Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: 96WlYuRk9iXrDRl5/AG9goAYa3BsajvPoW5GzB6C3xU=
Subject key identifier: 04:C4:90:A3:4C:99:83:34:56:8D:20:76:BB:E1:0E:3E:81:79:AC:83
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019FAA87F4A933E2B328BA72496A0545C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 21:01:04 +0000
Manifest this update: Tue 28 Jul 2026 21:01:04 +0000
Manifest next update: Wed 29 Jul 2026 21:01:04 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: ik+pXC5Jr6fBEIoKFBvxs4Ps2TuCWGuPy62r+lgaEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:f4:a9:33:e2:b3:28:ba:72:49:6a:05:45:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jul 28 21:01:04 2026 GMT
Not After : Jul 29 21:01:04 2026 GMT
Subject: CN=04c490a34c998334568d2076bbe10e3e8179ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:2f:57:71:ce:37:8e:b1:38:28:f6:35:12:
fb:a9:a0:3b:ca:30:73:f1:86:3d:f3:e9:43:47:15:
50:43:98:d0:b8:40:5d:b5:43:ce:79:bc:d7:e0:19:
08:5d:9c:3d:46:ab:5f:6f:c6:2b:0e:4e:5a:7e:a7:
98:a0:99:5d:bb:28:55:23:da:eb:57:65:54:9c:5c:
8d:d0:43:a3:1e:14:5e:bb:5c:7e:dc:2e:0e:48:17:
48:16:f8:96:7f:89:c6:a0:1e:c5:28:b4:1c:17:ef:
2d:82:56:5a:e2:c2:91:a0:4c:61:9c:3d:46:bf:a1:
a8:22:35:2c:66:98:6f:50:2e:cb:3f:2c:87:8c:b2:
63:97:52:40:66:a7:8a:be:62:94:24:0a:c1:5d:a9:
2c:91:07:ff:2d:90:0b:ed:8a:4e:fd:2a:da:a3:bc:
79:d8:38:de:7e:10:88:1a:57:11:4f:6d:1a:cf:08:
ba:08:3c:a4:2b:65:54:36:33:e4:05:73:3a:72:38:
86:fa:15:e2:8c:46:47:7e:8c:29:5d:2a:51:f7:78:
ed:83:0f:b4:d4:92:0b:9a:2e:c4:a5:1f:c2:fa:0c:
1e:de:ab:fe:40:53:43:e5:32:d4:67:30:32:c8:9d:
07:b4:7c:a7:13:3d:cc:db:da:86:28:e6:e1:56:91:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C4:90:A3:4C:99:83:34:56:8D:20:76:BB:E1:0E:3E:81:79:AC:83
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:93:b5:bb:59:bc:e3:b0:eb:99:bb:c3:b9:df:b4:c5:87:1b:
e4:10:b5:35:f5:c1:1d:43:5b:47:1c:6b:dc:a5:6d:0c:66:62:
e2:08:0e:fa:36:84:52:41:24:6e:50:21:20:f1:12:20:f5:fb:
06:d2:27:4d:e6:99:ca:35:f4:53:5e:50:ed:0b:ea:a5:8c:4a:
d4:2c:f3:5f:a8:c7:cd:53:0f:0c:32:05:9b:06:ea:c4:6e:75:
5f:7a:aa:24:1e:13:09:c1:a2:97:5e:80:87:29:6a:17:7d:3e:
03:e2:3e:00:8f:6d:a1:93:53:3a:3a:b9:c8:80:ec:85:55:9f:
41:d9:d9:07:32:39:cf:1b:8e:1c:f1:bc:46:f5:84:fb:bd:de:
de:ea:8f:5a:c7:de:42:98:08:1d:19:7e:35:44:45:82:ee:f7:
82:59:ff:0c:17:7c:d7:32:8d:be:a2:9a:d0:3f:bd:98:15:70:
b0:4e:50:a9:37:7a:0c:ab:13:28:fe:80:6f:97:f3:b5:b5:25:
47:37:db:3b:cb:ab:d2:94:f7:33:a6:38:fd:48:85:4f:56:d2:
33:bc:1f:73:73:6a:99:b6:be:45:2b:c1:df:4a:5e:0e:cd:a7:
44:70:af:a6:bf:45:05:e0:26:dc:fd:c7:c7:0c:e3:66:40:58:
06:2c:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:15 2026 by rpki-client