Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: Dr7LOqigDXHQrAzND1S3Qp1t9vBWjd1d6LoTin9aMcU=
Subject key identifier: B1:D6:9B:63:1E:1F:C7:B5:AF:D6:6D:AD:0B:8E:A3:DF:2D:05:56:73
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 019EB7A1A82D7814721A5375207D61105CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 18E7
Signing time: Thu 11 Jun 2026 17:01:25 +0000
Manifest this update: Thu 11 Jun 2026 17:01:25 +0000
Manifest next update: Fri 12 Jun 2026 17:01:25 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: SeXO6n/0EiA4/n19bmEXQbzMkt4xWn85jJn2KQpCfDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:a8:2d:78:14:72:1a:53:75:20:7d:61:10:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jun 11 17:01:25 2026 GMT
Not After : Jun 12 17:01:25 2026 GMT
Subject: CN=b1d69b631e1fc7b5afd66dad0b8ea3df2d055673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:eb:cf:c4:ae:9e:1b:1d:29:f1:7a:f0:04:
8c:bf:43:c7:35:4b:eb:3b:0e:d2:c0:47:82:33:cc:
01:81:bf:72:c2:cc:d1:6d:f6:ec:2e:3a:d3:53:8c:
b0:ec:f2:61:39:06:6d:16:70:48:0f:68:93:13:06:
5a:ed:e7:a7:75:9a:6d:ca:62:bd:18:68:ae:75:a6:
ee:fd:e7:b0:83:ff:bc:4c:f3:bf:66:dc:83:48:a1:
be:78:31:97:db:59:15:60:1e:28:52:1c:3d:a9:58:
0d:16:2a:91:48:44:a3:c8:8e:a9:11:1d:5c:39:04:
ff:f5:2d:e9:6f:2f:fa:b4:9d:d2:4a:e6:21:4d:0e:
c8:fd:73:4d:ee:c0:fa:7a:8c:fc:79:a9:3b:32:0e:
f8:8a:cf:f8:6b:5e:d2:2e:d2:39:8f:4a:b5:50:c9:
f7:59:78:34:ff:8a:81:6a:2a:f6:08:53:65:f9:7e:
de:ba:49:95:8c:a6:c2:01:9d:83:81:48:dd:0e:cc:
ce:fe:90:bd:ee:b3:b4:35:ac:16:18:a5:56:c7:bd:
2c:c3:14:49:c4:74:82:7d:88:34:37:3a:70:c2:89:
42:cb:0f:2a:85:a0:a5:e6:33:41:58:42:b3:ad:03:
29:5f:d8:21:65:37:59:99:64:f7:bd:fe:e6:db:ff:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:9B:63:1E:1F:C7:B5:AF:D6:6D:AD:0B:8E:A3:DF:2D:05:56:73
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2e:9c:da:de:60:f5:a6:78:0e:72:30:fe:3b:9e:78:13:21:
44:42:37:48:f0:6c:8d:09:07:6d:22:07:9d:38:99:07:af:4b:
96:fe:a9:16:8f:7f:2e:54:5c:2a:57:c1:4a:96:bc:1c:94:43:
19:1a:af:bd:2e:11:84:e0:26:c8:8f:3f:a9:78:25:6c:3d:85:
da:2f:d9:a0:01:03:68:e7:1d:70:2c:32:b4:45:65:16:99:8c:
51:4b:20:3b:5a:7b:e8:6b:ab:d0:53:c7:30:91:ab:75:a0:04:
ca:22:78:ba:37:43:c0:93:a3:d5:7b:2c:5f:1e:b5:cb:ef:30:
a9:d0:9f:48:bb:40:5c:0f:35:39:d1:60:74:da:25:0f:0f:22:
5b:35:7a:02:51:df:b8:3b:a8:b9:1b:81:83:4f:2d:72:ba:98:
ea:24:50:6a:48:e5:66:c6:63:e4:4d:e9:b6:2e:c7:fa:e6:cb:
f4:d1:bc:01:30:65:2e:ef:43:97:c7:5a:7b:3e:e8:76:12:51:
9c:3c:77:0e:85:61:31:68:fe:48:e8:7b:bd:bd:21:02:df:7c:
29:7a:4b:56:ca:d2:ee:45:b8:38:e0:3e:a5:e5:e0:b4:8e:98:
ed:47:92:3f:84:15:ba:9e:2b:95:81:19:fe:eb:f6:6b:b4:d4:
30:9f:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:20 2026 by rpki-client