Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: Xd090Sdduk9xqMPzeonZeVp+pMADmiwKNAoHVD9UtR8=
Subject key identifier: 50:29:AA:90:CA:C4:5B:70:E0:1C:12:CB:0D:9E:C6:2E:29:ED:B2:A6
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 019F11C0D9433F040FBDC2C5C7F653C82485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0640
Signing time: Mon 29 Jun 2026 05:01:18 +0000
Manifest this update: Mon 29 Jun 2026 05:01:18 +0000
Manifest next update: Tue 30 Jun 2026 05:01:18 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: POdBPetkCeR0Rt8Vi2B7eYLcEVzvUwexVxusAm9goJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:d9:43:3f:04:0f:bd:c2:c5:c7:f6:53:c8:24:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Jun 29 05:01:18 2026 GMT
Not After : Jun 30 05:01:18 2026 GMT
Subject: CN=5029aa90cac45b70e01c12cb0d9ec62e29edb2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:63:40:f5:26:a3:bc:91:1a:ab:d1:de:28:
97:b8:8d:28:11:5e:47:9e:03:85:ea:c6:b1:57:ab:
2b:95:26:44:be:6d:ad:51:9e:4b:24:7e:a0:c2:10:
a5:43:67:da:8a:64:b7:cd:6b:91:32:f4:85:5d:6c:
d4:c3:71:3a:ed:14:0a:51:7c:24:a1:00:6e:81:e8:
4f:d4:84:53:ca:1e:3f:cd:75:1f:7f:f6:83:6a:38:
80:63:0a:38:72:60:5b:7c:b5:62:39:e7:99:f4:bb:
9b:1e:20:f0:ed:87:c8:4b:fc:d4:29:c8:62:8a:ed:
3a:6a:8f:bc:02:21:f0:6b:0f:e0:88:bb:e1:8f:5e:
90:3f:cb:86:7e:3c:96:21:4c:1a:88:79:7d:d9:1d:
36:85:18:52:3d:ef:f5:8d:8b:28:4d:5e:20:8a:da:
e1:c1:24:0e:8e:40:38:fb:e6:ce:02:2c:40:cb:d9:
9f:9f:12:e9:a6:dd:65:b5:85:34:41:37:ca:da:50:
99:f3:34:5f:6f:64:fc:07:a2:33:25:b4:d8:2a:c3:
0a:24:2a:dc:0a:f1:ec:1b:b7:a6:81:03:42:7a:b9:
bd:e1:31:53:f0:c0:9a:a3:3b:33:44:ec:7a:41:f0:
55:a2:e6:b1:fc:f8:95:5d:76:47:8b:a6:8f:d5:38:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:AA:90:CA:C4:5B:70:E0:1C:12:CB:0D:9E:C6:2E:29:ED:B2:A6
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d6:57:d6:ae:e0:45:b4:2d:a4:cb:79:e9:10:36:18:99:f8:
e4:da:13:6b:87:3c:06:94:ef:be:3b:b8:5d:c8:c8:6c:9e:5a:
ed:fe:3b:ae:40:b0:48:71:27:61:bd:02:d9:21:3f:64:77:f2:
46:5c:e6:53:3c:65:2c:f1:4e:48:b2:c3:0f:97:b9:26:f7:77:
49:04:2c:cf:c9:0d:e8:2e:c7:c3:8a:33:12:09:3f:9d:57:16:
a6:6a:d1:ce:75:45:eb:f7:7c:be:8e:86:01:77:2b:02:b0:1c:
f8:5f:bd:d0:2a:d5:61:3e:e5:ee:34:94:09:b7:f7:44:3e:7d:
61:2e:9f:2e:53:63:1d:cf:20:05:7a:85:73:f4:42:66:bd:ea:
e2:5d:80:c5:99:19:20:f4:ab:26:b0:a8:cf:71:57:72:78:6a:
06:a7:63:48:7c:3c:a0:5b:49:2d:2e:1b:e7:36:52:86:0e:9a:
ea:c4:85:8a:67:df:df:97:d9:38:aa:ef:f1:9b:20:51:5f:63:
2f:d4:51:dc:f3:1d:9f:e2:ee:31:74:bd:59:66:c3:53:33:91:
41:4a:33:15:d0:d3:14:da:f1:a7:e5:ef:5a:93:c4:6b:20:22:
8d:be:b8:58:cf:29:b4:14:e8:70:48:d9:6a:1c:35:3a:51:1b:
53:49:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:01 2026 by rpki-client