Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: 0WXF+YONBgo/Exy+DqBl9yaVAOdw3fr771rFuVQcfSc=
Subject key identifier: 8D:C9:84:7B:55:D3:4C:CF:4E:9D:AE:1B:A6:DA:4A:F6:F7:B9:83:6A
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019F85D5EFF26535252D144D07CC53B4065A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 13E9
Signing time: Tue 21 Jul 2026 18:00:17 +0000
Manifest this update: Tue 21 Jul 2026 18:00:17 +0000
Manifest next update: Wed 22 Jul 2026 18:00:17 +0000
Files and hashes: 1: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (hash: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=)
2: OUAtyJLWD9ly09U3MS7j4xCHD9A.roa (hash: erHi0XGHEY2JJ99Op+k6K6zDi3g4oDZX5oM35Z1JfGg=)
3: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: 5DucwDcyY5XwdLTpumTm/RttcCliZp5bFNKYua2fH1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:ef:f2:65:35:25:2d:14:4d:07:cc:53:b4:06:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Jul 21 18:00:17 2026 GMT
Not After : Jul 22 18:00:17 2026 GMT
Subject: CN=8dc9847b55d34ccf4e9dae1ba6da4af6f7b9836a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:e1:82:54:90:11:7e:cd:97:a6:d1:7b:c6:
28:5a:24:38:33:8f:ff:ce:f6:a5:c8:4d:e7:97:e8:
8d:67:7d:35:63:23:47:b5:eb:30:4c:c7:c9:59:39:
59:a8:2c:3f:39:38:65:32:0c:2c:d7:06:90:59:3f:
25:b0:c7:63:a6:bd:38:ea:91:ca:93:d9:8c:2d:29:
a7:18:54:ab:cd:40:92:93:aa:bb:10:ac:a5:05:6c:
8b:a1:1a:88:e6:b4:52:5e:df:1f:58:b0:58:6d:19:
cb:1e:ae:9e:db:7c:d6:16:42:d7:7d:62:1a:1e:f1:
bc:9b:5f:e8:25:07:03:db:2f:ce:9b:4c:bb:1a:e1:
4a:7f:21:6a:d8:20:c6:51:24:0e:89:60:7c:14:57:
cd:d8:00:3b:e5:d4:c6:dc:e1:b8:49:a7:ca:5a:10:
18:68:91:8f:c0:14:f3:99:f0:d8:74:7c:e4:42:23:
c4:1f:f7:2a:8b:6a:79:da:3e:b5:f6:4b:24:d4:e7:
88:69:55:ee:77:91:31:0c:86:2f:c8:48:81:d0:c6:
6a:08:ef:7f:09:01:94:af:3f:e0:06:dd:56:7b:23:
55:9c:ee:9b:81:cc:26:02:68:e2:67:92:e9:a5:d1:
a4:62:7e:8e:32:8f:e5:bb:bf:e4:5f:85:7a:98:35:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:84:7B:55:D3:4C:CF:4E:9D:AE:1B:A6:DA:4A:F6:F7:B9:83:6A
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:20:01:f4:f1:fb:ae:9a:7d:3b:89:1a:33:90:bb:e0:7e:6a:
7c:4c:d8:34:43:c3:a9:6b:d0:bd:c7:3c:c7:ee:2b:3f:86:40:
a5:09:45:ae:d5:89:0b:30:43:5c:de:a0:f0:f2:d0:d6:2b:57:
0f:2e:fa:0c:7b:af:4c:dd:0d:4e:31:94:57:21:a7:30:d3:f3:
01:6d:98:21:4c:1c:d4:f7:c6:80:6d:6b:38:86:a5:f6:39:51:
b7:18:7b:9a:38:e1:11:ad:ce:4e:b8:c5:a2:a2:11:52:bc:5c:
53:6e:a1:54:b8:b1:ca:2a:15:9b:2f:cc:da:04:fc:6a:a6:c1:
f9:48:13:1e:a1:90:5c:35:bd:54:44:b3:d2:ce:5e:9a:8d:8a:
e1:a9:91:03:cd:c3:7d:66:8f:01:72:94:01:bc:62:94:13:61:
16:d3:c0:fe:a0:57:11:3d:86:9e:8f:c8:29:ab:b5:2c:aa:5b:
a3:60:49:6c:40:f4:ed:f5:c6:1a:68:79:49:9a:13:95:7c:40:
62:01:8d:d6:f4:96:fb:41:f1:53:89:5a:03:6a:f4:80:41:51:
bb:cf:fd:ce:b7:27:04:4b:8c:f2:f6:f4:05:5f:fe:79:3c:ac:
80:f1:7c:15:a9:11:d5:56:06:6b:2f:0e:7b:02:ad:97:17:a8:
24:52:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:21 2026 by rpki-client