Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier: 817LLIyBusksJgWhUGx7MFRYpnEMMhY1IBqZIxt9Pkg=
Subject key identifier: 09:EF:01:70:9B:0C:B0:BC:94:99:6B:E6:E2:F7:BD:CF:64:AE:46:74
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 019FA1BBB31A556AE966F27738C9921AF03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 04:01:00 +0000
Manifest this update: Mon 27 Jul 2026 04:01:00 +0000
Manifest next update: Tue 28 Jul 2026 04:01:00 +0000
Files and hashes: 1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=)
2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: oA/4ehCajvOFFwoF+bJFKbgx2d02ltW3fpQgFFQtlfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:b3:1a:55:6a:e9:66:f2:77:38:c9:92:1a:f0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Jul 27 04:01:00 2026 GMT
Not After : Jul 28 04:01:00 2026 GMT
Subject: CN=09ef01709b0cb0bc94996be6e2f7bdcf64ae4674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:73:46:ca:1c:ae:1a:58:e1:4c:ab:50:45:
90:c4:70:bf:ff:da:17:0b:f6:10:c9:36:7e:3e:24:
f2:95:95:e1:ce:cf:34:a8:98:7c:99:c5:8e:17:c2:
61:98:34:e5:e2:bc:24:8d:1c:17:50:48:53:0d:73:
04:9c:32:82:4e:09:8e:5d:7c:64:fd:24:f7:09:a3:
21:1a:6f:a9:45:61:77:92:3d:b0:8d:95:c1:46:4e:
09:56:dc:fd:5f:a4:cb:bd:9a:81:a6:8f:99:88:7d:
ad:6c:8e:cc:46:be:af:36:46:d0:3d:84:f8:82:ee:
bc:27:20:fb:1a:d8:8e:31:de:6b:9d:e3:9a:16:2e:
00:ae:83:86:09:b1:a3:13:6b:af:0a:04:b8:48:e5:
30:02:5a:2d:b7:ad:e2:ce:bd:e9:92:a4:52:c1:b9:
2a:47:d7:06:0c:29:bf:dc:df:79:8d:26:87:aa:bb:
66:be:fb:c3:5c:2a:b9:81:89:50:80:84:66:52:a6:
8d:cb:fb:ee:80:77:0a:cd:c8:21:f9:9b:2b:d6:49:
39:9b:b1:e9:3f:d7:c5:89:f8:f0:91:63:b3:64:73:
43:72:c5:76:a5:79:05:4e:dd:9b:aa:0d:57:3d:cc:
c1:e7:70:3b:94:49:df:4d:58:35:71:6d:73:4e:38:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:01:70:9B:0C:B0:BC:94:99:6B:E6:E2:F7:BD:CF:64:AE:46:74
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:1b:f3:52:ce:d3:49:f8:67:df:ca:4b:e4:b1:aa:68:6c:
cd:bb:0c:35:a6:b3:25:93:07:71:75:d8:e8:9e:81:15:92:3a:
bb:8c:e9:66:38:8f:b2:fa:b9:d5:5d:89:07:2e:21:23:33:01:
f4:8d:f7:36:1d:8c:70:7a:53:af:43:40:95:b7:22:2d:c8:04:
c9:5d:7b:00:b9:62:aa:ea:60:e3:75:28:04:a9:c9:46:ec:cb:
da:6e:b2:26:0b:e5:93:45:13:ea:84:84:61:7c:ad:7e:b1:2f:
e8:19:50:58:11:4c:a7:76:8c:a7:42:7c:82:16:b1:51:3f:d7:
d8:3a:81:3e:b9:b8:da:fd:c3:1a:c4:5f:4e:7f:a9:bd:8b:42:
c2:58:4c:48:50:2c:ef:5c:47:be:41:b9:5c:9c:8f:39:89:9a:
35:4b:16:39:51:89:2d:e6:f2:79:e1:d1:72:d8:38:1d:09:fe:
aa:74:3b:29:5a:01:31:8f:30:e6:9e:83:2e:7a:eb:4e:98:62:
86:2b:a1:56:f9:b6:13:8c:00:e2:6c:09:cd:8e:71:d5:1f:61:
e0:dd:a1:75:02:7d:59:b5:85:6d:70:ae:fa:7c:9a:39:fd:2f:
bd:00:c4:93:2a:10:b5:13:37:27:12:2f:57:f3:0a:30:36:f4:
b8:02:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:57:53 2026 by rpki-client