Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: +doYRK5rg0+0d96CES3Zri85pGDSw+3H6MQo/vdL88s=
Subject key identifier: 10:D2:1E:19:E4:9B:41:61:C1:5B:9A:07:A4:F5:EB:2F:C8:CE:9E:00
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 019FAB63E094BF2975AC51E7377D8CC79A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 1720
Signing time: Wed 29 Jul 2026 01:01:17 +0000
Manifest this update: Wed 29 Jul 2026 01:01:17 +0000
Manifest next update: Thu 30 Jul 2026 01:01:17 +0000
Files and hashes: 1: 341ViOQdsNCW-En8QgEMghW3CrA.roa (hash: ZDMhvpmhtSILebU2dF818x+O1gwwEqpIPXCs7VmgQH0=)
2: EwqvsuzaZqidzerK9hCEUFqmQ00.roa (hash: GDEyHKgpCdUpHrUWgA6Yr0loRQV7nfKi6qOOjAkX3eQ=)
3: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: f1Y69FwBTHNn/SfMX6FtFXuixoWH6iks89oVlxoI67s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:e0:94:bf:29:75:ac:51:e7:37:7d:8c:c7:9a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jul 29 01:01:17 2026 GMT
Not After : Jul 30 01:01:17 2026 GMT
Subject: CN=10d21e19e49b4161c15b9a07a4f5eb2fc8ce9e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:88:a1:8a:c2:4a:e2:ca:d6:d5:c8:68:b0:
56:94:4e:b8:d3:80:3f:83:84:f5:2e:42:88:30:01:
ae:04:05:b3:bb:41:1b:d2:c4:26:66:66:47:94:13:
1b:af:49:e7:62:4c:b9:e8:2d:cd:dd:88:7c:ef:e6:
1f:0f:88:40:a8:1b:7b:56:9f:77:76:db:a7:7d:cc:
67:e9:a9:90:34:81:df:01:a9:86:92:2d:91:bf:ee:
d7:60:9f:ec:53:f8:ad:f0:9a:70:56:79:7d:36:ac:
9e:37:6a:38:d9:69:f4:e9:76:0b:f6:df:88:92:a6:
da:08:d4:82:9e:af:a8:c8:8c:85:ea:7c:8f:a9:28:
cd:8b:9a:15:30:1f:35:4a:16:a8:d5:4f:54:f0:82:
a8:de:52:c3:71:a4:c8:44:13:65:fa:37:31:c6:83:
28:8f:b9:a0:f3:79:fd:2c:a5:9a:1a:4a:ef:81:01:
52:ab:82:29:ca:ee:ba:1b:9c:c5:dc:c2:e9:76:19:
24:92:66:5c:04:3e:b6:c2:37:a9:11:fd:b9:c4:63:
23:12:10:32:f0:16:37:f2:95:4d:34:65:59:e8:ae:
e4:80:d7:82:75:0a:3e:db:08:ab:ea:fc:80:a1:38:
8e:04:14:23:cc:53:12:7e:20:c2:e6:5d:32:27:35:
5a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:1E:19:E4:9B:41:61:C1:5B:9A:07:A4:F5:EB:2F:C8:CE:9E:00
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:28:d4:17:e4:1c:f8:c2:da:4b:0b:4e:64:7b:6c:62:31:1c:
f6:d3:f3:dd:16:07:26:e9:be:ce:a4:05:63:35:2e:c2:8f:01:
75:5e:f6:d0:df:f9:ec:ee:64:0f:c0:46:99:2e:8c:46:77:8a:
61:97:c3:52:c1:d0:6e:1e:96:9f:4d:70:43:9a:cf:f6:85:01:
f8:a2:4b:99:2c:fb:1c:53:31:69:b7:60:4e:0e:80:ed:d9:3f:
f9:bd:bd:99:f8:da:db:2d:71:b9:4b:68:7f:75:73:cf:c1:93:
79:32:25:ce:40:50:c3:5d:d5:64:50:77:73:86:4e:db:18:d2:
5b:9a:ad:6e:04:61:dc:a3:32:fb:4c:f3:a2:2a:08:9e:42:d9:
95:be:d8:6c:49:56:bc:f8:3a:1f:b8:65:30:96:a8:7f:f7:19:
9f:9f:d2:4d:e9:d1:d5:dd:13:e9:09:76:77:93:c8:ae:83:e5:
ee:3e:69:1c:73:49:a0:39:ec:22:5a:21:c3:6f:31:57:0a:66:
39:85:56:58:39:62:35:dd:be:c7:6a:82:f1:d1:ac:d3:7d:64:
90:ac:66:1e:24:ba:49:fe:3f:7f:16:58:3a:f3:07:3d:14:aa:
1f:99:5a:ff:0e:e2:94:ca:09:2b:fc:ef:96:3d:d6:5e:67:a1:
41:0d:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:58 2026 by rpki-client