
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
File: vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft (raw, json)
Hash identifier: dAUzfX8SBShzs2dA7HhqUQwp5kkwHEO27JJq7+E3y6Y=
Subject key identifier: 91:20:92:E2:9D:8E:9C:2E:50:1C:42:47:CF:E8:32:7B:07:B7:14:03
Authority key identifier: BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52
Certificate issuer: /CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
Certificate serial: 019FAA888F3C7968E1EE051169648A4D6923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
Manifest number: 0140
Signing time: Tue 28 Jul 2026 21:01:44 +0000
Manifest this update: Tue 28 Jul 2026 21:01:44 +0000
Manifest next update: Wed 29 Jul 2026 21:01:44 +0000
Files and hashes: 1: JhZMzH9twl8wNkeYev4LG3VPv2I.roa (hash: jdBJTvheHN0jaLshgZDbXGrYMtZxQytteuaj6IybSug=)
2: VjQjZjd8u0m638f09ekHhQd_-mM.roa (hash: zTHtgnTnSF7YEYTr+ZUE/h/cmSAdI4ibLvD59NKOvq4=)
3: aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa (hash: EB5XZLXbZe8cIE5ruaV3Aim0QvJLKlyaJyoooR5aR3Y=)
4: vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl (hash: eh7Mw1wZ+/2lq4dRYz2qXB8V+Puwvs/O7PEHDnBObAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8f:3c:79:68:e1:ee:05:11:69:64:8a:4d:69:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
Validity
Not Before: Jul 28 21:01:44 2026 GMT
Not After : Jul 29 21:01:44 2026 GMT
Subject: CN=912092e29d8e9c2e501c4247cfe8327b07b71403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:97:fc:1e:24:bc:0d:55:7f:c5:14:89:79:
e2:33:00:5d:29:54:37:b2:69:09:ad:34:bd:f6:83:
7e:74:23:f2:2a:d1:af:8b:25:5f:8b:b2:21:6e:eb:
36:d9:9b:8e:b6:46:52:6b:f9:12:84:22:5a:9a:48:
0e:97:6d:26:22:10:1e:33:a0:58:9a:6f:6b:a4:f6:
c0:89:12:e3:88:fd:c6:f3:7f:80:f2:7a:00:4e:c7:
d0:7e:07:0c:07:15:c0:cf:70:5d:1d:8b:20:5f:38:
55:1c:ed:5c:6b:9a:65:c9:58:d7:b1:6c:22:a3:23:
e6:d0:43:ca:ea:68:e2:63:dc:d6:b0:01:db:d7:b5:
18:03:12:4c:ac:1a:ed:17:93:08:78:4c:fb:93:53:
86:a0:b6:5b:05:dc:14:f3:a4:d2:40:94:ca:af:95:
19:35:4f:e5:65:7e:75:e6:f4:40:aa:93:1f:7f:77:
af:57:f4:02:c2:06:5b:18:e3:98:d9:3c:8c:21:fb:
20:06:67:09:22:24:6c:cb:8c:9d:c1:39:a5:60:9e:
97:a0:4b:18:d3:e1:60:42:7e:54:af:c1:11:c0:7e:
f8:8b:b2:07:b1:c3:f0:7c:f4:21:f2:28:a1:05:1b:
38:39:9a:94:40:90:c3:17:e8:e5:1a:aa:26:ae:4c:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:20:92:E2:9D:8E:9C:2E:50:1C:42:47:CF:E8:32:7B:07:B7:14:03
X509v3 Authority Key Identifier:
keyid:BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d1:12:d2:3b:27:a7:54:2b:d4:28:60:b1:ff:3f:26:94:38:
62:57:59:1c:50:a8:69:e7:fc:c4:43:eb:ec:29:37:c9:df:da:
2b:47:9f:c8:e5:95:4a:2a:3f:b8:4a:b5:4c:c3:af:62:db:59:
88:d9:d1:f9:ce:54:da:d0:00:1b:63:46:31:42:0f:4d:48:14:
83:f3:fd:0c:7b:b9:18:f8:d9:98:fb:4b:da:d1:cf:af:a7:36:
fa:cf:9d:10:35:bc:79:d5:5c:9e:43:75:be:0d:eb:e7:8b:4b:
0c:e4:5b:84:b1:47:b4:b5:68:a2:21:d8:55:da:e6:73:74:77:
59:18:b4:e2:d4:2f:7d:2c:a6:0d:52:5f:9b:f4:29:8a:d3:d2:
46:1b:e7:34:43:ba:9e:ae:99:aa:ff:14:c7:67:e2:33:1c:68:
40:93:2a:36:52:02:58:20:4f:bc:b5:7b:5a:83:0a:44:0a:b9:
73:e5:16:64:f1:d1:fc:64:16:22:8f:2a:c1:72:99:bd:a2:e3:
38:b3:e2:f8:65:77:58:28:d7:d0:c0:3e:a8:68:f6:6f:27:e2:
2f:56:13:97:3b:c2:d6:13:d6:09:0b:75:5e:af:31:f3:54:00:
9b:2e:54:a3:1c:11:c8:32:43:5e:bc:84:c9:2f:ec:fe:3b:99:
e2:f7:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:11 2026 by rpki-client