
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: bqkBKpBmJx8zd63k3AJTr94aqLe8sqxr1Yx/ZyaC8CQ=
Subject key identifier: 0E:F3:71:30:9C:3D:4F:19:D5:B6:35:BA:90:3D:8B:D7:F3:7D:DB:F0
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 019F83E7B11A4548CDE501808624BED6B39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 05DA
Signing time: Tue 21 Jul 2026 09:00:27 +0000
Manifest this update: Tue 21 Jul 2026 09:00:27 +0000
Manifest next update: Wed 22 Jul 2026 09:00:27 +0000
Files and hashes: 1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: aA0+WUKs4kkCavcSGcZM3TKcRhMTlsAQLtWSyVa5LRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:b1:1a:45:48:cd:e5:01:80:86:24:be:d6:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Jul 21 09:00:27 2026 GMT
Not After : Jul 22 09:00:27 2026 GMT
Subject: CN=0ef371309c3d4f19d5b635ba903d8bd7f37ddbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:a6:1f:d8:e0:51:4a:84:fc:63:56:5f:37:
80:cc:70:c0:1b:5f:d1:00:6c:68:e6:04:fc:a2:7c:
8c:9c:c9:0d:1d:18:29:78:ae:02:f5:e0:60:7d:f9:
e5:f1:75:04:a5:f4:51:a1:00:dd:85:ce:b2:64:75:
55:ef:8f:dd:ef:5c:95:67:1e:c5:a9:05:4f:6a:b5:
18:21:4b:33:c3:6f:f6:3e:37:1f:fb:85:b6:ae:db:
76:c2:d7:70:8f:51:92:ab:ba:e2:e3:8b:4f:bf:20:
8a:9b:f9:ca:c9:89:01:21:ae:17:e7:e0:76:26:8e:
87:86:d8:d9:27:bf:23:aa:25:eb:a1:24:94:e0:89:
b1:1d:26:8e:43:c4:3a:1b:92:67:cf:c5:e1:6e:1b:
bc:8b:90:de:5f:0f:72:d2:2f:d1:ab:6c:86:20:3d:
7f:5d:c4:ab:4d:d6:c2:27:ca:ac:55:99:6d:d1:73:
80:e6:ed:ef:e6:46:58:36:f2:55:be:e1:4c:56:3d:
70:2c:2e:3b:61:e2:60:99:cd:c3:2d:f9:b0:91:c8:
06:78:06:51:d5:c9:65:39:28:56:c9:ec:7d:d9:e6:
cc:bd:a7:18:64:dd:13:38:c1:32:24:61:9c:4e:4d:
72:6a:07:0c:40:81:16:9f:39:c9:d2:b2:f0:99:60:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:71:30:9C:3D:4F:19:D5:B6:35:BA:90:3D:8B:D7:F3:7D:DB:F0
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:3c:0f:aa:62:a0:3b:9e:a6:14:9b:9e:1b:35:c5:b9:54:
09:58:99:29:ae:c0:4a:e1:1d:3f:55:d2:e3:5f:08:06:29:d3:
de:3e:be:c6:74:2f:1b:1b:9f:fc:c8:23:02:1a:57:bc:de:36:
da:5a:26:7e:1b:22:30:20:69:af:7b:17:ae:4f:ee:b3:83:0f:
80:17:a2:9a:a1:60:12:c3:6e:64:81:c9:4d:02:d0:18:4d:46:
5d:85:9d:79:84:83:ee:6d:12:a6:83:d7:d3:de:8d:a9:fb:fa:
b4:f9:f0:d5:3d:52:4d:fc:3c:b9:a5:92:ee:75:b3:f7:19:dd:
b7:3e:65:cf:73:db:df:28:d8:fc:99:cc:cb:43:b7:44:fd:06:
4d:8a:92:16:d2:ad:c8:9f:22:2e:b5:d7:75:f0:9c:a1:2c:2b:
27:b3:f8:10:b3:d3:c3:71:08:00:6e:c4:f5:5a:1e:bc:0b:98:
6f:2c:e2:2e:41:ae:ce:08:03:bc:72:c9:0a:b3:a9:1a:8f:22:
24:d3:23:fd:7b:f2:82:bd:8d:fe:05:79:b7:dc:73:31:05:8a:
f7:e8:f4:c3:ce:25:3b:b5:99:b1:3b:de:1c:ee:d6:87:9e:bd:
8c:1b:c3:92:0a:41:8a:53:9e:92:a3:b1:25:09:60:a0:a1:de:
82:49:ca:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:19 2026 by rpki-client