Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: 0Oyl9InlH/sc9qkaM2WiSZ4UQdHqZOHfdDDL4Hntcd0=
Subject key identifier: E4:28:EA:B4:6B:F9:00:43:6B:53:59:29:59:01:58:64:5A:82:F1:75
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019ED53E2B4D6DCE80ADB706BAF7FC432185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 196A
Signing time: Wed 17 Jun 2026 11:01:21 +0000
Manifest this update: Wed 17 Jun 2026 11:01:21 +0000
Manifest next update: Thu 18 Jun 2026 11:01:21 +0000
Files and hashes: 1: V8PCFPrTValkKCiDtwNotmUAoXc.roa (hash: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: GNcSfqpC8A2Xw06t3sR22hlgO7DTQT0uGxRdPqiTntY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:3e:2b:4d:6d:ce:80:ad:b7:06:ba:f7:fc:43:21:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jun 17 11:01:21 2026 GMT
Not After : Jun 18 11:01:21 2026 GMT
Subject: CN=e428eab46bf900436b535929590158645a82f175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:7a:bf:b0:0e:61:9e:3c:ff:37:3c:3e:a8:
bb:43:c9:31:a3:f1:16:3b:10:01:28:d3:db:47:e7:
d1:55:a7:89:50:df:3f:65:26:70:29:00:19:a5:dc:
6a:33:17:85:1a:14:03:8d:e4:f4:b0:2b:7e:5e:78:
39:b8:8a:08:37:91:6f:fa:b3:b3:dc:97:28:35:51:
ed:7b:7a:25:12:84:81:dd:ad:81:7d:76:a5:ca:9a:
fe:64:bb:7f:dd:ef:c9:ef:fe:a6:66:fa:55:9b:66:
d5:d1:15:39:e5:4a:82:22:51:07:f0:c5:7b:c4:08:
1c:72:c5:80:66:14:ba:60:94:dc:2b:2c:44:ec:73:
74:f8:cb:2f:6d:1e:65:4d:86:4b:a0:06:ac:a3:35:
44:97:8b:55:6c:20:43:a9:95:7d:0e:54:5b:f6:ad:
aa:6d:17:6e:16:29:1a:df:19:44:19:68:93:b9:f1:
b7:65:c0:49:ff:5a:54:52:40:58:b4:6b:8f:6c:ab:
12:d9:a4:c9:98:fa:70:5e:54:37:01:89:f6:43:f3:
12:11:e0:e3:84:f5:f9:ce:94:29:be:5d:01:d5:97:
ed:da:ee:2e:e5:43:93:90:40:d0:a3:0f:a4:59:66:
7d:f6:48:97:d9:96:f9:b6:73:55:80:b4:b7:86:ae:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:28:EA:B4:6B:F9:00:43:6B:53:59:29:59:01:58:64:5A:82:F1:75
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:50:6f:38:3f:a4:28:f3:10:b3:b0:6f:af:b7:21:ca:65:e9:
78:21:84:10:18:ba:4a:c3:56:cb:59:07:b5:56:01:17:53:55:
20:94:25:f7:ef:75:49:e4:2a:28:92:67:09:85:e7:8a:48:64:
69:e6:40:92:26:dc:6d:7f:40:d1:10:22:cf:7a:a3:7e:a0:26:
6f:8a:0a:67:53:cd:66:b7:1c:70:1a:7e:3d:e9:11:c5:08:6b:
c5:bb:4f:a2:db:ad:e4:a9:3d:3e:d5:72:a5:47:6f:b9:5c:0f:
3e:0d:3e:d0:f6:a1:a7:9a:16:7c:9d:6f:dd:d2:4e:07:c0:00:
f7:26:29:fe:a2:08:9b:46:ef:03:29:c1:51:0d:bc:0d:84:71:
eb:64:9d:9e:3e:d9:d9:72:92:8d:fd:b5:d1:d7:53:17:2b:e6:
0b:ae:f2:be:12:c8:58:89:4a:3d:b3:62:d1:f9:b5:4a:b1:c5:
a1:71:06:88:84:8a:df:e3:3a:6b:ce:55:46:99:20:70:ef:3a:
8c:ee:e4:b8:25:84:21:9d:9b:06:81:f5:3e:e5:83:a0:0e:f3:
f4:ae:77:33:e8:b5:34:ed:cb:53:20:fc:5c:a3:49:0c:2f:10:
0d:f4:46:d5:ef:e5:3c:f8:5a:66:ad:5d:b6:99:dc:79:66:c0:
3b:aa:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:14:27 2026 by rpki-client