Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: kEudFFrTS/MhtKihpnLZ15lfIIGvSXZLRbyVln3YuZ8=
Subject key identifier: 9F:F8:5C:18:04:46:46:09:C8:19:C0:9D:D1:77:7B:13:32:0B:F2:11
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 019FA0DFA7A832AE2475D9195A445DA5CF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:39 +0000
Manifest this update: Mon 27 Jul 2026 00:00:39 +0000
Manifest next update: Tue 28 Jul 2026 00:00:39 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: d4Bz0rleqHrf95PLN4mLfBoC8irYoDccXs63Nj2fnU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:a7:a8:32:ae:24:75:d9:19:5a:44:5d:a5:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Jul 27 00:00:39 2026 GMT
Not After : Jul 28 00:00:39 2026 GMT
Subject: CN=9ff85c1804464609c819c09dd1777b13320bf211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:85:d3:a1:0f:a1:bb:35:db:4a:0b:c6:1f:
ee:8d:75:d1:d4:2f:b5:dd:f6:ed:b5:af:48:36:96:
d8:57:d4:70:8f:9d:9b:6c:5c:91:5e:95:36:22:b6:
93:38:55:66:a9:8d:a3:ff:f9:7f:d4:e7:5a:04:10:
74:16:dc:34:a1:a6:bb:e2:cb:45:df:31:0e:c5:c4:
bd:bf:f6:c4:e0:39:a1:1f:82:9a:8c:72:c5:ed:4e:
c2:ba:9f:b9:b7:ac:81:24:b9:31:7f:b3:49:03:2a:
42:fe:a8:a0:47:a6:28:13:09:eb:8f:1b:53:8f:ad:
ed:8e:65:6c:a4:d7:20:fc:29:86:5c:d7:fb:3a:d6:
b6:37:60:55:55:a6:ba:d5:52:2f:74:f0:13:4b:b9:
cf:f2:36:9c:30:73:15:c9:9d:74:5e:cf:71:ce:43:
5e:0e:b0:14:7f:b4:7a:f6:75:f1:b4:b6:42:03:5a:
51:d1:c3:71:fb:dc:b2:1e:76:77:d2:59:51:3b:9f:
bf:1b:c3:b2:a6:9d:d0:c4:41:93:20:8e:41:6b:04:
d4:91:0a:a7:35:d0:44:32:95:57:59:7b:21:e6:ef:
52:3e:a0:01:e7:68:3b:b2:84:33:ef:c3:28:86:71:
af:2a:98:12:65:e3:e3:25:af:02:07:a6:5c:08:58:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:5C:18:04:46:46:09:C8:19:C0:9D:D1:77:7B:13:32:0B:F2:11
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:6b:da:3d:ca:e4:cb:ff:93:81:5d:cb:eb:98:55:5b:c4:
16:15:c7:6b:d9:97:5b:39:0b:6b:4a:a8:08:30:e4:0d:ff:cb:
f6:ad:3b:88:66:48:dc:b3:74:26:1d:32:b3:d9:d6:78:2a:c1:
c7:4c:69:51:49:43:47:c7:f1:5e:d3:fb:0d:31:81:b8:18:b0:
68:3c:43:41:cf:cb:2f:09:4d:ad:26:4c:7c:41:60:d2:44:b3:
93:0e:d7:c7:4c:67:85:33:5b:29:32:d6:c7:fe:3f:e4:a4:32:
c9:e3:36:89:93:7d:b8:ae:6e:75:08:75:09:91:bc:52:95:4a:
bd:42:65:05:70:e6:cf:45:51:7d:2c:78:36:c2:5d:0d:f5:f0:
02:8c:09:16:19:2a:3f:f8:74:69:f4:15:4d:ea:93:ea:c7:9a:
51:9b:2f:e1:c1:d8:bc:33:f9:29:5b:8b:25:f1:3e:88:91:d8:
aa:2d:bc:59:a1:7b:03:e1:a6:62:10:7d:15:30:5c:8a:d3:cf:
e2:79:f7:82:bf:6f:6f:41:ae:60:8b:9c:de:09:cf:94:58:08:
6d:85:0b:c5:22:78:e9:ac:4e:90:56:b1:25:ed:7d:3e:3f:35:
e7:78:c7:54:bb:6c:fd:86:9e:b5:4c:7f:ea:38:87:ad:2b:98:
6f:fe:48:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:54:35 2026 by rpki-client