Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: b5Ajad9Ps8Io10S9uoj/xEq6B/zzGdIOMrzDyqkolM4=
Subject key identifier: 88:C2:6C:F5:64:0E:F0:E6:35:23:77:BC:BE:8A:F2:95:8D:84:9E:B5
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019FAA88957328146D905B72A30C18302AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0E60
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: tFhUOj3VVmsocaicjjsJiuRGwpLrfXfPgTCgrqA+duA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:95:73:28:14:6d:90:5b:72:a3:0c:18:30:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=88c26cf5640ef0e6352377bcbe8af2958d849eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:92:ae:22:b0:3d:9f:03:0d:9f:4c:81:41:
31:ac:ec:f3:d1:2f:b5:fe:ee:13:72:83:75:77:80:
2a:48:50:f0:e2:88:01:bc:fe:2e:ff:e4:61:ef:27:
cb:ed:e0:8d:3b:e9:6f:7a:a8:59:e2:67:bd:8a:31:
8b:64:9f:eb:b3:e2:3a:1c:55:54:c3:80:01:e7:4c:
fe:18:cd:84:66:7c:8a:6d:eb:cd:c6:2f:ce:51:91:
1f:91:02:52:2b:4b:13:2d:e1:3e:e7:df:63:23:75:
93:c0:6f:2b:5a:7a:9e:63:c1:70:69:c0:e0:42:96:
9f:b0:51:88:ec:e4:0c:81:65:5d:2b:93:b5:c1:1c:
78:40:a6:79:14:8b:b7:e6:56:f0:27:20:eb:c6:e8:
09:7f:e0:e5:b7:09:ff:2e:f4:f4:16:c3:6e:44:e5:
fb:67:1c:54:32:bc:9c:ef:22:ee:a0:ac:53:07:01:
ef:8c:23:a0:87:cf:d2:cd:a5:87:c8:b5:9a:8b:fc:
c7:a0:3c:66:f2:53:b5:6a:dd:42:5f:6f:d4:9c:20:
39:a9:d5:f2:95:43:84:65:73:1e:aa:73:1f:b3:d0:
54:b6:98:37:db:af:a6:49:8e:1f:d2:78:17:67:79:
69:6d:1a:1c:b1:3a:ab:7e:c3:eb:93:7e:cc:e5:07:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:6C:F5:64:0E:F0:E6:35:23:77:BC:BE:8A:F2:95:8D:84:9E:B5
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f3:85:c2:52:c4:01:ef:f8:b2:0f:81:54:a5:cc:17:f8:bf:
77:c2:92:c7:c0:f9:3b:f7:aa:80:46:36:e9:a8:a1:dd:88:44:
4e:bc:d6:20:d4:d0:98:d6:d9:1c:be:17:f0:43:0b:0c:2f:b5:
b3:b8:0a:5e:e6:c9:e1:bf:a8:84:a7:04:76:98:4a:2f:fb:c3:
df:91:51:f1:8a:3d:82:05:e9:b3:68:62:80:80:77:b5:2a:13:
7f:22:7a:9f:da:a2:8f:af:7a:a1:d1:fa:91:a2:55:b2:b3:3f:
f4:b2:54:73:f0:ae:85:a9:10:98:23:94:81:ae:cd:1e:0e:48:
ad:ea:99:60:ed:3c:7a:12:80:70:29:a5:37:24:88:98:a2:bd:
f2:e2:70:e1:85:d0:52:95:eb:32:d8:86:32:df:47:a3:97:64:
6f:01:9d:fd:8f:21:31:9d:87:22:90:e7:83:b0:0d:cf:de:c6:
1a:35:c4:5b:37:d7:ec:85:0b:89:d0:93:cf:d1:07:f2:63:1c:
02:d8:51:99:2f:1c:c3:c7:66:40:5e:de:57:91:3d:a0:d1:4f:
82:c6:27:1b:f6:ec:d5:ce:dd:81:7b:46:f8:32:a7:13:81:4b:
f1:11:39:b5:52:35:32:b6:bf:dc:bc:e4:56:4b:e8:98:7d:1a:
3d:77:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:33 2026 by rpki-client