Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: t0TtMBxor8Mqgwai6aXmXiY5pUVmo8lGyL15j7Y1CGU=
Subject key identifier: 2F:62:E0:4C:6C:91:C3:7F:6F:38:63:DB:B2:03:E8:24:88:3C:8D:5E
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019FABD0E53B558918BD3244DCD53142ED78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 03:00:21 +0000
Manifest this update: Wed 29 Jul 2026 03:00:21 +0000
Manifest next update: Thu 30 Jul 2026 03:00:21 +0000
Files and hashes: 1: VJGlReXG5W-ZR47PVyvqWZdf0xI.roa (hash: wBxca4kCkRMoBMcjG9PQpXCJfip6KTb7TlGSlembBvo=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: 6vYXGvSfkip+umyZqVCfqisS6eO2PU2T0cXD9Zzjuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:e5:3b:55:89:18:bd:32:44:dc:d5:31:42:ed:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Jul 29 03:00:21 2026 GMT
Not After : Jul 30 03:00:21 2026 GMT
Subject: CN=2f62e04c6c91c37f6f3863dbb203e824883c8d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:28:19:4f:e2:d5:ef:53:bc:ff:bf:e2:1d:
85:6c:50:a9:44:c8:11:13:13:43:a6:2d:c8:56:bc:
e9:53:d3:1a:2d:9a:7a:f1:3f:18:62:bf:53:14:59:
1b:78:20:c8:99:99:29:5d:10:03:11:21:1f:87:7a:
f7:6f:0b:f8:1c:36:11:72:20:bc:f3:cc:13:e2:00:
ba:84:b9:6e:ce:af:4c:26:97:66:95:84:de:76:ba:
e3:cb:bb:43:6a:84:0c:08:f9:f8:ec:82:8a:bf:57:
9a:bd:df:3d:8d:73:23:db:6b:dd:6e:33:e1:bf:57:
4e:f9:0d:5b:92:fc:f8:92:06:2d:8a:5c:42:19:08:
97:c1:e6:b5:dc:62:48:b1:88:26:67:20:e0:bc:9b:
90:63:26:0a:d4:c3:53:88:af:a2:18:90:a9:ae:b6:
73:d6:32:f0:de:f0:78:0b:88:49:de:a8:25:58:c4:
33:cc:e2:de:d6:40:56:4d:8c:35:69:a8:72:7a:7f:
ec:fb:84:9d:ed:ae:86:9d:c2:4c:b4:07:9e:5d:d8:
e6:5a:a8:79:d4:48:f9:f4:d3:6e:72:be:ee:7a:25:
bb:cf:af:33:dc:f4:69:31:e2:2e:7d:4a:c4:66:b5:
ae:c6:9a:5f:62:bb:8e:9e:db:f8:dd:2c:48:8b:f5:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:62:E0:4C:6C:91:C3:7F:6F:38:63:DB:B2:03:E8:24:88:3C:8D:5E
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f0:bb:eb:ed:67:10:b8:d7:05:92:03:12:25:b9:e0:7c:59:
95:bf:6d:54:63:4f:b8:6e:2f:1d:18:eb:42:94:21:72:3b:30:
3d:c5:11:bb:84:24:18:0e:d6:63:6e:4f:ae:36:12:35:bb:f8:
ec:7b:8a:c0:e3:e9:02:9e:71:72:18:a6:20:a9:9e:a0:8b:11:
37:aa:f0:3c:74:e9:09:e0:ff:7f:7b:e6:fe:07:f4:0b:a1:cb:
78:3f:42:d8:68:81:59:7d:4e:79:cb:03:5d:6f:22:68:b7:1e:
55:75:cf:c3:bf:af:a3:9c:1e:93:9a:c9:d2:1c:9e:26:d6:65:
82:8a:51:47:f1:7f:15:ff:45:f4:ba:79:3f:a0:3b:1d:95:64:
92:2f:73:1f:c3:d3:3c:00:3c:e2:58:20:66:f6:9a:24:13:bc:
ca:6a:aa:01:5d:74:f1:11:b5:7e:5e:10:fa:dd:b7:8d:d0:c4:
8e:b3:61:97:f4:b8:6e:a5:fc:be:17:23:1f:7f:e7:45:d3:63:
50:03:92:5b:10:12:7e:b6:68:4e:db:12:35:ab:ba:e2:97:7c:
66:02:4b:ce:da:09:b7:20:07:5a:8d:c8:9f:a1:54:a8:9b:33:
49:10:13:30:d7:31:d2:0b:8c:a2:47:88:46:64:01:56:88:a0:
c9:d3:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:05 2026 by rpki-client