Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: osgtjjq0h/p/wXwkRPdjFP5gdXw+vOmzkZQJejAzxjo=
Subject key identifier: 19:94:BF:CD:D8:80:85:3E:61:93:86:66:38:08:95:68:FF:F8:EF:B0
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019EC2C99BBEE9B535AA3B7F63F395A94860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 21:00:52 +0000
Manifest this update: Sat 13 Jun 2026 21:00:52 +0000
Manifest next update: Sun 14 Jun 2026 21:00:52 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: HBarPvsk5whELqEEWJ4bbSQaZG9LQCKlhBFSZIOmv4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:9b:be:e9:b5:35:aa:3b:7f:63:f3:95:a9:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jun 13 21:00:52 2026 GMT
Not After : Jun 14 21:00:52 2026 GMT
Subject: CN=1994bfcdd880853e6193866638089568fff8efb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:17:ef:a0:b5:73:41:0a:ef:02:ff:75:64:
da:6f:32:da:c8:f0:7e:bb:02:b6:51:a5:74:8c:38:
23:b3:da:56:b1:df:b6:62:e1:ca:7f:63:65:32:af:
bc:20:2d:43:6e:2a:0b:35:b6:da:f8:a5:4d:43:62:
e1:1a:9e:bb:86:25:a4:da:b8:6e:b9:82:45:52:a9:
6f:6b:d0:f2:5e:b2:3b:72:17:32:dc:cd:9b:15:58:
ce:60:26:aa:e8:00:d3:a4:b6:57:79:80:00:1a:ea:
4d:f2:de:97:e0:5a:df:47:6d:88:c9:5f:aa:ad:97:
0b:8f:af:8c:8a:ee:f3:d7:16:a1:23:ac:a8:48:60:
2f:b7:c4:97:ea:8d:2c:c1:1f:e4:08:c4:c1:29:2c:
ad:82:db:13:f1:e7:5a:a5:6b:32:b2:3a:2a:25:18:
85:0d:e2:5a:da:94:f8:ec:11:a4:01:a6:a7:4b:3d:
25:d2:ce:f3:c9:da:e3:45:0e:22:27:81:e2:d7:f0:
a3:72:bb:25:14:e8:74:d4:25:f1:4c:e4:a2:66:0d:
11:72:c3:13:e3:87:3f:23:12:be:7f:3a:70:fe:f2:
99:94:b6:e2:2a:20:5c:e6:00:a2:ff:f2:3f:b9:3e:
24:ce:4b:2e:80:5f:38:ac:59:1f:c8:ac:4e:06:cd:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:BF:CD:D8:80:85:3E:61:93:86:66:38:08:95:68:FF:F8:EF:B0
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8b:f3:83:9d:5b:88:4a:83:5c:89:6b:a3:1c:93:0d:79:1e:
30:b9:95:da:51:eb:17:f5:3d:cd:85:58:37:bb:5c:3e:7e:5b:
b9:be:27:b4:50:5f:dd:f3:8f:06:32:1d:12:ff:4a:c2:14:00:
1d:9c:f1:2b:d8:4d:b2:cb:ef:d3:11:e4:39:96:1f:0d:a2:06:
31:32:e6:dd:ad:75:6b:4f:11:61:3b:5f:19:d2:ab:53:78:e7:
e3:01:e0:a1:0c:5a:30:d6:6e:aa:a7:e3:d5:cd:af:e3:c3:e3:
2b:ec:02:21:a7:1d:2d:16:18:63:90:fb:be:6e:f6:1b:dc:34:
61:c9:6d:71:e5:93:cc:c0:92:8e:6b:40:7e:ba:e4:85:64:1c:
7e:9d:8c:14:0e:fd:de:00:21:54:79:e6:96:72:5d:1c:30:6d:
c9:95:72:b8:d7:eb:9e:4c:36:bf:d4:ca:f6:23:8d:fb:f1:82:
7f:d5:3c:a5:c1:5b:3b:a0:56:5d:81:8d:4c:84:e9:a2:de:ee:
62:13:a4:7e:c8:64:9e:7f:53:79:18:a3:d7:c8:f5:07:24:cf:
ab:39:aa:bf:2e:71:10:6e:98:f0:0b:e8:6d:d8:d7:be:e7:66:
d4:2f:47:a4:56:39:3e:52:28:f4:7a:08:79:5c:ef:ef:83:5c:
8e:8c:78:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyZu+6bU1qjt/Y/OVqUhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMTI1Y2FkN2RkNGM1ZjAyMDFlZTJhMjFkZWFjMzg3MzY2
OTgxYzQwHhcNMjYwNjEzMjEwMDUyWhcNMjYwNjE0MjEwMDUyWjAzMTEwLwYDVQQD
EygxOTk0YmZjZGQ4ODA4NTNlNjE5Mzg2NjYzODA4OTU2OGZmZjhlZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMYX76C1c0EK7wL/dWTabzLayPB+
uwK2UaV0jDgjs9pWsd+2YuHKf2NlMq+8IC1DbioLNbba+KVNQ2LhGp67hiWk2rhu
uYJFUqlva9DyXrI7chcy3M2bFVjOYCaq6ADTpLZXeYAAGupN8t6X4FrfR22IyV+q
rZcLj6+Miu7z1xahI6yoSGAvt8SX6o0swR/kCMTBKSytgtsT8edapWsysjoqJRiF
DeJa2pT47BGkAaanSz0l0s7zydrjRQ4iJ4Hi1/CjcrslFOh01CXxTOSiZg0RcsMT
44c/IxK+fzpw/vKZlLbiKiBc5gCi//I/uT4kzksugF84rFkfyKxOBs0HIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmUv83YgIU+YZOGZjgIlWj/+O+wMB8GA1UdIwQY
MBaAFL4SXK191MXwIB7ioh3qw4c2aYHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEt
NTE3ZWZmOTA4OTc1LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEtNTE3ZWZmOTA4OTc1
LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYvzg51b
iEqDXIlroxyTDXkeMLmV2lHrF/U9zYVYN7tcPn5bub4ntFBf3fOPBjIdEv9KwhQA
HZzxK9hNssvv0xHkOZYfDaIGMTLm3a11a08RYTtfGdKrU3jn4wHgoQxaMNZuqqfj
1c2v48PjK+wCIacdLRYYY5D7vm72G9w0YcltceWTzMCSjmtAfrrkhWQcfp2MFA79
3gAhVHnmlnJdHDBtyZVyuNfrnkw2v9TK9iON+/GCf9U8pcFbO6BWXYGNTITpot7u
YhOkfshknn9TeRij18j1ByTPqzmqvy5xEG6Y8AvobdjXvudm1C9HpFY5PlIo9HoI
eVzv74Ncjox4mw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:19 2026 by rpki-client