Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: eZ/urMCjVw4qakSJ+x+zP/PDAkK/45W6XRhTLhXcORQ=
Subject key identifier: AD:F7:CC:20:EB:C5:19:04:59:5D:7D:4D:5D:01:AF:28:2E:00:8C:58
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 019F86B1EF09C52E57C8581CFA63F7730A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 19C9
Signing time: Tue 21 Jul 2026 22:00:35 +0000
Manifest this update: Tue 21 Jul 2026 22:00:35 +0000
Manifest next update: Wed 22 Jul 2026 22:00:35 +0000
Files and hashes: 1: GJIEMFvCXOGxwMSx43guQFRPh8M.roa (hash: oeNhpu1q2YVhaNJfdDI1KC0StxYU+WfFhgtlfHrXwlM=)
2: N7xp5A4irg8DKzqXWFOFM39t3u8.roa (hash: qInCZHWCOK/PbCu1c+rmFecdDUSwXaQ9cyfT/I5HPdo=)
3: hTMMYpMuqGPoG2J1CKhmES38yHA.roa (hash: rvTmRXH6/6D95X7iHQWTgs6oiDZA0aQ3QNoQMnR5ayw=)
4: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: or/UXKhUk54c2bcVHoOyPY70Cn50kLUwkagusfqq7q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:ef:09:c5:2e:57:c8:58:1c:fa:63:f7:73:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Jul 21 22:00:35 2026 GMT
Not After : Jul 22 22:00:35 2026 GMT
Subject: CN=adf7cc20ebc51904595d7d4d5d01af282e008c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:16:9e:b2:28:0c:96:ce:ec:08:5f:36:62:c5:
7e:32:25:ea:a2:76:68:71:8f:52:80:32:4e:e7:09:
67:70:e6:b2:aa:61:fc:77:7d:7e:cc:68:45:27:e1:
c0:2a:76:32:f0:bb:c3:5b:79:e3:46:17:c3:f8:6f:
9c:23:e3:4f:e4:aa:eb:d8:28:f6:0a:c3:26:43:32:
2d:97:da:43:8d:f8:6b:17:98:b7:04:4e:fa:12:cf:
c9:fb:bc:d0:73:21:2f:6d:17:04:c8:ef:67:07:bc:
94:40:53:66:0b:2a:06:2e:b1:76:85:69:ba:4a:57:
b2:c8:25:d3:ab:55:cf:b8:37:d6:1e:0a:95:18:76:
0e:ff:48:f4:4b:6b:a0:2c:75:09:62:de:0d:af:0b:
e3:bf:4d:3e:e3:19:3f:af:28:91:78:19:fb:ba:1f:
70:80:29:48:15:5f:c2:b4:54:09:7b:b7:13:12:d5:
1f:66:c4:64:e2:5a:f7:00:47:51:bc:e6:c6:a6:8a:
99:3d:ef:69:ce:43:64:e5:9d:2a:c2:71:c2:c1:c9:
3d:8d:cb:13:53:fc:e5:b1:45:9b:52:aa:a0:f9:4c:
b2:2e:10:93:13:86:f1:4c:c7:e1:35:bd:a0:bd:dd:
e6:84:06:84:10:4a:72:5a:7f:9e:b9:c9:90:2a:60:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:CC:20:EB:C5:19:04:59:5D:7D:4D:5D:01:AF:28:2E:00:8C:58
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d7:5d:0a:a4:98:15:e8:30:66:e2:1a:13:59:aa:ac:99:33:
e7:75:f9:4e:08:ae:a0:dc:af:e9:c8:4e:13:77:27:44:df:cb:
a5:3f:91:14:b7:77:36:8e:fa:29:ad:33:e0:ed:37:59:f9:13:
a4:46:ad:7e:69:c6:31:73:c0:cd:36:c0:eb:dd:32:90:28:1d:
8c:86:fe:9e:ef:9b:ba:0d:87:45:65:ac:01:05:d5:15:26:d7:
7e:fc:12:58:35:c4:49:2b:08:af:1d:2c:9c:1f:05:64:f7:3b:
f2:d7:20:ff:f4:4a:8f:85:b5:ce:d1:c8:14:5a:da:04:53:13:
78:76:b4:76:17:4e:6b:13:e9:6e:50:50:f0:50:28:67:bc:72:
7a:3b:f9:58:9d:7f:b5:45:45:13:bd:47:fe:d8:d5:15:c2:d4:
18:ef:94:54:fe:eb:7c:8e:f9:2c:09:3b:79:58:23:87:32:65:
53:f4:6c:92:15:a8:0d:16:02:07:72:cf:80:f3:c3:05:06:75:
62:bf:54:57:2f:fa:2c:d5:2f:cb:46:76:b2:46:90:bd:5e:ab:
ec:bb:03:f9:c9:b4:f7:0a:02:24:4c:e9:e4:85:82:a3:f6:86:
cf:1d:2c:d5:cc:91:34:b0:64:61:69:03:97:d1:16:f1:72:99:
ac:11:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:17 2026 by rpki-client