Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
File: vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft (raw, json)
Hash identifier: JY+zUGbDlD+JK8qKMxqrrrxBN2GxzoXCYdZaqB6RJv0=
Subject key identifier: E7:B4:DD:1D:C3:1E:81:41:05:9A:F7:44:85:B4:EE:5D:D5:F7:A6:77
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 019FA2977B90908512D5343A6CD03C82820F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 08:01:04 +0000
Manifest this update: Mon 27 Jul 2026 08:01:04 +0000
Manifest next update: Tue 28 Jul 2026 08:01:04 +0000
Files and hashes: 1: AU8OktUluDemDAVdWC4o1rs1CnY.roa (hash: RjEeTRpnG44Tfxlx6Pp88uWbFbQRVFzej/AZva1uDPU=)
2: Xwqqp3SPpvDNyBAEMp0e_66cQro.roa (hash: tn/0MbER8l+l1ARfId/kyPTPuy7cjy7LSRHD6/peBik=)
3: vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl (hash: ZwpYiUKTxMWKo29lyVnaOpCx0MLnvNj137hxqy68EcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:7b:90:90:85:12:d5:34:3a:6c:d0:3c:82:82:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Jul 27 08:01:04 2026 GMT
Not After : Jul 28 08:01:04 2026 GMT
Subject: CN=e7b4dd1dc31e8141059af74485b4ee5dd5f7a677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:96:39:ce:2f:f4:3d:f3:71:99:ba:04:50:
a4:77:ab:64:17:3d:ad:72:e8:22:4e:3b:0a:4f:1e:
2b:4f:67:ec:a0:ec:80:43:05:da:95:3e:27:89:58:
a1:76:8c:d6:fa:b9:64:83:73:d4:ae:1d:81:21:a6:
39:4f:20:ba:30:20:2d:1a:39:4d:6b:1b:86:09:39:
87:03:21:32:a0:27:21:d6:f3:12:9c:8a:e4:47:2c:
cf:e3:ae:3d:1f:33:63:33:b5:67:aa:69:17:0b:dc:
33:ac:ee:e6:e5:50:6c:4b:bd:96:4e:8c:82:2f:a7:
50:38:d0:b8:03:e2:59:bc:db:99:40:3c:95:55:91:
fa:33:f9:ab:92:23:66:d0:5c:b9:1d:a4:e0:34:77:
07:b3:1f:9a:f8:89:e2:24:3e:8c:6b:1f:39:32:1c:
91:f0:6a:52:34:20:3f:92:0d:5f:0e:45:cd:27:7c:
fb:cc:02:1b:49:c4:c9:db:e5:24:00:de:3d:bb:9d:
2f:c2:68:13:a4:6b:83:ef:92:ef:d0:0c:30:8e:4e:
25:0a:00:e0:f1:7d:14:57:24:68:47:55:6b:b3:97:
c8:94:c5:56:8a:3f:12:54:91:cd:7e:e8:10:c8:fe:
72:f6:3d:3a:1d:ad:d3:fc:ea:6a:07:2f:82:a6:97:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:DD:1D:C3:1E:81:41:05:9A:F7:44:85:B4:EE:5D:D5:F7:A6:77
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:9d:ae:f0:f9:b4:ab:93:1f:14:ef:f6:5d:1f:a4:ec:fc:
57:48:34:ef:b1:e5:43:03:92:7b:b4:05:dc:49:40:2a:9a:1f:
a2:2d:e2:43:da:ea:18:35:59:4e:2c:48:cf:43:ec:96:f3:bb:
55:a3:56:cf:59:e6:71:0e:25:18:57:35:2a:52:cd:92:03:10:
19:2e:db:9b:c7:54:66:fd:53:f9:b8:c4:b9:6a:23:7d:12:96:
4f:38:4d:81:8f:33:ca:81:25:9d:30:ff:45:75:6a:bf:43:aa:
95:fb:48:c7:8e:c1:fd:1a:7c:6f:b8:00:85:63:31:58:48:61:
de:55:2d:5a:8e:67:7a:2c:2a:6b:d7:75:43:20:c1:91:91:7d:
91:06:00:76:ad:ae:fe:43:94:80:2c:85:9f:bc:10:99:07:90:
33:74:55:c2:b5:28:a7:5b:46:7c:1f:8e:f1:a8:9a:88:86:b0:
3d:4a:19:47:55:62:5f:15:8c:62:c2:7e:00:6a:3d:8b:cd:3b:
e7:c9:2a:e6:dd:60:b5:f5:4c:27:2f:2e:dd:d3:0f:8a:89:19:
77:1b:11:78:b8:cb:cc:88:57:ab:65:96:39:34:86:6e:5a:91:
1b:fb:10:3a:2b:9f:e6:3b:8c:19:9d:53:50:7c:fe:b3:12:7a:
06:6f:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:17:20 2026 by rpki-client