Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: Pc6BHsOaja0fTk8cm/VCwUk4EfGP2GB195GAlgw9I48=
Subject key identifier: 87:66:3E:29:15:AF:9E:60:F1:A2:05:A1:FD:22:1F:BB:5B:7F:C5:4D
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 019F8AFC8850D15984F9FBEB356E5F4667BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 19C5
Signing time: Wed 22 Jul 2026 18:00:33 +0000
Manifest this update: Wed 22 Jul 2026 18:00:33 +0000
Manifest next update: Thu 23 Jul 2026 18:00:33 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: 5d4b3bw8cCXAzCuM6SPGEWZGIDgoiYlhL2pijuCOvmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:fc:88:50:d1:59:84:f9:fb:eb:35:6e:5f:46:67:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jul 22 18:00:33 2026 GMT
Not After : Jul 23 18:00:33 2026 GMT
Subject: CN=87663e2915af9e60f1a205a1fd221fbb5b7fc54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:95:8a:2c:e1:2a:e3:f9:3b:52:34:ae:2c:
0c:22:dd:90:fa:46:39:33:a7:23:f0:54:f0:f7:51:
c5:d9:07:ac:ba:d9:ab:de:45:22:dc:85:4c:af:12:
19:38:f2:dc:96:6a:7b:66:d4:25:f4:18:73:cc:2a:
f5:4d:b9:fe:61:92:a4:b7:98:6d:5a:ff:67:bd:80:
99:30:99:2d:0d:01:1a:9f:a5:97:42:68:c2:73:3a:
4a:57:06:77:46:e5:b7:81:01:42:91:6f:b3:e7:45:
7c:9a:5e:56:00:97:fc:0c:be:8b:3e:82:d3:c3:3e:
e4:b6:0a:17:0a:79:73:ab:09:c8:82:9c:85:0e:bb:
ad:e9:3b:c2:7f:cc:8f:45:f1:44:7e:75:a9:e1:fe:
b3:74:a5:c3:7b:95:82:1a:2b:fc:ff:9f:f6:e8:20:
3b:51:01:3f:a5:07:4c:10:bd:36:d4:10:b8:c8:0d:
22:47:7d:62:58:32:af:b4:ce:5d:32:71:b3:f9:49:
a2:33:3b:01:88:21:18:01:88:08:28:42:4c:95:f5:
dc:4a:54:4f:6a:82:52:c3:39:e5:75:6e:30:36:ee:
44:8d:b8:d2:01:e0:59:60:a3:f0:b3:7e:72:9f:4d:
69:5f:a3:8c:a7:66:9c:9e:81:72:c8:06:1c:6f:a4:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:3E:29:15:AF:9E:60:F1:A2:05:A1:FD:22:1F:BB:5B:7F:C5:4D
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:5a:e5:ed:ee:c6:04:ed:02:30:fd:cf:81:06:ca:01:78:
72:01:2a:38:e3:76:97:a1:2a:97:a2:39:81:ee:82:03:7b:d0:
cc:9e:bd:ac:5d:f5:1c:54:55:3e:c7:a7:e6:5e:31:53:1f:db:
3c:ff:63:3b:96:e1:e9:21:50:9c:94:8b:49:69:47:26:ed:c6:
18:5e:8f:4d:8c:ea:c1:18:7b:96:37:8d:cd:d3:12:db:55:b6:
42:6c:7f:1e:3c:3d:19:e0:f1:e3:cf:4b:a2:d3:59:fa:71:76:
8b:80:f1:07:d2:8b:ad:45:89:bf:9c:a9:38:bc:4f:36:b4:77:
f4:62:14:75:0d:59:82:bd:12:46:46:09:ea:e2:e2:0c:16:43:
1f:b0:aa:b4:59:46:2b:15:c8:5e:68:f4:75:b6:6d:d2:c1:c6:
38:64:e8:72:42:2c:46:85:2d:8b:72:c1:8d:98:66:75:85:06:
ee:59:f1:fa:07:1a:cb:d4:ed:a2:09:15:cd:21:e6:6e:71:d8:
8c:62:ec:b8:3f:61:a7:39:49:73:a0:eb:04:a5:a1:a5:3b:b1:
ba:4b:db:9d:91:3b:8c:84:94:50:8f:60:f1:d2:39:77:d0:6b:
be:64:49:f1:0b:4a:55:05:d5:45:2c:40:90:35:d9:cd:6e:97:
0a:33:18:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:50:08 2026 by rpki-client