Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: nBsSpxAWNdZ1oDnkuL5aeMlvZHI+WSE080k6mxpKzo4=
Subject key identifier: B8:C1:80:4C:99:0E:3D:3E:8B:4A:D9:D7:5D:7A:E5:FC:DB:18:0D:F0
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019FA0DFCF0795294D208AF22224CE758D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 00:00:49 +0000
Manifest this update: Mon 27 Jul 2026 00:00:49 +0000
Manifest next update: Tue 28 Jul 2026 00:00:49 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: A5LY4zPAPGTBBVqJlgA53NjDsshLkBjhmUtmdurNoA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:cf:07:95:29:4d:20:8a:f2:22:24:ce:75:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jul 27 00:00:49 2026 GMT
Not After : Jul 28 00:00:49 2026 GMT
Subject: CN=b8c1804c990e3d3e8b4ad9d75d7ae5fcdb180df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:3f:5f:96:6c:1f:9e:74:18:9d:51:dc:e6:
07:85:c2:97:7b:f2:bf:23:02:55:92:e3:57:f2:e8:
d2:e2:c2:28:d5:b1:45:57:1d:e2:77:55:44:f2:4b:
01:ed:ca:96:1d:06:64:8f:64:a7:d3:5c:20:ea:60:
95:83:4d:09:e0:7d:da:3c:26:b5:23:dc:e4:45:8b:
59:8c:4f:09:1f:a0:67:93:01:b0:c5:5b:44:e3:4f:
09:91:43:73:2c:5f:52:dc:5e:89:3f:4e:13:92:f8:
ab:8b:85:82:fc:45:fd:98:1b:3e:21:58:54:74:90:
ef:3c:e5:f9:dc:b0:8c:ba:1e:b0:af:ac:3a:91:fb:
fb:06:11:c7:2f:3d:8c:93:e7:22:73:97:6b:f8:f3:
c1:6c:03:4a:ab:37:42:53:ea:58:2a:d7:d3:4c:18:
d4:d4:df:1b:93:a3:9a:a5:e6:bd:7f:9f:b3:58:b7:
08:ca:aa:1b:33:14:5f:3e:df:5f:3e:ec:43:50:5d:
9b:4f:7b:f1:3a:c6:4a:fe:6a:33:71:f1:c5:23:ca:
c9:0f:89:c6:28:bb:a6:b7:74:a3:fb:7c:8b:8b:e7:
2e:df:5b:f0:b8:e3:f9:94:96:49:4b:8d:23:20:39:
65:ea:0b:c8:b0:c4:2b:52:10:40:ff:31:8b:f0:44:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:80:4C:99:0E:3D:3E:8B:4A:D9:D7:5D:7A:E5:FC:DB:18:0D:F0
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:10:9b:55:23:8e:2a:e7:e4:a8:8f:e4:52:8c:41:95:3e:dd:
8e:91:27:b8:a2:e7:fe:99:96:b9:a3:5a:18:33:90:29:a2:e3:
00:9a:f0:18:f7:fe:f7:37:f9:60:3d:36:10:78:45:c8:1a:76:
cd:72:76:8e:8f:91:5e:8a:69:5d:c1:1e:db:3e:c6:5f:86:fa:
3c:4f:e8:17:c7:22:69:fc:28:48:bb:85:73:7b:06:13:1a:51:
f3:5a:cb:63:bd:18:3c:2b:0b:9d:6b:14:55:43:7e:f2:49:f2:
31:a9:dc:28:b4:16:a4:59:55:0c:cb:1c:da:15:ad:de:8a:d3:
37:a3:bc:a4:6f:9a:2a:44:87:42:7c:4a:9f:50:b3:79:f7:c4:
e6:ba:4d:95:bc:ef:2d:1c:39:c9:b6:f4:8d:3d:3a:b7:b0:39:
5b:f5:3a:30:68:7f:68:c9:59:87:34:87:b0:74:6e:69:df:ab:
19:58:1f:e1:2b:26:8b:79:ea:87:d5:9c:aa:b8:fc:1a:55:f7:
d0:17:d9:50:55:94:3e:d9:1a:3c:df:16:12:d2:35:24:a3:7c:
ea:cb:5a:bb:4f:05:c7:4a:63:72:48:f6:d2:ea:b0:86:17:df:
4c:18:5e:84:d2:60:c5:36:9c:c0:0d:3e:a8:f7:46:2e:eb:af:
0b:17:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:04 2026 by rpki-client