Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: 2nZZyceFQjGeT53D9EselU+4vtJg7Y5dxhV9Wyh/JmQ=
Subject key identifier: C1:18:3F:7E:D9:2A:7B:3A:02:8F:A3:51:E7:AE:D3:46:98:7A:F0:02
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 019F1A1F7CA3FF27CB6821F45521C2E6E0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0AA7
Signing time: Tue 30 Jun 2026 20:01:38 +0000
Manifest this update: Tue 30 Jun 2026 20:01:38 +0000
Manifest next update: Wed 01 Jul 2026 20:01:38 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: 9oCgiZ6Ybae+7OrdziR1zBEd11YOZIpjsRK9RLNIb94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:7c:a3:ff:27:cb:68:21:f4:55:21:c2:e6:e0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Jun 30 20:01:38 2026 GMT
Not After : Jul 1 20:01:38 2026 GMT
Subject: CN=c1183f7ed92a7b3a028fa351e7aed346987af002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:38:f9:26:0e:f1:90:c8:7f:cd:cc:45:7f:
70:19:6c:ce:cf:43:0c:62:ee:bc:e0:88:f6:45:25:
b2:c1:f2:0d:26:5c:12:6d:da:6e:e8:9b:17:0b:5f:
7d:52:00:c7:39:9b:7c:ef:c5:6f:c1:ea:7f:1e:6f:
7a:c0:d1:0a:cc:b9:7d:b3:82:66:09:e9:fd:8c:57:
fb:19:41:9f:a3:c7:92:60:0a:f0:3f:92:83:c4:4e:
c3:2e:3e:0e:72:4b:b1:07:ad:37:78:9d:fa:ad:3b:
b8:e7:a8:8d:b7:5a:87:2f:47:8a:1b:96:33:8c:d1:
ff:cf:4f:24:17:e1:d4:39:a4:cf:c1:04:6d:a1:ea:
48:a6:cb:94:b7:ee:7c:eb:0c:a4:33:9e:27:a0:6b:
bf:0c:11:29:05:24:09:d0:8e:81:52:90:30:ae:07:
ba:e0:d0:5b:97:06:80:d6:51:cb:c9:3d:03:43:f9:
3c:a2:59:7d:1b:4c:81:e3:79:0c:07:79:df:f9:90:
2a:be:63:89:81:51:e5:e5:dd:ea:08:c6:9f:15:58:
f4:97:e3:7d:1a:1f:d5:99:3d:35:47:db:e1:22:c2:
0e:26:17:12:b1:38:6f:0c:b6:f6:ea:2f:15:ef:6c:
99:94:dc:7d:8d:3a:b6:0e:0c:4c:d7:7e:22:22:fb:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:18:3F:7E:D9:2A:7B:3A:02:8F:A3:51:E7:AE:D3:46:98:7A:F0:02
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:98:6c:73:d1:4d:ec:6a:ef:e5:ba:8a:f0:99:87:28:31:e0:
37:c5:b6:dc:d3:b9:4a:e0:85:b9:e4:6d:aa:f6:a0:d5:77:bb:
98:88:4a:7f:70:4f:de:80:84:2e:ae:30:7e:fc:f9:bf:71:4b:
fe:e8:40:26:3d:23:8a:ec:99:63:44:56:08:0d:db:42:7b:1b:
b2:70:66:63:1f:d3:51:01:22:f2:73:ce:63:9f:77:0c:68:e3:
a4:fa:64:e3:2f:f5:57:43:9d:a5:4d:71:a5:98:03:54:ef:3c:
aa:46:15:15:93:26:12:d3:33:5d:c5:5e:44:d7:b9:1b:80:a9:
b6:9d:24:32:f0:0c:bd:03:b9:5d:e4:12:b5:8d:6e:49:14:d8:
db:bd:36:6c:f2:91:e0:68:d4:e2:cc:b6:b4:1f:df:82:bc:25:
36:e9:2d:64:32:29:30:86:10:f4:24:2c:8d:16:c0:04:27:85:
5e:26:5b:c1:66:43:18:10:16:9f:f7:75:25:0b:9e:a1:8c:ee:
f6:dd:75:7e:7e:61:c5:bd:b5:73:62:57:90:d1:5f:a0:bf:2f:
9f:84:a5:a2:48:f7:94:de:2f:d5:d1:cd:79:e8:ce:90:70:b0:
73:13:e4:07:27:92:45:c6:b9:4e:e4:42:24:b3:b1:a3:3e:6c:
eb:c6:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:35:41 2026 by rpki-client