:5F:3F:FA:45:ED:9C:68:2B:9C:39:72:DA:EC:4A
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c3:13:4c:83:60:76:4f:bf:1f:d2:aa:58:73:46:07:ba:02:
1d:28:2a:02:83:8b:f1:b9:75:03:df:9f:41:59:a7:02:cd:58:
85:a5:69:a0:62:38:24:61:b2:64:f9:3a:28:bf:a7:cc:10:6d:
d7:c7:94:87:6f:d7:c1:ed:2d:48:8b:d2:23:db:25:0c:ac:b0:
9f:6d:6e:d7:08:bb:ee:11:c0:4d:76:12:a9:99:2a:b7:0f:23:
5d:9e:47:d0:c0:4e:17:6d:38:44:3e:29:a7:a9:1c:b6:7b:88:
80:1f:71:6d:43:f7:f7:3f:7d:93:fd:8c:66:aa:69:78:f2:54:
ea:47:f9:14:9b:e7:49:c1:a0:36:b6:97:38:65:dc:8f:bd:97:
d5:79:89:c6:d6:a4:1c:38:7d:ee:cd:da:8a:70:c5:c8:5d:36:
66:43:b0:78:8c:42:2d:6f:c0:9a:90:17:8c:d5:f9:df:b6:90:
59:1c:7f:f2:71:01:e8:df:b7:48:4a:dc:0b:f4:56:fa:23:00:
82:6f:2a:8c:20:95:bd:95:9a:00:3b:e1:ee:20:a3:a4:29:e1:
3c:7a:6e:9b:63:57:64:cc:87:51:19:2d:1e:61:83:d0:86:51:
5b:1d:73:2e:8c:f1:28:8b:2e:d0:d2:82:a2:b4:95:95:9b:b5:
b3:bb:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:36 2026 by rpki-client