Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: qRMS1mR/yydntNwlDCMXdTmzr+WBo34st1izI+YRqkY=
Subject key identifier: 41:14:90:02:1F:07:A1:E1:D9:07:57:F6:28:3F:EB:06:51:DF:A3:FF
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019FAB63E2C43B638D77DFEBC5C8466F4F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0DD5
Signing time: Wed 29 Jul 2026 01:01:17 +0000
Manifest this update: Wed 29 Jul 2026 01:01:17 +0000
Manifest next update: Thu 30 Jul 2026 01:01:17 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: Q51E1biFaCF7zjtBaxwQGNbM34jod6owqxJOol42NxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:e2:c4:3b:63:8d:77:df:eb:c5:c8:46:6f:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jul 29 01:01:17 2026 GMT
Not After : Jul 30 01:01:17 2026 GMT
Subject: CN=411490021f07a1e1d90757f6283feb0651dfa3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:d7:a9:fe:e1:74:9f:90:1f:c0:54:5b:da:
47:68:fa:59:54:4d:50:ec:61:0c:84:f5:1e:4f:90:
89:f9:fb:56:3b:44:06:80:65:ee:15:ab:75:40:bf:
78:eb:67:20:c4:85:1b:02:51:5d:4c:e6:82:83:2d:
19:60:5e:40:b3:b4:fa:1b:f4:65:e3:eb:71:dc:2f:
ba:0e:0a:da:18:b4:09:60:6f:06:1e:07:b8:23:ae:
cd:c8:2b:3c:99:0b:ce:5c:2a:24:4e:3a:fd:69:bf:
22:1c:76:7c:fd:a7:0d:79:db:19:8a:7e:8d:e2:23:
70:25:61:4c:d3:03:d8:ac:8f:ec:42:45:8b:9d:04:
17:cb:5b:40:bb:fc:c5:65:3a:6a:45:d3:48:bd:47:
0b:73:5f:90:f9:ed:e4:da:12:b4:1a:41:e4:dd:ea:
20:22:bb:ad:ef:e5:8d:74:c2:a9:74:0c:dc:62:20:
61:35:6e:5d:0a:d9:ae:a4:f9:a6:8c:af:7d:55:33:
1d:d6:02:1e:9e:57:96:10:31:a6:f6:07:e8:7f:8d:
26:f5:0f:7d:0a:bf:d2:bb:61:bb:c3:27:c7:9c:f5:
6d:28:a7:32:a8:b2:a2:a7:96:be:14:f2:77:c2:d5:
cb:04:dd:f6:a9:bc:99:42:47:dc:93:26:aa:c7:26:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:90:02:1F:07:A1:E1:D9:07:57:F6:28:3F:EB:06:51:DF:A3:FF
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:a3:a0:36:22:47:88:2c:29:a2:94:f3:5b:a7:1c:f7:e3:
44:34:4f:8a:03:b5:d3:2b:0f:df:5d:32:9b:2e:0e:2c:df:e3:
1b:76:54:b2:df:58:42:27:ba:ea:db:9e:2c:30:e9:2a:c3:94:
fa:13:b9:e2:a0:5d:81:86:4b:56:ba:a4:f8:ad:b1:bf:e0:17:
2e:70:57:c5:66:c4:a6:8d:cc:f1:c5:e5:20:7d:cf:39:86:4e:
2d:3e:a7:9d:db:83:06:31:80:7f:64:0a:6c:38:be:28:d5:d3:
0d:1e:f8:1a:7c:42:66:3c:c6:00:55:e1:fb:9b:11:34:90:e8:
49:77:d3:9b:70:f7:e1:de:64:a9:37:ad:4a:83:7a:01:34:dd:
61:92:14:a1:2f:fc:fb:95:e0:cc:65:90:91:a4:f8:95:b9:18:
de:f3:e0:1b:da:8e:a7:88:3d:c7:92:ba:b8:2a:25:20:80:73:
f6:16:89:85:70:77:42:7e:72:87:3b:57:3a:9d:40:fa:3a:60:
2f:01:dc:89:5b:f2:05:b6:56:c8:66:d4:b6:c1:5b:80:89:f0:
b0:05:0e:1c:cd:99:b7:c4:62:f4:75:5f:ea:74:5a:4f:75:59:
d7:3f:b5:aa:79:80:a6:5b:15:a6:36:33:59:f2:a8:d4:4a:22:
39:0e:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:46 2026 by rpki-client