Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: vr0pXk7X7UQUJrVYy//VZ2uMZokM7+0ERkTNiaJXnFU=
Subject key identifier: 06:A0:74:E5:BD:31:9A:D0:C8:CF:6A:40:59:67:FD:1D:7A:85:13:B4
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 019FA14E3ACA51AE33F5285FA703AAD8568B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1960
Signing time: Mon 27 Jul 2026 02:01:26 +0000
Manifest this update: Mon 27 Jul 2026 02:01:26 +0000
Manifest next update: Tue 28 Jul 2026 02:01:26 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: FPFap/lhGWV+GJAJD+nhQOU30QOq+ZitSgWWROWXixw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:3a:ca:51:ae:33:f5:28:5f:a7:03:aa:d8:56:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jul 27 02:01:26 2026 GMT
Not After : Jul 28 02:01:26 2026 GMT
Subject: CN=06a074e5bd319ad0c8cf6a405967fd1d7a8513b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:01:74:cc:f0:01:fd:15:d8:b7:7b:78:43:
44:7f:68:39:49:82:d6:7d:6b:31:fd:72:34:76:ca:
79:65:57:13:82:5b:ad:e6:a5:fa:0e:12:42:0e:d3:
d5:4c:05:3d:e3:be:e4:1e:46:d6:f8:db:be:df:c3:
cd:b8:06:ca:2a:0d:bc:5e:26:a4:e9:47:d2:83:f3:
4b:94:17:5c:f6:3f:4d:b5:b8:b5:53:0c:7a:ab:d1:
09:1b:b2:1b:99:bf:dd:6e:b6:3f:42:e9:c5:62:73:
0a:f0:24:59:cd:fc:2c:c7:d0:fd:f2:f3:2b:82:16:
30:84:3a:ae:7b:ca:fc:67:d4:63:30:46:65:86:22:
25:60:6d:51:46:ce:04:ae:47:47:3b:65:a7:0f:22:
21:b2:16:a1:1b:18:6a:8b:3b:61:20:dd:53:fb:8a:
37:a6:2f:10:b3:ce:b7:94:f2:57:3b:ef:29:54:67:
d0:1f:2a:5e:37:e3:70:e3:1d:3f:c0:ed:4b:55:90:
19:37:e2:2b:ff:e5:90:3a:65:31:63:00:5a:0d:a3:
bc:43:07:6b:82:9a:c7:ce:85:ce:c2:6c:f0:fd:82:
dc:a7:5e:87:54:9f:6f:a4:bb:23:a4:15:e6:b1:20:
ae:60:a4:2e:c2:bd:2f:a2:45:c5:5b:da:0f:35:1d:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:74:E5:BD:31:9A:D0:C8:CF:6A:40:59:67:FD:1D:7A:85:13:B4
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5f:ea:59:9d:5a:b0:0b:d2:d8:33:2e:2b:47:77:ba:d5:d0:
9a:06:6f:a7:73:e4:b5:f6:4a:25:25:f9:55:ba:f3:71:a9:70:
f5:57:f8:13:13:40:19:a4:3b:8e:6a:ba:43:41:51:2c:52:3b:
46:17:c8:87:51:ba:86:54:66:23:06:eb:21:b5:71:af:99:92:
77:d0:48:56:49:08:8a:3c:33:24:63:47:cc:6f:06:4d:20:cc:
a0:3d:64:a9:3a:b2:7b:55:db:05:d9:f4:b9:bb:ec:4b:0d:6e:
d4:69:7e:07:ec:89:95:35:b7:5c:50:ef:c0:6f:d6:69:01:2c:
7f:9f:98:d3:3c:31:af:bb:49:22:1e:e3:8f:f9:37:5a:18:fe:
37:20:fb:1e:04:c4:b7:14:33:7e:44:d3:ff:0c:14:43:24:b6:
cd:b1:d6:86:ff:a8:77:87:4e:89:ad:bf:e2:64:7c:bb:8b:34:
bd:20:42:bf:72:d0:2f:8d:67:33:54:50:cc:af:7a:62:8c:76:
d6:bf:48:de:ba:7d:df:06:03:70:7f:51:85:1e:d8:bf:b0:fe:
83:b8:25:f4:ff:be:0a:59:d7:31:54:81:1a:24:e9:a1:26:64:
d0:40:16:5e:6b:dd:f3:0e:cf:75:81:a9:5b:ae:a0:48:41:54:
42:99:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:07:29 2026 by rpki-client