Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: omjGpTKdL+AVKOs5Yrdyw1hsGUTL7WHGcLk8bi+Rido=
Subject key identifier: AD:E6:C0:1D:7F:09:0A:67:4B:74:DD:09:A1:8A:ED:65:DF:27:63:1D
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 019FAA873DCCD0CBA04FCD6DE660BF4125C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 0789
Signing time: Tue 28 Jul 2026 21:00:17 +0000
Manifest this update: Tue 28 Jul 2026 21:00:17 +0000
Manifest next update: Wed 29 Jul 2026 21:00:17 +0000
Files and hashes: 1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: m5SIEkiscKu5aCZVQRZ8h/jNUtzVttPL/NupMZQbqBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:3d:cc:d0:cb:a0:4f:cd:6d:e6:60:bf:41:25:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Jul 28 21:00:17 2026 GMT
Not After : Jul 29 21:00:17 2026 GMT
Subject: CN=ade6c01d7f090a674b74dd09a18aed65df27631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:b9:98:8a:88:08:0c:58:eb:a5:16:15:a9:
1e:8d:fc:6c:ea:d8:b8:0b:7a:f2:68:76:06:4b:ab:
a3:38:17:ab:26:54:c2:01:f6:54:08:38:ad:dc:fa:
71:ac:2d:73:c3:00:bd:58:38:53:39:e5:42:27:4f:
74:7c:dd:29:13:68:dd:4e:15:44:b5:b3:15:03:aa:
80:87:ac:7c:2e:18:a2:a6:90:e3:da:45:a8:7a:bd:
46:3e:0f:8e:e4:ba:3e:00:b0:2c:d7:69:59:1f:be:
2f:4a:7a:40:2f:2b:25:51:a8:1f:2c:a4:ad:b3:0a:
40:57:b1:1a:9f:d4:32:33:fa:02:01:d8:93:1d:c7:
f4:e8:b9:19:79:b0:4e:d6:c1:79:f2:4f:0f:a1:ec:
65:49:de:e3:73:e3:b7:c5:06:17:78:4c:76:cc:4e:
b5:3b:16:63:d6:90:1e:d6:08:d6:08:78:bf:3c:a6:
e0:bf:d1:98:f5:3f:96:1b:7e:c3:54:94:35:52:e3:
79:18:92:fc:3c:25:89:e6:db:77:52:90:d5:66:ae:
e2:69:89:0f:8c:ea:cf:c0:3b:23:1b:82:32:41:7c:
ca:48:14:66:9d:e1:a4:db:96:c9:c3:5e:c2:7c:52:
75:3e:0b:3d:b8:5b:12:8a:9e:35:46:b0:09:8b:48:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E6:C0:1D:7F:09:0A:67:4B:74:DD:09:A1:8A:ED:65:DF:27:63:1D
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:65:16:03:0b:29:1f:a2:61:f1:84:8c:fa:61:71:b2:87:35:
4d:15:6b:48:a5:8e:a5:9d:17:5b:4a:03:b8:7c:91:6a:e7:ba:
bd:07:34:a8:b8:3a:7a:e4:db:81:b2:c8:cd:df:f3:4e:b8:69:
3e:5f:59:4a:8f:2c:61:dd:7b:d2:51:6b:68:51:01:99:75:cd:
7c:29:4b:21:6d:d2:a8:b7:f7:f5:ea:71:46:a3:36:98:2f:c1:
ce:c8:be:7e:68:a9:a7:24:e8:69:a8:eb:11:87:e6:c9:a3:99:
95:55:c1:3e:c9:17:69:90:2a:d6:b6:df:ce:77:10:ba:b5:68:
dc:14:ef:ae:96:32:a3:23:93:7c:ca:de:33:63:32:b7:e6:cc:
ca:a6:56:11:a3:6b:f7:89:72:59:30:80:4f:c6:f8:ff:7d:92:
9b:c0:8a:c4:5f:bd:da:21:3d:f3:9a:65:54:0a:6c:3a:ac:0c:
7e:3b:2f:9c:56:1e:8d:ce:58:5c:97:d9:c6:8b:c2:45:e8:39:
f5:2e:ec:e9:bc:63:25:45:c9:79:fc:c8:3c:53:30:c4:23:2a:
d1:43:53:06:ff:71:f9:c9:05:5c:d3:95:92:23:9e:16:e5:04:
e5:76:0e:4c:c6:41:ab:22:ba:bf:cf:3c:a2:67:bb:14:6e:80:
0b:01:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:32:35 2026 by rpki-client