
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
File: VwLHy8I1Jyt6zNez8LDkfGHHXis.mft (raw, json)
Hash identifier: tgBFjYy3qz3o4hKD99H6Ght9892i+HHXZ42UN80tyfs=
Subject key identifier: F8:82:CD:A5:59:9A:43:D1:59:BC:6F:C4:7B:9B:49:AB:D1:F3:52:8E
Authority key identifier: 57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
Certificate issuer: /CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Certificate serial: 019FA899D935E49510C48E3162BBFE1C0F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:22 +0000
Manifest this update: Tue 28 Jul 2026 12:01:22 +0000
Manifest next update: Wed 29 Jul 2026 12:01:22 +0000
Files and hashes: 1: Dv1loStZYAsjb_Af0DKMu_bevS8.roa (hash: Zb9q97rROgQhDovcWngVEaqZebMrRktFUPt7d2lNmQc=)
2: VwLHy8I1Jyt6zNez8LDkfGHHXis.crl (hash: sRgBm0Z3D/N1sZnGULGYloGcZsaz/5WS7IyCKxQ5RZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d9:35:e4:95:10:c4:8e:31:62:bb:fe:1c:0f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Validity
Not Before: Jul 28 12:01:22 2026 GMT
Not After : Jul 29 12:01:22 2026 GMT
Subject: CN=f882cda5599a43d159bc6fc47b9b49abd1f3528e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:cf:e4:27:d8:9e:af:5c:1b:62:5c:05:49:
e0:27:d4:20:46:ce:cc:80:96:b4:22:bc:b8:60:24:
58:55:05:36:b1:63:a4:10:f2:8b:c1:ef:ba:6c:88:
0e:83:1d:a1:89:96:8d:99:24:8f:06:88:37:79:57:
67:e0:be:9e:af:1c:ef:64:36:ba:3b:f4:7d:44:be:
76:c1:31:55:81:5c:55:a9:3e:1c:3b:e7:5b:79:fe:
44:e2:3d:14:9b:1b:c8:71:f2:90:ff:72:ea:19:96:
af:09:19:6f:1b:6c:d6:c0:62:88:74:56:ac:a7:71:
27:c1:2d:df:eb:60:bd:74:b2:e8:a0:7e:41:50:c5:
c7:b3:ba:84:24:b4:a8:a1:9d:46:57:8c:92:15:2d:
0c:aa:6b:83:41:f9:33:7d:6d:27:e5:75:c5:f3:90:
cd:4b:bd:be:26:5c:6c:94:52:48:6b:51:58:d8:88:
09:1e:08:fe:45:92:3c:08:6b:7e:ed:a5:f0:c1:ed:
ec:aa:91:6b:d7:0c:bd:d5:83:d7:fc:48:52:62:d0:
0e:5d:52:d1:a0:cc:c1:07:af:63:32:6b:11:26:e3:
02:99:d0:45:70:09:f9:e5:bc:1e:18:d1:4a:eb:bc:
93:0e:7a:c6:70:44:a6:f9:3b:21:fd:21:68:cf:6d:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:82:CD:A5:59:9A:43:D1:59:BC:6F:C4:7B:9B:49:AB:D1:F3:52:8E
X509v3 Authority Key Identifier:
keyid:57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:70:e8:17:a1:22:e5:cf:a4:4c:ca:09:2e:3f:e5:ed:8a:c9:
fc:03:67:e9:d5:80:86:08:41:5f:4a:6d:ff:a4:c6:f9:c4:20:
b4:bd:b8:7c:39:ce:c4:d9:34:b2:55:59:55:d9:e6:5c:38:93:
b5:c1:2e:c4:37:0e:5d:db:dc:20:7f:50:64:90:1d:e3:ee:e6:
1c:da:9c:ea:cb:50:5a:7a:eb:a0:2b:eb:99:bd:3c:7d:f8:15:
f6:ac:0c:a5:1b:93:5b:4b:46:e9:2d:96:a1:76:8e:26:54:4a:
36:ab:e5:3e:98:14:a3:ee:c9:7b:e8:89:0b:f8:29:be:25:95:
2f:e8:3d:2f:ce:53:22:a3:b9:f1:88:7d:dc:fb:6b:b0:08:6c:
1c:91:50:87:a7:49:4a:fa:ad:49:10:1e:67:90:79:62:ee:14:
dc:da:b7:dc:b7:c3:14:01:d6:7b:75:58:a2:4d:7e:7e:ae:97:
ea:25:92:e2:3b:bc:6e:9c:ba:c4:d6:ba:2a:d8:d6:bc:fd:62:
4e:ad:d6:2f:b8:a9:e6:9f:38:cd:af:19:7b:16:c7:b3:46:12:
80:17:b9:b1:28:10:84:55:c2:11:b9:24:7d:84:5c:c1:b4:ac:
bf:d4:b8:5d:aa:e5:49:48:f3:47:6e:d5:23:eb:d3:b1:0e:ee:
95:ad:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:09 2026 by rpki-client