Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: A1tTmSxfe3CKGAwKWoIDkmT0vWJ8LVg2YwvtOF1JLVI=
Subject key identifier: 18:40:3D:0E:EE:81:88:24:B6:B8:91:52:B0:A9:1A:42:FA:6C:8F:E2
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 019FA606654F0DB2803D60B4B1395200C5F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 1718
Signing time: Tue 28 Jul 2026 00:01:04 +0000
Manifest this update: Tue 28 Jul 2026 00:01:04 +0000
Manifest next update: Wed 29 Jul 2026 00:01:04 +0000
Files and hashes: 1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: ZFG8bkNOYoVAmVwMOpQCDnyD3qLMcvKXNFRElCl/+iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 21:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:06:65:4f:0d:b2:80:3d:60:b4:b1:39:52:00:c5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Jul 28 00:01:04 2026 GMT
Not After : Jul 29 00:01:04 2026 GMT
Subject: CN=18403d0eee818824b6b89152b0a91a42fa6c8fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:cd:57:e2:6b:cc:45:63:72:f0:63:68:8c:
83:83:82:ca:ca:31:67:e5:92:be:61:85:23:d2:11:
70:b7:6a:96:11:3d:84:84:59:c6:b5:c3:b9:8a:ad:
4b:45:6b:03:6d:c5:b9:6e:49:71:6d:22:64:ce:70:
5d:39:76:28:b5:74:93:2e:e8:af:81:fc:b5:63:cc:
94:b5:52:ef:17:eb:6b:6d:77:4d:1d:21:ba:e5:91:
65:ef:16:a2:da:a0:82:c6:12:5e:18:27:ac:33:70:
d9:6e:cd:d7:15:b5:e8:b8:4d:58:12:18:cf:e3:b1:
71:2b:0e:70:f4:84:e9:e6:90:ed:dd:87:8a:9f:a9:
ab:28:ee:1e:d5:3f:2f:c3:54:c8:ab:c0:c0:5f:87:
31:41:14:d2:47:63:19:5e:e0:37:a7:c7:d1:6f:ef:
c6:b2:5f:74:5f:93:5c:b8:9c:17:0e:2b:b9:0b:c1:
e9:92:6a:f2:56:13:99:cd:e0:4b:a8:35:52:45:93:
fc:1a:f3:30:3e:f3:1f:70:a4:08:03:75:b9:c8:55:
c8:36:5d:c4:ee:68:b0:d4:ef:c9:84:53:0f:27:31:
fd:0d:95:28:6f:cf:9d:01:ae:91:64:c5:9b:fe:ee:
7f:b2:ac:d6:f9:9e:09:2b:f4:36:61:54:a7:d3:75:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:40:3D:0E:EE:81:88:24:B6:B8:91:52:B0:A9:1A:42:FA:6C:8F:E2
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:cd:da:39:39:d6:08:a1:0d:2a:85:be:0c:53:7d:97:c0:
a3:21:a9:c3:0e:f5:b4:85:85:91:a2:d2:10:d4:23:d5:fe:c1:
59:b1:ae:ae:cc:77:9f:18:30:02:bb:44:43:57:59:87:0d:c7:
e4:f0:17:51:b8:e1:f5:4e:52:18:7c:c8:d0:92:69:48:99:9d:
49:b3:e2:37:66:ea:55:f0:09:ac:0d:c3:c6:f5:95:d4:7a:fa:
81:e1:49:44:3c:85:52:7b:78:d7:db:0b:2c:98:7a:f7:5d:09:
c1:b2:78:bf:74:d8:71:55:d4:1e:24:cd:8d:d7:98:74:d4:57:
f1:5c:7c:59:30:9d:d6:4d:fa:01:fc:c8:d2:df:f8:80:62:7e:
75:dd:01:97:f6:c5:0d:5f:97:18:57:cd:98:35:50:06:40:2d:
ba:b8:c6:32:67:2c:70:d2:c6:8a:c2:bb:bc:f7:83:4f:fd:ed:
a6:b2:50:2b:f6:51:18:ff:c9:66:14:9a:d3:ba:a7:30:6c:fe:
e3:39:ee:8d:7c:87:48:74:08:17:3d:4c:c2:39:80:df:2e:71:
97:69:2d:a9:5b:06:2c:f6:74:4e:bc:40:1b:ec:98:f6:30:b2:
6d:94:41:4d:2c:a7:90:64:5a:0a:67:28:b1:4a:35:27:a2:f3:
37:a5:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:54 2026 by rpki-client