Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: 9jHkpFiEBVx5Dzq8lMEvajDlszjrrWq8L7CEfD+TyyQ=
Subject key identifier: DA:27:7E:35:75:2C:4F:58:9F:17:E9:A4:19:0C:6D:D6:7C:62:2B:51
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019FA116A2DF24F7B875F7573AB11A70163D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 01:00:42 +0000
Manifest this update: Mon 27 Jul 2026 01:00:42 +0000
Manifest next update: Tue 28 Jul 2026 01:00:42 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: y3QuQgVpbXEfvPA72TnrjWb9dLirkdTEORpIEA2IHPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:a2:df:24:f7:b8:75:f7:57:3a:b1:1a:70:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Jul 27 01:00:42 2026 GMT
Not After : Jul 28 01:00:42 2026 GMT
Subject: CN=da277e35752c4f589f17e9a4190c6dd67c622b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:ac:c0:16:60:1d:65:b7:5d:5f:08:51:c0:
c5:6f:f8:b9:a4:89:75:a5:d4:a6:25:9d:dd:e8:84:
e6:50:6d:8b:4c:a5:df:24:f5:1c:7f:16:df:14:cc:
ca:82:ec:05:f3:fd:6e:1b:f6:e6:f2:21:e6:2a:54:
ac:be:28:6b:ed:a6:2d:f0:77:eb:db:03:9b:fc:90:
b2:80:29:60:5a:1f:8c:dd:8c:9b:fe:b7:37:d3:2c:
18:77:f0:2c:07:ae:3d:b2:54:d8:0c:38:e9:4f:eb:
80:e1:6a:c3:a3:98:4f:89:96:55:86:a5:92:7c:a0:
0a:a1:90:25:ba:7a:bc:be:2e:c4:94:ff:81:48:c0:
b2:26:15:b9:37:e9:48:ec:81:62:8d:82:91:f2:3f:
e4:db:36:f5:03:43:4b:7b:d6:ba:3f:88:55:9e:c6:
e6:a2:05:f4:33:a2:c5:e4:37:9d:ba:6b:2a:85:e2:
7b:d8:62:35:7b:9f:55:93:56:54:84:97:f7:c0:3a:
5b:fc:96:79:72:07:b2:7d:bf:99:91:a5:d7:33:77:
6b:5d:29:8e:55:de:44:b9:72:9a:98:c2:01:60:ea:
52:b3:6f:65:a4:91:4a:ce:17:c2:ff:c6:5d:84:57:
14:9a:2a:72:fe:25:b9:1c:9b:a0:9e:6c:67:2a:b9:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:7E:35:75:2C:4F:58:9F:17:E9:A4:19:0C:6D:D6:7C:62:2B:51
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e7:9d:c0:b2:97:cc:13:02:ac:49:c5:27:51:00:4a:9d:e4:
60:56:e8:79:d9:65:d9:b0:08:ac:54:85:ce:bf:d2:35:64:2b:
4d:0f:dc:26:af:0c:d8:cb:6e:96:e9:68:8e:4a:a1:f1:ee:34:
47:e6:c8:82:b8:af:a3:58:3d:34:0e:b8:01:3d:8c:2d:8a:2c:
d0:e6:03:03:e2:11:8e:7c:6e:02:50:8d:2e:3f:c2:44:43:86:
26:4a:93:11:da:43:58:d6:46:b7:23:a7:7b:5d:89:56:0a:0b:
4f:d4:e9:1f:b4:1a:7d:31:c8:fa:03:54:af:db:d9:50:b3:3f:
6f:eb:b7:02:35:57:01:8e:6f:8c:2d:51:5d:12:8e:71:5b:24:
cd:6b:89:56:04:79:de:48:45:4a:ab:da:44:2e:df:2d:5c:a1:
44:33:11:a0:35:ac:d5:0b:20:d3:58:0a:8b:51:d5:4b:6b:6c:
3e:19:68:06:7d:32:72:14:2b:e5:b5:ce:da:48:46:28:10:70:
10:fc:40:f6:9a:f5:f6:70:17:2c:11:8a:62:42:d1:6d:b5:bf:
49:38:40:03:41:b1:7d:e1:85:15:18:de:be:6e:f1:ca:32:05:
35:6c:e6:fd:38:0a:81:d2:a7:b8:03:6b:2b:31:29:60:7c:ef:
3b:55:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:22:21 2026 by rpki-client