Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File: vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier: oizfzcbRgYpIhqPQHpg/1fHExVaiUysA+p6sSlTVYJ4=
Subject key identifier: C8:51:AE:07:04:4F:41:C4:1F:CB:33:CA:29:4A:59:AA:B7:78:87:0C
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 019FAA8893A73B278164A0718C1B92D6DC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number: 1953
Signing time: Tue 28 Jul 2026 21:01:45 +0000
Manifest this update: Tue 28 Jul 2026 21:01:45 +0000
Manifest next update: Wed 29 Jul 2026 21:01:45 +0000
Files and hashes: 1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: m+B6RL5efoG5s4L6ns3WRidI7t2bdhYO3m/Ogcg0+g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:93:a7:3b:27:81:64:a0:71:8c:1b:92:d6:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Jul 28 21:01:45 2026 GMT
Not After : Jul 29 21:01:45 2026 GMT
Subject: CN=c851ae07044f41c41fcb33ca294a59aab778870c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:04:f8:fb:aa:25:2e:9d:db:1f:de:7c:21:
3f:fa:a0:b8:0c:43:3a:39:1a:b1:5c:cb:37:66:47:
f0:3e:ff:22:9b:38:b4:65:08:86:92:ff:a8:c4:d9:
95:f2:ca:75:da:be:9e:68:d6:48:e1:2c:54:88:71:
d2:7f:60:6b:9a:e8:e3:2e:e2:6d:f4:ad:2a:03:89:
f7:09:9c:8b:74:7a:37:84:ce:5c:9a:c9:55:0c:41:
73:9f:eb:8f:22:29:e7:71:d3:e5:2e:8f:18:5f:eb:
11:0f:45:78:98:3f:15:24:9e:c3:11:99:1e:6f:ee:
95:3b:32:c7:1d:57:b5:2f:94:3a:fb:45:a8:07:e9:
9e:a0:5d:c7:54:42:92:18:15:e7:09:92:c7:17:3b:
1e:1e:c5:5d:00:62:89:e9:9e:c8:3f:00:0d:c7:9b:
31:ac:ab:4a:8c:ca:cd:57:30:48:a5:2c:11:21:9d:
75:aa:a6:e8:9c:74:ab:17:ab:51:bb:15:82:58:31:
84:20:41:73:14:5a:e5:64:66:c7:cc:f5:7e:b0:5e:
77:9b:70:ca:12:48:f9:af:41:24:3d:94:2e:dd:be:
82:fa:dc:61:8f:16:86:a6:39:c5:98:b9:21:51:8d:
96:26:69:ec:c2:37:9d:2a:66:a4:d1:b2:0b:81:63:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:AE:07:04:4F:41:C4:1F:CB:33:CA:29:4A:59:AA:B7:78:87:0C
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:71:ee:e2:b2:50:4e:3b:8d:14:3c:f6:6f:cf:97:2b:65:
4b:e9:87:72:d5:88:e3:04:45:4a:41:eb:11:79:fb:7e:15:17:
87:af:b8:b2:66:4f:10:31:35:07:d6:0d:19:12:a9:d6:df:53:
71:4d:4d:2a:81:0e:a8:64:dd:90:85:22:cf:6b:c3:52:5c:1b:
3b:db:f0:53:bd:65:97:6c:75:73:1d:3d:1e:41:ca:11:c8:5f:
a3:32:30:e9:39:de:41:62:88:66:82:f6:d2:fc:dc:5d:70:5f:
9e:df:d9:3e:fd:aa:db:a4:fc:e5:27:8f:b7:d1:1f:9c:04:eb:
39:6c:b0:0e:5a:6f:38:fb:f4:66:a3:7c:cd:10:90:03:d5:80:
cb:62:49:05:66:9d:15:19:c0:19:c9:ae:44:63:ae:29:51:ff:
a8:5e:38:a6:85:cf:b8:0d:75:ac:ae:21:e7:58:23:3f:ae:f3:
ab:ed:fa:5b:15:0f:67:88:94:c1:c2:9c:93:b1:50:97:a5:80:
54:9a:a7:01:b8:77:9b:a1:5b:1d:e2:78:25:ee:e9:0e:5d:92:
ed:53:22:58:ed:a3:28:a9:a2:3e:4c:96:df:99:75:58:f1:14:
ec:36:3d:c2:cc:0d:94:6c:ac:ce:b4:c6:f2:c6:16:69:63:db:
4d:60:d0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:42 2026 by rpki-client