
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: rxbQge6H7ps024uczaXaxaZeevHUORGUVzV1u1l7LLo=
Subject key identifier: 49:84:AE:46:C7:75:2D:7C:E2:65:50:4B:CA:BF:6D:E8:FA:6A:6F:E9
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 019FAB6331C2B15C0F255C82138559EAC4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 01:00:32 +0000
Manifest this update: Wed 29 Jul 2026 01:00:32 +0000
Manifest next update: Thu 30 Jul 2026 01:00:32 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: a0k1Yzwy5PvYZH05QwhsUZR0z2kclzgwS6lSSPcy3Gg=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:31:c2:b1:5c:0f:25:5c:82:13:85:59:ea:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Jul 29 01:00:32 2026 GMT
Not After : Jul 30 01:00:32 2026 GMT
Subject: CN=4984ae46c7752d7ce265504bcabf6de8fa6a6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:27:48:c1:5f:2b:66:84:70:be:fb:9a:07:
9e:c4:76:25:79:08:73:7c:47:66:3e:d9:48:f0:a5:
bc:2b:45:6a:8e:d5:dd:50:4c:83:d4:6d:4c:11:c6:
84:15:20:d2:d2:36:c3:5f:d7:84:b4:da:5e:9e:46:
4a:60:dc:2d:c1:d8:f5:d9:40:5e:8e:8d:3c:01:a4:
c8:2a:85:8a:e2:88:31:dd:99:ed:5a:75:8d:76:05:
e6:a3:1a:14:52:a0:24:ed:7e:dd:13:e0:e8:d0:67:
6d:49:8b:7e:2e:28:83:92:ca:7b:4d:4c:ea:9b:d8:
38:f2:92:e2:3f:8d:9b:cb:13:e5:7d:e8:c5:63:ad:
6d:9b:59:1e:89:35:eb:37:67:5d:1c:af:03:be:51:
36:66:a0:7c:e8:cd:23:7a:d4:fc:bd:9f:94:dd:3e:
81:46:9a:d2:23:c5:51:2c:92:74:ed:e9:49:e3:59:
04:12:aa:e2:51:8a:ad:c9:81:24:3f:1f:a7:f5:77:
8c:6d:6f:0b:89:a9:1d:ca:78:89:ab:fc:eb:55:cf:
2b:4c:68:4d:d7:92:67:59:3b:44:87:4d:39:af:0e:
ad:9d:cd:23:11:a0:41:50:de:0a:be:c0:5a:d1:a9:
17:7a:42:d3:af:58:57:3c:c9:9a:dd:c5:1f:51:62:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:84:AE:46:C7:75:2D:7C:E2:65:50:4B:CA:BF:6D:E8:FA:6A:6F:E9
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bf:17:0c:50:06:eb:3f:36:be:c9:75:64:0a:07:7a:4f:14:
fb:d6:34:8e:d5:8d:5d:c2:95:4f:b5:1b:df:06:dc:89:08:5a:
a2:2c:89:b1:68:54:a9:d5:d9:9f:70:83:6f:9c:1d:18:ac:1e:
b0:e9:49:62:b0:58:d1:8a:ce:e5:73:38:af:7e:2b:ee:dc:9b:
13:41:60:b9:2f:2e:51:59:83:32:fc:cc:bd:cf:36:bb:6a:1a:
4d:45:a6:61:24:0c:55:50:a6:52:c7:85:8a:e3:2a:ac:ba:7a:
b8:51:07:8d:ee:76:e1:5a:e6:d9:28:5c:11:82:b9:79:d2:59:
15:a2:f8:55:81:97:62:20:83:30:0f:cf:0c:67:0a:81:f6:61:
3b:b7:49:9d:cf:0e:9f:66:46:c5:ea:66:82:1f:d2:76:49:59:
a0:33:b2:e2:07:11:ce:e7:4d:4e:d1:09:cf:a4:66:6d:a3:6f:
a5:8c:c7:d2:95:a8:4b:5c:12:d8:1d:8d:6d:6d:21:b4:b1:28:
ec:75:d7:00:ca:ca:1e:b2:76:b0:07:a7:d3:de:71:c6:72:6a:
8b:d5:d7:ac:ea:2b:29:73:1c:5e:81:50:ef:8f:e7:6e:11:7c:
a1:af:e2:f7:44:ec:47:b0:4b:ae:a4:9d:52:8d:2b:51:d5:d2:
38:f3:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:35 2026 by rpki-client