Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: TjxlUz9Hj4Bke35Vhv3a6vQJkHa4WHuVH/zztSvzABs=
Subject key identifier: 8F:35:EA:2D:87:52:2E:55:1F:53:58:8C:CF:75:23:3A:D5:97:D9:78
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019EB921B3DDB91512D27F366471A5EA86C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 195A
Signing time: Fri 12 Jun 2026 00:00:54 +0000
Manifest this update: Fri 12 Jun 2026 00:00:54 +0000
Manifest next update: Sat 13 Jun 2026 00:00:54 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: iwnqWeq1u/vqWfN6NXTFv0gG2Ct0GxW9pkGDC1JJNMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:b3:dd:b9:15:12:d2:7f:36:64:71:a5:ea:86:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jun 12 00:00:54 2026 GMT
Not After : Jun 13 00:00:54 2026 GMT
Subject: CN=8f35ea2d87522e551f53588ccf75233ad597d978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:d3:e2:54:cc:dd:2e:1d:44:66:f2:fa:e1:
7d:ba:5b:17:93:a5:19:f6:d7:f6:11:ff:b4:7f:ed:
09:ef:18:13:7c:76:b3:95:b9:93:e7:62:6e:ad:3d:
4f:31:1d:ca:94:6e:bf:6c:0a:c9:ef:53:0e:eb:50:
db:90:84:c1:e0:9c:f2:54:5a:a5:b2:9a:91:e8:49:
98:f8:80:50:72:17:55:0e:18:8b:aa:7e:9a:10:87:
e4:02:19:7c:2f:3a:33:0b:b7:d2:f5:22:49:06:5c:
7e:c6:69:8d:60:ef:cd:50:0e:28:aa:57:e6:c7:a9:
8e:04:97:21:2a:cb:97:c1:ab:5d:45:ed:6a:b2:69:
6c:83:5d:6c:e5:bf:0f:d6:bb:f1:f3:7b:e5:b2:70:
58:4e:fc:a2:a0:f3:89:e8:ec:d0:d0:a6:c7:a1:f7:
ec:d3:f3:68:19:07:53:04:df:82:95:2c:d3:85:04:
e7:ed:cb:b5:57:6b:5b:63:c8:0e:13:14:09:92:ac:
3d:82:f7:aa:93:bf:b4:b7:d1:cf:78:9f:5d:97:9a:
af:e1:a8:2a:c4:90:16:6f:5e:86:a2:c9:b4:06:8c:
e4:4f:50:5a:83:33:da:ef:22:43:8f:d8:5e:4e:4a:
8f:31:83:12:05:19:ef:0d:60:c0:5e:79:fe:37:93:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:35:EA:2D:87:52:2E:55:1F:53:58:8C:CF:75:23:3A:D5:97:D9:78
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:15:d3:56:ec:16:2f:9e:65:11:d8:66:1d:30:88:ed:aa:
93:fd:85:3c:19:6d:c7:e9:3b:d1:71:04:c6:59:72:c1:58:c3:
2a:67:88:67:3d:13:29:dd:82:ff:e0:1c:84:50:46:99:ee:20:
e8:5e:09:a2:69:fc:a1:4a:e2:e4:21:94:c8:bd:0d:4b:72:1b:
57:ec:07:00:61:37:0f:2e:45:ae:d2:db:2e:97:72:a7:dc:2c:
cb:fe:97:0f:72:47:7c:14:2e:23:cc:0b:e6:f4:8a:1f:7c:14:
76:18:9a:01:8f:ad:19:c4:7d:a1:4c:ff:a8:aa:c7:6d:c6:a0:
71:6b:40:4e:97:98:c6:03:d4:4f:24:c5:a8:dd:df:6c:a9:86:
16:79:d5:af:a8:90:5b:fe:61:4a:40:ce:ae:82:66:7b:e6:2b:
bd:f6:ea:bb:15:98:56:85:c1:39:ce:93:b5:e7:38:3d:56:0c:
58:b5:b3:b0:55:76:09:ee:0d:a8:7b:fd:cd:c4:73:7e:77:a2:
29:1e:7d:20:ef:d1:06:b1:ea:84:c4:42:40:44:12:1f:88:06:
d0:8f:83:01:a3:73:7d:e0:43:c4:a1:dc:9a:cf:cd:9b:09:71:
79:60:56:d7:1c:8f:3e:f7:11:1f:46:f2:3c:cf:7a:fd:52:85:
57:d2:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:53:59 2026 by rpki-client