Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier: UxqRjgWYtFnFRxXT7pibPJh2Uo2Qdm74BNjSagQ8m30=
Subject key identifier: AB:BF:4A:DD:02:1C:35:73:31:C2:42:08:1B:C9:53:EE:6D:CE:D1:2E
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 019F1A1F1F9B41550C638E4DF56DDF308F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number: 17CF
Signing time: Tue 30 Jun 2026 20:01:15 +0000
Manifest this update: Tue 30 Jun 2026 20:01:15 +0000
Manifest next update: Wed 01 Jul 2026 20:01:15 +0000
Files and hashes: 1: 6jWojyxSyaLCVEVrlwUXpc7pdZI.roa (hash: 2OvlAKvq6Z4TSn3m+HkdC95W0frjGZoZLJ+JjdZcHag=)
2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: SeVa9Q90s+cRV79pNCC3hh4s70GD1taEQBw7rQjdkCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:1f:9b:41:55:0c:63:8e:4d:f5:6d:df:30:8f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Jun 30 20:01:15 2026 GMT
Not After : Jul 1 20:01:15 2026 GMT
Subject: CN=abbf4add021c357331c242081bc953ee6dced12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:25:5d:b2:77:58:69:6a:17:1d:c3:ae:58:
47:7e:78:ad:0c:17:d5:c0:16:2b:10:69:b4:0c:37:
d6:22:08:92:f0:9a:33:54:72:52:35:3a:32:c7:d8:
89:60:aa:b2:9e:c8:58:6e:32:35:90:fc:59:e8:94:
d1:76:70:1d:76:ac:8a:26:0e:31:fa:79:ff:a1:dd:
40:eb:4b:65:37:67:9e:5e:5d:c7:50:34:6c:36:0d:
36:6a:65:cf:e6:a6:0f:a7:d5:b2:71:24:dc:bf:5d:
f0:80:bc:f9:bd:4f:66:5a:9d:8d:fc:bd:35:f9:d7:
07:48:49:d2:5e:59:c7:8a:87:43:42:0b:41:09:0d:
a3:a5:e6:02:52:80:2e:aa:5d:45:b8:d5:ba:e7:5f:
49:9d:d3:77:af:fb:e6:d2:82:44:5e:27:5f:e9:8f:
32:01:72:1c:67:f1:b8:5a:1a:92:4c:ce:a4:38:19:
d6:fd:5d:67:13:f8:db:72:ab:fb:97:30:71:72:e3:
7e:1a:18:46:8e:e4:76:0f:0c:54:a2:8e:ce:45:ca:
42:f2:df:8e:35:19:c3:7e:d6:2f:3a:57:f7:0e:96:
eb:01:47:90:27:40:e7:91:b1:f5:b6:9d:12:15:f3:
cf:04:2a:ca:60:bd:46:36:04:d3:bd:74:5c:4a:2a:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:4A:DD:02:1C:35:73:31:C2:42:08:1B:C9:53:EE:6D:CE:D1:2E
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:33:fe:f5:c8:fb:d0:44:0d:d0:f3:1f:24:0b:95:8e:e0:18:
06:4e:c2:17:f7:f4:99:06:d9:91:63:d0:99:b1:6b:4d:ce:2e:
d1:61:93:18:24:af:c8:f9:08:e6:b3:52:9a:9c:ad:b1:42:ec:
e0:99:d5:14:da:f4:ec:d5:25:79:b8:f9:09:03:21:7a:79:32:
b5:42:b6:95:ef:c1:f6:e0:f1:37:14:70:c8:d4:ff:65:7e:a8:
de:ad:ee:8b:51:39:dc:f2:cf:c3:ed:e0:fe:1a:9f:fa:91:a5:
63:09:88:84:f8:e2:a6:15:a5:de:ab:5a:b2:49:ff:12:af:77:
9f:ad:98:a9:ac:36:81:87:49:1e:d8:03:93:66:ac:12:3f:15:
2f:86:3a:bb:13:7f:5c:d2:f5:54:40:6c:2a:ab:c7:6d:71:3d:
77:07:f7:54:53:71:0d:6e:de:15:92:c8:d8:71:35:3a:3c:da:
29:f8:78:31:6d:0c:ad:70:fe:d1:9e:b2:9c:32:c5:ea:a9:4a:
c9:7e:37:9f:58:30:bd:a0:a0:a3:25:ce:99:09:9a:15:50:2e:
be:11:ca:3f:2c:fc:ca:89:85:91:02:37:55:cc:73:0b:45:37:
6f:fd:54:bb:eb:6b:ad:17:c4:3c:36:6f:e9:8f:50:1f:43:8c:
01:86:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:24 2026 by rpki-client