Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: bzCBfqJHQHcP2ZvH5a5T2+bmcAa/tQez3LQPhyAvp/k=
Subject key identifier: 73:C5:B5:0D:9D:E4:EE:69:C7:7C:DA:72:9A:93:34:35:69:97:58:4D
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 019F965BD58DDB891BC511A8D73A4F3CFC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 23:00:28 +0000
Manifest this update: Fri 24 Jul 2026 23:00:28 +0000
Manifest next update: Sat 25 Jul 2026 23:00:28 +0000
Files and hashes: 1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: nDutuN5BoKfnn/AfMCaXZ/wK33S8D1KV453rJ08NtPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:d5:8d:db:89:1b:c5:11:a8:d7:3a:4f:3c:fc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Jul 24 23:00:28 2026 GMT
Not After : Jul 25 23:00:28 2026 GMT
Subject: CN=73c5b50d9de4ee69c77cda729a9334356997584d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:ac:87:48:0b:6c:00:9d:e3:55:f5:ce:e5:
ad:2f:24:c8:8c:55:10:a3:13:9d:cc:5d:17:02:cc:
75:fa:a0:d5:d5:0c:20:93:37:66:0e:d2:34:79:e3:
61:c4:9b:41:4d:76:61:c6:19:8b:db:4a:4c:db:7c:
a1:25:1a:6f:39:2b:40:25:c1:94:ff:4e:00:26:49:
8c:79:b0:57:fe:53:bf:46:64:aa:ba:f6:26:c6:61:
0d:f5:01:17:65:20:bc:1a:0f:a4:95:2d:f4:80:50:
a5:c2:4a:48:35:2c:a8:2d:d3:c3:35:29:65:d6:bd:
3d:ac:f6:0c:b5:3a:7d:e7:51:71:f3:aa:ab:00:ab:
03:d2:7a:07:06:9b:e8:fa:43:ae:86:1e:19:38:11:
7e:61:7f:2a:f6:49:21:e9:2b:0d:60:98:8b:4d:bc:
36:68:b2:f4:d9:55:bb:47:18:85:f2:55:30:f4:68:
5d:c9:54:fd:04:7b:24:6b:49:d3:ac:76:4c:df:80:
9c:e0:1d:be:98:3c:fc:79:e4:9c:c0:91:b0:77:35:
c9:43:2e:cb:2c:af:c0:9d:85:4d:4c:cf:79:b3:ec:
17:af:b7:d3:9b:83:aa:a3:bd:4d:9b:dc:02:6c:d9:
61:cb:c3:9e:36:ab:a3:5e:27:ed:40:2a:c6:ba:c1:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:B5:0D:9D:E4:EE:69:C7:7C:DA:72:9A:93:34:35:69:97:58:4D
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:ff:44:27:ee:99:bf:e8:98:22:78:cc:bf:ed:d7:ad:ae:
65:02:3c:7b:32:d3:17:f4:54:99:e1:c0:c0:58:08:b5:0a:2f:
40:3e:36:92:b7:5a:34:5b:90:51:42:f6:cc:1e:90:75:02:ff:
81:01:1f:47:98:bc:b5:fb:35:ad:83:c4:dc:99:39:17:7f:16:
01:de:9a:1c:06:1a:8b:d7:74:f7:b8:b3:8a:e3:ef:70:b2:7f:
0c:a7:1b:e8:15:ab:72:1b:34:7f:3c:4b:2d:ac:45:8e:96:8f:
a3:a7:6c:79:bb:4c:03:a7:89:8c:ef:f5:93:e5:d6:f1:e0:07:
ea:18:df:4f:86:74:ca:74:b5:1d:3e:98:2e:cf:fe:1b:db:65:
4c:bf:27:e9:0d:b8:cf:19:df:d2:d0:d2:4a:f7:03:0c:33:f9:
eb:fa:2e:1b:8e:96:77:92:e4:21:fe:24:b6:8d:02:b0:44:04:
6a:3d:4e:43:d3:3e:54:e9:f1:dc:3b:b4:73:1e:43:3a:6f:97:
53:0e:5c:e1:ae:b3:a6:23:5d:d1:3c:40:65:c9:c8:88:ac:e5:
c4:99:7c:83:5b:36:0c:9b:bc:e5:41:8d:60:28:bf:4e:58:6b:
80:94:1e:a0:25:6d:78:4d:a3:25:9f:52:c9:6b:ff:15:6e:e8:
34:40:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:16:47 2026 by rpki-client