Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: wSMHgODGUBQYivkVxWeucwACRQV1gGXxeqExFV82xjE=
Subject key identifier: 2B:9B:43:69:FF:19:16:73:D9:0D:C7:45:EC:42:2E:95:AE:61:02:35
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 019F3829E6BB8C05F71B7C6E73F58421C756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1994
Signing time: Mon 06 Jul 2026 16:01:37 +0000
Manifest this update: Mon 06 Jul 2026 16:01:37 +0000
Manifest next update: Tue 07 Jul 2026 16:01:37 +0000
Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: x63tB1lZcHr0JA8A2409Fy0HkWl4eDmb58T1wCusrIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:29:e6:bb:8c:05:f7:1b:7c:6e:73:f5:84:21:c7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Jul 6 16:01:37 2026 GMT
Not After : Jul 7 16:01:37 2026 GMT
Subject: CN=2b9b4369ff191673d90dc745ec422e95ae610235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:a5:dc:35:4c:69:a3:7a:25:c1:fc:ce:b5:
bf:27:7d:58:d5:c6:78:2a:61:64:12:e7:69:22:e5:
64:2d:cd:0b:bb:97:d2:8c:9d:c6:d3:0a:00:2c:75:
96:ad:fe:53:87:a2:28:a3:14:6b:c6:72:c8:ec:ab:
f4:11:09:33:f1:57:f0:ae:ef:76:d5:f0:c7:a1:2f:
db:7d:4a:b2:26:d8:55:7c:a3:10:ad:f2:0a:b9:7d:
3b:8e:f8:ab:73:94:2a:e5:3b:0a:e6:a9:6f:d9:51:
5d:50:c2:17:4a:78:d5:e5:3f:63:fa:48:1e:4c:25:
de:90:ed:fe:b3:da:b4:66:51:25:17:80:1c:87:1f:
3b:58:05:23:8e:76:fc:bb:52:78:d2:53:07:eb:13:
54:29:a4:6e:42:24:7f:28:85:4d:dc:77:d0:d0:1f:
15:1a:bc:b6:b7:1a:4a:2c:99:8f:e7:14:36:bf:3c:
4f:52:16:4b:c9:15:3c:2e:0b:48:b1:84:d4:de:50:
6e:c1:ac:3d:32:26:07:99:c4:4e:30:af:9a:01:93:
bd:7c:7c:86:f9:82:fc:74:c5:3a:e2:dd:2e:20:23:
54:04:40:e1:04:63:81:67:41:60:20:e6:8d:8b:8d:
f1:1d:bd:ea:9e:12:e0:3b:13:7e:5f:97:b7:37:09:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:43:69:FF:19:16:73:D9:0D:C7:45:EC:42:2E:95:AE:61:02:35
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e9:b5:3d:99:6c:69:18:36:fa:36:58:1a:43:3b:d9:ac:ef:
58:58:0d:bf:36:82:bb:29:86:49:4a:7f:c1:f4:ef:83:b9:7b:
fa:51:25:bb:db:0e:eb:dd:38:b3:dc:a9:ac:e2:f4:35:e6:00:
e6:27:b2:15:71:18:25:c7:85:2e:cd:fe:78:b0:2a:64:99:3e:
e5:a4:96:db:dc:70:8e:73:14:3f:c5:5b:a8:b9:8c:a0:16:90:
79:d7:ce:9f:60:4d:d1:75:56:d7:77:fc:82:d8:a4:94:70:b8:
71:a9:0f:56:7a:85:1c:f7:8c:a3:06:b5:71:41:1d:8f:4e:ea:
e7:64:3a:1f:82:18:43:31:0f:b3:cf:83:a1:87:e8:f8:f4:8a:
f3:db:4f:7f:e2:dc:53:9d:81:e7:dd:69:ae:e2:4f:17:23:6e:
7e:d1:4b:b5:c2:32:eb:af:81:81:4a:9a:9a:27:2b:71:fa:87:
89:d7:8f:0f:cb:e2:9f:98:12:7a:06:e6:ff:1a:e3:4d:2d:8d:
ac:3e:e2:96:04:98:ba:f4:87:58:1b:10:8b:bb:fa:1f:5f:4b:
32:cb:e0:fa:3d:2d:78:7e:ce:15:48:f6:fe:23:b9:5e:4c:8b:
79:5b:f0:e4:7e:b2:b6:3e:6c:69:3f:4d:be:db:fc:83:d6:80:
37:a9:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:39 2026 by rpki-client