Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier: MOb2jLA7dc1LeS/yzZyzWVNFPAUwpqPqEFBsCKS7908=
Subject key identifier: CA:B8:89:A2:B4:91:37:AF:A0:7F:A4:84:D0:4B:BA:F4:E9:41:B0:A9
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer: /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial: 019F8531231C2B707F51A9003673A6C120DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 15:00:17 +0000
Manifest this update: Tue 21 Jul 2026 15:00:17 +0000
Manifest next update: Wed 22 Jul 2026 15:00:17 +0000
Files and hashes: 1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: qggk8IED41Ranxa9WyUx5ia8QAWEg/ae/iNBS0Tu/Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:23:1c:2b:70:7f:51:a9:00:36:73:a6:c1:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Validity
Not Before: Jul 21 15:00:17 2026 GMT
Not After : Jul 22 15:00:17 2026 GMT
Subject: CN=cab889a2b49137afa07fa484d04bbaf4e941b0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:e0:02:16:b4:78:29:76:a6:71:17:d0:77:
5f:9a:0b:6f:df:2b:40:01:12:8f:2f:b4:94:55:93:
5d:8b:c5:b5:40:a3:de:99:b5:0a:f2:f9:51:2a:77:
5c:4b:f3:50:33:8e:fd:0d:74:5e:6c:a1:2a:9b:92:
3d:7d:72:68:3b:77:85:df:15:24:48:41:a9:fc:6d:
ca:dc:73:b2:38:e2:73:5b:48:e0:55:a5:88:16:3e:
bf:57:15:a7:59:af:e5:35:e8:eb:49:af:c5:0a:2e:
62:c0:2a:66:1e:75:ec:f7:3f:35:77:ea:bf:25:43:
bc:06:b8:ed:14:ce:ce:15:b0:c5:1c:6a:be:af:57:
fb:f2:de:a4:32:84:66:02:d0:f7:3c:29:7d:a7:4d:
34:55:2b:dd:7a:a3:ec:6d:e0:3c:37:55:c5:37:8d:
cc:ba:3c:29:2e:58:74:1f:8b:82:9a:3e:29:92:23:
68:43:0e:92:78:62:f8:ca:38:14:9f:ce:62:d6:9f:
01:13:a3:a1:75:24:fa:aa:68:41:4c:64:77:d5:54:
20:0e:15:e8:b1:9c:9c:79:51:ee:5a:a1:91:b7:e5:
a7:eb:4c:98:c2:0c:28:27:ae:93:77:63:56:0a:5f:
72:2a:2c:ff:46:49:2b:09:15:b0:80:37:8a:bc:9d:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B8:89:A2:B4:91:37:AF:A0:7F:A4:84:D0:4B:BA:F4:E9:41:B0:A9
X509v3 Authority Key Identifier:
keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e5:0d:52:b6:db:45:66:94:81:80:f1:50:14:15:8c:c3:8a:
b8:fa:de:5c:bb:5e:2c:b9:ec:0e:e8:ec:aa:bc:1c:17:77:e0:
d7:d2:78:6e:f8:4a:81:94:35:7e:68:bd:76:45:40:26:1a:d6:
7d:02:36:50:d5:91:24:51:15:e7:27:47:f4:9e:2b:b8:61:16:
09:8f:44:4e:ca:8e:f9:73:40:98:33:9e:a3:39:28:69:67:4f:
77:d1:12:1e:7b:2c:58:42:dd:25:1c:5a:3e:b0:e3:9e:d5:23:
59:58:94:47:4e:84:4c:ce:e6:fc:a8:96:33:92:0c:4b:50:b0:
a9:7d:8f:3b:a6:8e:7c:82:be:e2:70:dc:f1:fd:fb:5a:6a:56:
64:c7:94:ba:60:8f:08:4c:d2:c8:60:63:91:e8:f2:8d:7f:49:
fc:f4:a5:69:99:06:71:02:15:b0:8a:59:98:b3:ae:02:48:bf:
9c:9a:30:90:41:e6:4f:92:77:6f:86:f6:5b:90:6b:89:49:c3:
e9:6d:da:eb:fd:73:7f:ab:0e:a4:7e:d9:04:80:73:ed:8f:6a:
95:fd:7e:3d:5d:56:bd:5e:3c:e4:0b:d5:e4:e7:43:72:84:40:
99:d0:69:3d:45:65:94:71:d4:a0:48:b4:81:26:ca:9d:6c:58:
8d:51:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:43:41 2026 by rpki-client