Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier: 27d/KflxW0Pdg0skxe2CdcBenRxQ+8hp2dwuxAvcFY8=
Subject key identifier: 8A:72:5E:5A:B8:BC:E5:E1:EA:F3:1D:29:F2:DD:C6:49:90:D9:A8:9E
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial: 019FA1BB19DB2959740E65F660BE6F6D8921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number: 0FA2
Signing time: Mon 27 Jul 2026 04:00:21 +0000
Manifest this update: Mon 27 Jul 2026 04:00:21 +0000
Manifest next update: Tue 28 Jul 2026 04:00:21 +0000
Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: Y1RtZ35xdOj4U32+B07h+xO62dCuiv+QVvwCfooQxMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:19:db:29:59:74:0e:65:f6:60:be:6f:6d:89:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Validity
Not Before: Jul 27 04:00:21 2026 GMT
Not After : Jul 28 04:00:21 2026 GMT
Subject: CN=8a725e5ab8bce5e1eaf31d29f2ddc64990d9a89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:9e:a9:41:3b:e0:67:c6:d6:04:82:45:8d:
c2:1c:89:94:da:d2:1e:cf:1b:d7:88:11:dc:0f:95:
71:5c:17:83:c1:4f:44:13:3c:0d:01:b0:3e:f7:0c:
7e:5c:ba:bd:f6:42:b8:a3:0a:91:b3:4e:a7:f9:30:
87:91:c7:7c:b3:2f:4a:29:37:9f:b3:1f:2e:1e:8e:
a7:f9:5b:df:2d:bc:fc:ed:7a:57:bc:0e:96:df:95:
6f:12:0e:94:d7:c4:c6:5d:ea:b4:54:30:e6:65:72:
62:77:23:8f:1f:28:17:ee:71:ea:3a:13:c6:ef:35:
a4:fd:91:d3:58:93:fe:e8:11:3f:98:2f:64:2d:c6:
76:95:ef:fb:e3:ba:2e:94:9f:4e:e5:ac:af:9f:17:
e0:f9:82:b7:28:a3:fa:9c:b5:37:86:06:78:49:ae:
7f:ee:32:3c:9b:74:94:34:9f:c9:75:4a:eb:8d:d9:
25:40:25:7b:9a:bf:62:a7:1a:72:0e:05:ca:04:e8:
7b:2e:08:e5:2f:0b:7c:50:da:30:1d:e6:81:e7:19:
54:c6:80:e5:63:d2:03:fe:5c:a8:da:f7:5e:9f:3c:
28:88:74:dc:1e:ae:c5:6c:6e:d6:f0:3e:50:94:5d:
8b:b2:dd:4d:f9:af:a7:38:ce:bf:2c:4f:5f:b8:28:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:72:5E:5A:B8:BC:E5:E1:EA:F3:1D:29:F2:DD:C6:49:90:D9:A8:9E
X509v3 Authority Key Identifier:
keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cf:db:36:18:41:c0:1a:d3:10:95:47:0f:62:85:3f:ef:bf:
79:90:b7:1b:8d:71:fe:a8:9e:32:9f:53:d5:d3:15:0b:96:6d:
a7:e3:57:20:ae:93:f0:29:57:14:af:2c:48:b9:e6:01:1c:9d:
40:35:11:91:7a:33:f8:5b:ac:32:a9:e4:26:f7:6b:6c:bf:5c:
95:86:e6:ef:e5:0d:97:3e:86:a9:cb:21:75:cf:16:6c:54:6f:
fe:d5:35:4a:46:98:64:1e:62:b7:67:1c:81:11:ee:ad:41:e4:
77:58:7d:78:1a:0d:7a:e9:f3:9c:1a:a6:c0:4c:b1:2d:6c:4a:
a5:24:e3:fd:74:74:9a:14:b1:05:0b:b4:0a:f6:53:31:96:b2:
15:1b:4d:55:0f:8f:f6:d4:3c:d4:9f:14:0e:ff:71:cb:16:82:
9c:6e:14:3a:1e:43:4a:e1:b1:d6:3d:54:c2:2c:75:1e:21:28:
30:da:9d:9f:15:0d:f5:2a:23:7e:17:6c:1e:03:7e:d1:77:50:
b8:6d:b2:13:c3:be:5b:cc:b6:29:b4:33:da:20:aa:99:c1:d4:
74:d3:66:c5:1e:a9:b7:15:a3:96:2c:0b:0d:be:63:ca:aa:5f:
bb:d5:55:7b:b1:63:6e:8e:bc:20:8c:70:1f:0c:d8:b9:c4:16:
88:c5:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:58 2026 by rpki-client