Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: LenkhspWQBEFFLlzE3avJl3zym/xQ5GhT6SLsRIYcFM=
Subject key identifier: DE:2D:68:D5:FD:F5:84:72:6F:00:1F:B7:F8:23:EB:D3:AE:D9:D5:47
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019FAB63EFEF08F441EC0FC751923CA87B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0CFD
Signing time: Wed 29 Jul 2026 01:01:21 +0000
Manifest this update: Wed 29 Jul 2026 01:01:21 +0000
Manifest next update: Thu 30 Jul 2026 01:01:21 +0000
Files and hashes: 1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: SndeXF3taZeQrdKYl8oAk04rNwVx2pJwBJQ1vDRUMv8=)
3: fzZPCo2MgwRNx0jBproZuv-eSHg.roa (hash: TUdwZLmcSuUajJ8XwoB2OnQqd7+GFsXBXptVyFTtu7c=)
4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ef:ef:08:f4:41:ec:0f:c7:51:92:3c:a8:7b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Jul 29 01:01:21 2026 GMT
Not After : Jul 30 01:01:21 2026 GMT
Subject: CN=de2d68d5fdf584726f001fb7f823ebd3aed9d547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:ea:17:49:7d:47:92:51:36:c6:09:12:eb:
25:72:cd:97:d5:8f:ae:5e:64:53:dc:9c:7f:b6:30:
e5:58:fe:e2:93:e5:ee:25:e9:b5:9e:80:20:20:e7:
c2:b9:b8:9b:69:36:06:e3:5b:57:dd:cc:66:dd:58:
7c:31:14:37:67:4f:24:09:d4:05:48:d5:3d:a7:d5:
76:80:d5:d5:82:fb:fc:a5:4d:7c:fb:a3:f1:98:24:
57:7c:70:1a:df:5b:f1:bf:eb:13:b4:b6:45:0d:b9:
b7:f0:c5:6e:f8:54:73:21:70:a7:19:51:08:c5:f4:
b8:4b:ce:f4:c4:f5:a8:ab:84:5d:54:a1:f9:d4:b4:
d6:19:d1:b6:84:a4:bf:8d:e7:68:3e:aa:9d:be:31:
ff:f9:57:e9:8a:51:2f:17:b9:82:84:4b:d4:3b:b7:
f8:a3:d6:96:b7:80:2c:59:5f:19:69:b4:45:e1:7b:
29:ed:34:15:7c:3a:3d:31:5a:96:0f:e4:34:a9:80:
f4:b7:bc:fc:d4:21:65:a0:f7:50:22:e2:52:0c:79:
a5:93:48:86:e9:89:63:44:87:e7:48:09:7e:90:28:
8d:63:c6:2a:b4:21:bc:49:16:41:ae:9b:1c:50:43:
9f:2e:8a:96:51:a3:68:de:9c:4c:ad:b9:27:5f:5f:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:68:D5:FD:F5:84:72:6F:00:1F:B7:F8:23:EB:D3:AE:D9:D5:47
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0a:5c:b5:0e:03:3d:b3:e0:8e:ff:37:74:9e:6e:70:8d:ce:
43:e0:85:99:d7:0f:3e:cb:fb:20:f3:3e:ac:81:72:f3:17:52:
00:fb:af:78:5c:05:ef:f5:1c:27:ee:48:45:18:38:bf:2f:1b:
84:67:4a:66:cf:45:9b:98:3c:3d:fc:db:b7:93:a9:a5:86:34:
2d:02:ee:d4:e5:e4:3e:c7:98:5b:73:7c:cb:63:39:b7:cf:b7:
d3:ab:53:32:9c:00:54:69:74:a7:48:d7:27:74:8c:37:2e:bd:
26:82:30:4f:10:ca:d1:34:5e:d3:23:2d:a8:f1:95:91:22:b9:
fc:d0:2f:ad:00:f9:db:47:43:54:8c:80:a0:b8:e7:8f:c5:e5:
0b:cb:03:64:ac:6c:fa:af:26:93:f8:55:a4:bf:81:01:33:b3:
e2:69:bf:98:19:b1:0a:e7:d9:9c:6d:62:71:e0:60:c4:b4:ed:
2c:e1:9e:c7:35:e6:f8:66:9f:40:a8:44:60:4c:e7:91:d1:25:
3c:f7:43:ce:50:94:b4:f9:b5:7d:a1:c0:6d:ce:a8:cb:9b:bb:
56:69:48:19:7a:4b:c2:cf:07:c7:33:1d:3a:f5:8f:ff:7d:91:
63:dc:b4:9f:f4:57:7e:b7:70:4d:ab:1b:12:07:1a:41:16:c3:
ad:d5:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:08 2026 by rpki-client