Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: qySFMY5d59uD833nRGiMlfGQb4A4Lv9jj3eliL8BO/Q=
Subject key identifier: BA:D5:B5:7B:B6:0D:54:CF:88:C5:10:2E:C3:77:21:FC:41:37:75:8D
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 019FA0E03D7E8BBD15CBBBF69655E0E26B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 00:01:17 +0000
Manifest this update: Mon 27 Jul 2026 00:01:17 +0000
Manifest next update: Tue 28 Jul 2026 00:01:17 +0000
Files and hashes: 1: jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa (hash: AEoYWv6ZL0b6nATDt55iE0kgXS9whL4s6zBc29DhB/I=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: MAFxni1vCvCnbgsEi/vntzt9UqgK6fmODmUsuCWg00c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:3d:7e:8b:bd:15:cb:bb:f6:96:55:e0:e2:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Jul 27 00:01:17 2026 GMT
Not After : Jul 28 00:01:17 2026 GMT
Subject: CN=bad5b57bb60d54cf88c5102ec37721fc4137758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d3:4a:77:c1:17:52:59:23:77:d0:d6:e9:44:
c2:fa:bb:1a:8e:73:1a:41:49:11:fe:d2:f0:05:92:
24:63:59:19:0a:c2:5d:bc:07:15:eb:ad:71:b4:ec:
b0:b3:9c:df:50:70:00:ec:9b:32:23:9a:2d:6e:18:
11:fb:9c:93:95:23:81:b8:a4:6b:21:62:ec:0d:4a:
73:6e:00:e6:ec:09:9d:5e:8e:aa:84:85:61:9f:b8:
60:66:ec:3a:c1:52:ee:11:1e:a0:c3:e4:44:a4:5b:
75:a5:ab:c3:41:72:69:12:6b:9c:3e:04:e0:41:aa:
14:cb:04:aa:cf:a0:bd:c9:46:a6:9d:e8:f3:22:bb:
11:ea:77:66:9b:60:e5:38:16:29:d7:32:11:52:9b:
fa:bd:e1:36:bb:17:81:03:3c:45:cd:b4:e4:24:20:
84:39:5e:7e:64:ea:6b:59:cc:71:03:e6:81:7a:6d:
00:0b:6b:0b:7d:7d:c6:42:04:37:45:43:05:8b:52:
e9:1d:a2:2c:cb:05:42:cc:63:2c:cc:42:ea:4d:48:
98:c8:6e:65:8d:25:15:67:ea:9d:2d:c8:24:c0:aa:
a2:db:91:6d:ec:36:ee:7c:54:39:39:36:89:81:79:
dd:93:54:4c:8f:9b:44:3c:6d:f7:2b:eb:94:90:45:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D5:B5:7B:B6:0D:54:CF:88:C5:10:2E:C3:77:21:FC:41:37:75:8D
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7d:a6:2a:b3:62:d5:2d:5e:ba:45:b2:57:a5:c7:6b:7e:76:
b5:9c:09:4f:bb:e5:1a:2c:a4:67:64:46:5d:3b:59:56:76:69:
9d:8f:1e:09:0d:25:c1:99:29:d7:a4:df:b5:32:3d:1d:1f:fd:
f8:e6:40:cd:cb:6c:7d:b2:75:84:49:ed:d7:9f:3e:dd:75:3e:
71:6d:33:36:10:c1:63:59:60:67:c7:77:b6:3e:91:78:a3:9d:
83:a0:9b:4a:a9:1f:51:d6:a4:ce:8f:5d:82:59:75:3e:a6:48:
64:ac:85:1f:56:e3:d9:3c:d6:95:0c:6f:28:81:c1:4e:37:9f:
88:3b:b0:19:3e:4f:7e:88:51:52:28:34:35:1b:df:d5:27:9f:
a8:82:f7:e3:e3:3a:2b:3b:d1:1f:ea:4d:1e:9c:5a:5d:e2:ad:
dd:68:bd:f4:af:19:e5:e4:9a:47:41:9d:a7:5c:4a:f1:de:a6:
ed:ba:35:d6:7c:05:47:22:88:77:d2:ad:4c:21:f5:76:c0:e4:
03:75:aa:35:8d:92:eb:2f:e7:30:47:a8:2e:4a:6d:32:84:58:
cb:6a:fc:55:c1:3f:e8:69:f3:34:08:77:91:c8:7b:09:be:fb:
a2:87:52:a6:bd:24:6c:f1:0d:2f:84:c6:99:51:b9:db:04:a9:
90:54:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:04 2026 by rpki-client