Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: W7q4imZ7Oe+K3li0uxPoGEIECIcA5fkxgvYcJLO4Qcg=
Subject key identifier: 65:AF:CC:F7:17:85:39:9A:52:98:8D:F3:CB:1D:C5:2C:32:C2:F3:16
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019EC3A5157FCAE86A471CC522B1959EF738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 01:00:36 +0000
Manifest this update: Sun 14 Jun 2026 01:00:36 +0000
Manifest next update: Mon 15 Jun 2026 01:00:36 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: 3ceTXhe2jl5mankvsfTq6Zmr/sV2Rwq58fcPhkAGFaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:15:7f:ca:e8:6a:47:1c:c5:22:b1:95:9e:f7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Jun 14 01:00:36 2026 GMT
Not After : Jun 15 01:00:36 2026 GMT
Subject: CN=65afccf71785399a52988df3cb1dc52c32c2f316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:22:01:e5:71:72:49:e8:11:83:56:68:c4:
29:22:dc:4d:c2:8c:5a:dc:1e:1b:b6:f8:04:4b:ad:
3b:be:82:64:63:12:62:5b:89:7b:37:20:6c:08:4e:
22:c2:e8:1a:80:f9:45:66:f3:c6:d8:60:a5:0e:3e:
d5:da:ed:de:60:2d:e7:13:d7:ca:0d:c3:49:80:dd:
ad:dc:3e:4f:6a:7b:7b:dd:25:da:61:fd:6b:e7:1f:
0d:fd:bf:1d:a1:03:95:e5:ec:08:b8:3f:c5:50:fa:
90:ca:8a:ad:f2:80:ec:bc:24:e0:4c:36:09:98:66:
2b:cc:75:c3:98:ab:7c:90:14:56:29:75:25:ae:b9:
62:87:9a:81:a5:3c:29:98:58:65:92:eb:80:49:ea:
24:e1:91:fb:ee:28:16:a8:f8:fb:ad:38:c3:be:8d:
8b:09:08:fe:22:6b:ff:47:02:9a:1d:e0:be:1d:66:
be:14:ea:b9:69:9f:0f:eb:72:8c:84:42:0a:d8:bf:
d1:65:16:61:ab:7a:97:1a:ff:b1:34:03:0c:62:94:
fe:4a:40:e3:9e:97:48:d0:16:54:b2:c6:5a:df:73:
0a:8c:45:dc:ae:4d:61:69:e4:53:3f:cc:55:46:b8:
02:5c:17:28:37:38:bc:35:a4:ec:13:dc:5a:9c:b9:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AF:CC:F7:17:85:39:9A:52:98:8D:F3:CB:1D:C5:2C:32:C2:F3:16
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a7:75:12:cf:b8:dd:9d:15:fb:70:60:51:ae:32:3d:bf:ea:
88:e7:6e:71:f7:f5:a6:ba:6c:d0:61:44:88:e8:4a:f6:59:f8:
0e:ae:7c:25:dc:07:73:d5:d3:ca:6e:b5:9c:74:2c:64:66:98:
6b:67:e9:22:25:c6:64:0f:34:dc:56:0e:7c:9b:32:3b:3b:02:
21:60:40:7b:c1:4d:00:e2:32:17:01:b0:c5:0f:9d:4d:f2:6c:
6c:bd:df:af:9c:75:34:67:cb:37:c1:2b:ae:b6:c6:60:23:96:
d8:50:ae:6a:3a:45:ba:59:da:f0:f7:93:69:74:54:1d:d8:9a:
22:6a:50:54:80:35:a2:c1:7d:a8:7e:e1:49:71:8b:04:4b:39:
74:c8:03:3a:d1:11:26:3f:cf:f0:ec:10:0b:2d:df:f0:c8:e6:
39:0e:2e:92:32:b5:5a:51:84:a6:85:0e:17:9d:a7:08:38:5a:
e3:1b:5d:60:7f:c3:6f:88:a8:46:62:32:86:a8:ed:9f:86:3c:
89:5c:4b:a4:95:96:18:ed:d4:0c:8b:f1:37:bb:0a:9e:4e:a1:
78:46:10:89:eb:48:3e:66:cc:fe:29:ce:da:8e:11:a1:96:bb:
88:9a:bf:3d:05:13:da:72:92:dd:b2:3c:da:10:25:29:67:74:
fb:fc:f3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpRV/yuhqRxzFIrGVnvc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTBhOTQ5OTc2NzJhOTIwYTI5MGNjYmZkMDQ5MTI2Zjcw
NzVjOTkwHhcNMjYwNjE0MDEwMDM2WhcNMjYwNjE1MDEwMDM2WjAzMTEwLwYDVQQD
Eyg2NWFmY2NmNzE3ODUzOTlhNTI5ODhkZjNjYjFkYzUyYzMyYzJmMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdUiAeVxcknoEYNWaMQpItxNwoxa
3B4btvgES607voJkYxJiW4l7NyBsCE4iwugagPlFZvPG2GClDj7V2u3eYC3nE9fK
DcNJgN2t3D5Pant73SXaYf1r5x8N/b8doQOV5ewIuD/FUPqQyoqt8oDsvCTgTDYJ
mGYrzHXDmKt8kBRWKXUlrrlih5qBpTwpmFhlkuuASeok4ZH77igWqPj7rTjDvo2L
CQj+Imv/RwKaHeC+HWa+FOq5aZ8P63KMhEIK2L/RZRZhq3qXGv+xNAMMYpT+SkDj
npdI0BZUssZa33MKjEXcrk1haeRTP8xVRrgCXBcoNzi8NaTsE9xanLlzAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWvzPcXhTmaUpiN88sdxSwywvMWMB8GA1UdIwQY
MBaAFL7gqUmXZyqSCikMy/0EkSb3B1yZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTIt
M2E2MDYzY2ZlYTk1LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTItM2E2MDYzY2ZlYTk1
LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6d1Es+4
3Z0V+3BgUa4yPb/qiOducff1prps0GFEiOhK9ln4Dq58JdwHc9XTym61nHQsZGaY
a2fpIiXGZA803FYOfJsyOzsCIWBAe8FNAOIyFwGwxQ+dTfJsbL3fr5x1NGfLN8Er
rrbGYCOW2FCuajpFulna8PeTaXRUHdiaImpQVIA1osF9qH7hSXGLBEs5dMgDOtER
Jj/P8OwQCy3f8MjmOQ4ukjK1WlGEpoUOF52nCDha4xtdYH/Db4ioRmIyhqjtn4Y8
iVxLpJWWGO3UDIvxN7sKnk6heEYQietIPmbM/inO2o4RoZa7iJq/PQUT2nKS3bI8
2hAlKWd0+/zz7g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:48 2026 by rpki-client