Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: eq3tVznxeFLBxGb6JHIE0X/xTlErLHkl/PaXcYMy3kU=
Subject key identifier: 89:CD:CF:55:B7:FB:48:B6:E2:BC:2C:92:78:9F:E5:29:13:18:97:07
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019FAB63E9F99E539BA0AE14F2D3B43533B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 01:01:19 +0000
Manifest this update: Wed 29 Jul 2026 01:01:19 +0000
Manifest next update: Thu 30 Jul 2026 01:01:19 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: 3T+fHAORB9Yh9xdE7rYnZ9zDZLfBZzyvsFGl82qM7Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:e9:f9:9e:53:9b:a0:ae:14:f2:d3:b4:35:33:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Jul 29 01:01:19 2026 GMT
Not After : Jul 30 01:01:19 2026 GMT
Subject: CN=89cdcf55b7fb48b6e2bc2c92789fe52913189707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:c1:9c:41:b0:12:a1:8a:f1:e3:af:b1:2c:
a8:64:a0:cf:90:46:7e:db:f6:2f:58:40:76:ad:6b:
3c:25:b2:e4:54:2a:aa:03:82:23:f9:b1:bb:16:75:
6a:66:76:da:c9:f2:a8:99:50:0a:41:dd:0f:f2:a7:
27:8d:68:cc:7a:a6:c6:fc:1d:c7:81:6e:37:f4:f9:
a1:56:3f:d5:8b:1e:f9:7b:4f:14:92:af:c7:d3:cb:
c9:da:d7:4d:b6:0f:bf:4e:a3:16:d0:95:29:42:ac:
87:dc:f5:75:02:53:cc:f7:c3:a8:81:f4:94:ae:76:
d4:7b:67:0d:7a:5e:bb:e8:37:43:23:cd:f3:5e:4b:
1c:87:f9:c5:ed:4e:b6:7b:8b:2f:47:2f:de:b9:ce:
74:f7:65:e3:33:82:ea:86:4e:66:03:a7:f9:53:59:
c9:c4:91:80:c5:bb:fa:5b:3e:1b:ef:91:17:70:a5:
bd:fb:84:90:68:92:a7:71:52:d2:2d:c8:d7:fe:d0:
d7:ba:2c:dd:fe:60:d9:e3:43:db:92:f7:f2:5f:47:
22:fc:66:98:40:76:c4:22:97:af:07:0b:ec:d8:ba:
0a:95:30:37:94:4e:c7:94:1f:08:86:0e:d6:6f:47:
46:c6:d6:3f:09:ba:df:54:00:90:86:d4:7f:64:e6:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CD:CF:55:B7:FB:48:B6:E2:BC:2C:92:78:9F:E5:29:13:18:97:07
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3d:0b:67:4f:ac:af:67:4c:6f:b2:61:db:9b:47:03:11:d7:
04:5d:16:6d:cb:44:5d:b7:9a:d6:f3:2b:fe:19:65:6a:fa:35:
4f:ea:ec:71:7c:77:31:c4:d8:77:a6:ab:9b:38:56:17:90:0a:
73:4b:13:a3:f4:b0:db:1d:c6:3b:36:6d:46:e1:f6:7a:07:b4:
ba:31:82:86:85:dc:40:d4:72:30:75:ba:ed:6e:c1:b4:55:ae:
9c:d5:49:ad:7c:95:ca:ae:01:43:b5:8e:7c:bc:86:5b:fb:97:
e9:e9:a2:d6:dc:12:b4:52:61:de:19:bf:40:70:1d:cb:fd:32:
cd:34:68:5f:ce:ad:b2:62:78:f4:45:ae:b8:59:be:88:ff:4d:
4b:aa:83:c7:45:20:8c:80:e9:9a:a7:87:40:6b:ac:1b:b2:d4:
fc:15:8c:94:c1:8a:41:4b:aa:f6:73:f9:42:f8:3a:5b:fb:4e:
64:c7:87:04:ae:1d:f7:42:8a:30:d2:48:8a:2d:e3:6b:15:05:
b5:1d:e0:d4:f7:2d:34:1d:ef:e3:21:ae:28:50:d0:c3:5b:82:
68:ea:40:c4:49:d6:0d:b7:ae:e7:52:50:15:53:0b:43:eb:0b:
41:5e:64:2f:a1:d1:d0:07:af:53:2b:af:9d:b0:38:4e:22:a6:
0c:53:d1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:11 2026 by rpki-client