Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: AOhiqzG84I7TPY87D6UzYIGXMZm5FQWSfnmqVyonbz0=
Subject key identifier: 51:5B:69:D2:2D:98:D8:14:55:9D:58:32:70:F7:70:13:86:C7:25:FC
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 019FA1F2AC57A8BDFA7FF7C4935CC58D1495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 1511
Signing time: Mon 27 Jul 2026 05:01:03 +0000
Manifest this update: Mon 27 Jul 2026 05:01:03 +0000
Manifest next update: Tue 28 Jul 2026 05:01:03 +0000
Files and hashes: 1: hYLp43OSPXsL4JxLswilkc5UtXM.roa (hash: rqjG85ikI7yDLzBtgViqukIp7fUAhh1OKd6HYF2+ojM=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: Eo4e9nh4NdzvUsbnEoD4fA/SmN+07AQ5Y87A2I708mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:ac:57:a8:bd:fa:7f:f7:c4:93:5c:c5:8d:14:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Jul 27 05:01:03 2026 GMT
Not After : Jul 28 05:01:03 2026 GMT
Subject: CN=515b69d22d98d814559d583270f7701386c725fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:79:c3:41:6b:e0:8b:2d:28:f9:2d:08:52:
62:1e:0f:51:d9:3c:ff:d9:c8:06:b1:8b:9f:22:49:
4b:28:a6:0f:bc:24:74:a3:cc:d8:3f:46:1e:0f:f4:
af:e4:fa:b1:20:08:c8:d9:12:e4:b2:9d:38:5b:32:
0d:4f:bb:71:e7:dc:3b:87:9b:ec:10:c2:82:08:b4:
88:5d:e3:78:7d:67:f1:01:8a:bf:44:80:d1:1e:bd:
c1:12:e3:16:3e:3f:c1:2c:8a:b9:8b:da:a7:ef:42:
4f:a3:09:01:96:0f:76:92:0e:9d:d3:54:b4:0b:04:
92:ec:e7:54:81:48:37:28:a8:16:3d:c8:08:c7:3b:
c9:ba:00:c6:a1:d5:da:c8:a0:6f:0c:e7:18:92:b9:
d1:04:ec:9f:73:df:6f:cd:c7:c0:6d:65:2b:2b:8b:
e8:c8:ba:a4:e0:4c:7c:46:5f:ef:0a:eb:31:be:6c:
8c:3c:1b:86:c7:bb:1e:36:45:ad:74:f6:af:41:9e:
92:5a:df:e6:98:da:07:a4:6f:f5:9e:b5:2b:f8:c2:
e8:bd:e6:b5:5b:2a:ca:70:b7:3b:fd:98:0e:e4:26:
75:95:0a:c9:8a:8b:8f:b8:da:2c:eb:5a:99:c0:9c:
69:39:b4:f9:17:04:c7:b1:b6:c4:7c:a1:ca:17:3e:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5B:69:D2:2D:98:D8:14:55:9D:58:32:70:F7:70:13:86:C7:25:FC
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bd:f2:14:73:41:1a:7d:f3:9d:3b:ee:ec:c8:7f:11:c0:62:
47:8f:26:72:9f:f2:96:41:f6:e8:1f:79:f0:a4:49:f0:09:06:
e7:68:3c:9c:61:e2:6d:1d:f1:94:72:ed:e7:15:d7:9f:21:3c:
3a:0c:e7:5d:c4:ef:25:9d:4b:59:64:25:7a:40:ec:38:59:58:
4e:04:66:c4:b4:bf:c7:e6:13:b5:52:55:34:c3:b2:ba:18:c1:
1c:a6:cf:91:43:e4:3f:7c:91:35:92:a5:cf:04:86:89:0f:62:
7b:50:e1:5b:77:de:b6:52:f2:4a:55:fd:c9:b6:c5:f5:28:d2:
4e:39:d5:53:70:80:bb:ee:b5:d5:eb:c0:8b:82:d9:90:30:3c:
ec:1d:53:53:09:7c:30:9c:c4:46:ee:b1:27:62:61:c4:0a:16:
ad:37:c2:40:52:f0:4f:6e:72:e2:23:c9:7c:6e:4d:43:6b:6d:
40:74:b3:83:06:55:db:4d:f4:62:1b:cd:f5:e6:3d:c7:4f:7c:
76:26:b6:74:32:e6:08:d4:f6:42:dd:33:49:22:ec:e5:3d:1d:
02:84:e5:51:5c:35:4f:52:1c:05:34:e6:64:24:29:4d:fe:9f:
a5:a5:d6:9f:1c:b6:c4:6f:87:e9:50:1a:0c:d8:a1:65:58:5b:
9f:52:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:18:28 2026 by rpki-client