Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: 0AGHGOSODhad2hZgEPf5Hls9HunZzq3JJ9jZA5O0/dM=
Subject key identifier: 3D:BB:DC:2A:B1:4E:93:73:20:A6:56:2A:C7:AB:80:8B:83:CA:BB:E3
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019EF9B9A0877AF9CAFA207EB14C616BD464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 197A
Signing time: Wed 24 Jun 2026 13:02:32 +0000
Manifest this update: Wed 24 Jun 2026 13:02:32 +0000
Manifest next update: Thu 25 Jun 2026 13:02:32 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: OhD5ZJ7UikY2OB2613pOSGhblmKLnQGW2iQhHp6A0yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:b9:a0:87:7a:f9:ca:fa:20:7e:b1:4c:61:6b:d4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Jun 24 13:02:32 2026 GMT
Not After : Jun 25 13:02:32 2026 GMT
Subject: CN=3dbbdc2ab14e937320a6562ac7ab808b83cabbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:56:d9:7d:a7:41:69:a9:0d:23:c6:95:d4:
2d:05:6c:27:6a:20:b2:4a:75:24:49:85:6a:d7:60:
f2:2f:1b:e6:10:04:3b:24:24:3c:36:8d:fc:55:2d:
de:59:cf:a4:80:53:73:f7:eb:ce:89:39:96:60:cc:
fd:95:00:3b:0c:3f:f2:63:cc:a8:48:9c:c9:64:3f:
85:52:9f:c0:ab:de:52:9e:66:64:31:2f:b7:aa:af:
6b:76:43:99:0d:42:8a:c1:40:d2:e0:05:1a:14:81:
99:21:ae:a1:43:2e:f8:f7:ad:4b:ac:5a:ac:e5:99:
3a:9b:57:b6:c0:65:41:f8:f1:b5:df:21:b9:d5:de:
45:d1:1b:d6:06:64:8f:f3:09:b2:52:41:16:cf:d8:
a1:e6:0f:e7:2f:64:54:b4:8c:bd:89:90:c6:0a:8c:
9d:ce:55:9c:de:1a:18:00:9e:cf:e0:a6:15:4e:a1:
a6:d2:bd:83:60:85:2b:04:3d:cb:8b:3a:36:a4:da:
18:49:21:34:f6:30:50:a1:7c:83:ab:41:e0:c4:f4:
11:95:e7:0c:c7:a5:4c:26:e4:d6:83:5e:f6:34:0e:
8b:73:b6:03:bc:e2:93:83:d0:92:aa:cb:ee:d0:fd:
f0:27:ce:2b:91:4e:06:96:18:e4:50:fe:48:c7:71:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:DC:2A:B1:4E:93:73:20:A6:56:2A:C7:AB:80:8B:83:CA:BB:E3
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:08:f7:cb:71:86:ed:c6:73:0f:58:78:a5:1b:25:2d:83:1c:
28:43:fc:fb:bd:10:8c:c2:30:94:0a:04:53:c1:b3:71:de:45:
01:20:aa:a2:bd:d3:d2:06:17:eb:97:f0:73:27:5a:ee:f9:94:
e2:c0:60:a6:64:97:31:01:e4:df:c9:a8:b5:eb:03:57:e4:cf:
60:ac:c6:11:1b:d6:e1:f0:01:94:84:4f:1b:fe:62:db:70:04:
4c:2b:04:09:11:16:fb:b3:dd:92:8b:96:56:1a:70:fa:ec:3e:
25:af:78:be:4d:84:ab:0a:47:38:f6:0f:56:37:38:c4:4a:ab:
47:aa:12:4c:c7:c5:cf:b8:c6:5d:ca:09:50:66:8a:a0:23:d2:
77:39:69:f5:29:5c:12:79:cd:ad:17:f4:ca:cd:e4:82:a2:85:
1b:b5:ae:f8:a9:4c:b1:06:2a:6a:f6:7f:6b:74:33:b3:04:08:
f9:11:e3:7b:b2:42:3e:a7:d3:4b:cb:ea:fc:3b:c1:5a:23:f7:
7a:85:c4:16:61:14:e4:bf:0f:23:a0:1b:03:60:38:d3:a0:11:
d0:a8:60:f7:d9:99:2d:02:9f:69:49:2f:1e:e6:d5:e4:5f:2e:
18:de:73:e4:f8:ac:53:dc:68:4a:c7:6d:96:13:e5:e0:20:6b:
78:9a:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:17:24 2026 by rpki-client