Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: UDYiX3LjGr+PV82ncBUpTnnBjCwq3BdHW3cIbJze+2c=
Subject key identifier: 8E:5C:53:FA:57:57:2A:51:5D:76:37:E5:69:53:30:E0:84:2A:3C:54
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 019FA14D851037E8FE16742AD411FD243B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0CF9
Signing time: Mon 27 Jul 2026 02:00:39 +0000
Manifest this update: Mon 27 Jul 2026 02:00:39 +0000
Manifest next update: Tue 28 Jul 2026 02:00:39 +0000
Files and hashes: 1: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (hash: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: 3dzSbNv5IyCPPktthxbc+l9Zx5/5G8vkqFuYiJD2WDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:85:10:37:e8:fe:16:74:2a:d4:11:fd:24:3b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Jul 27 02:00:39 2026 GMT
Not After : Jul 28 02:00:39 2026 GMT
Subject: CN=8e5c53fa57572a515d7637e5695330e0842a3c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:3c:36:c0:4b:fd:43:ad:de:13:d5:ee:2a:
13:db:7b:2b:82:58:af:55:8f:b8:df:7c:07:22:90:
a5:f0:cb:7f:a5:ad:22:0f:94:e7:15:a8:72:c1:0c:
2f:4d:ab:10:a0:16:7e:8a:ed:f0:1b:dc:a1:94:e5:
92:15:79:c7:5f:1b:0b:21:b2:62:d3:1a:e2:b1:d3:
20:f6:46:79:7d:1b:82:02:f2:53:9a:1d:f7:9a:26:
98:ef:fc:07:b8:9d:19:58:20:5b:78:fd:56:78:59:
0d:00:54:6e:7d:74:84:4c:4e:b3:6a:bf:06:80:e0:
e0:b8:df:66:92:67:01:25:1c:81:3d:bd:51:82:21:
cc:78:cc:13:c9:11:6b:65:c8:d7:72:ba:13:73:bf:
c4:50:0a:a7:77:5c:98:f4:25:7e:b0:26:41:ba:8c:
4d:6c:14:cf:e1:31:e9:cd:54:89:21:af:e0:98:f1:
77:5e:3d:45:2d:31:9f:ff:63:b1:46:c8:33:fe:40:
e5:f0:04:f6:2b:91:5b:aa:6c:7d:cb:28:8f:2c:0e:
f1:21:83:41:5c:5a:4d:0b:aa:58:0e:5c:77:cb:96:
87:c9:d7:50:da:88:89:e9:c1:fa:f9:08:5e:80:ad:
0e:9c:16:00:08:a1:e8:5a:27:90:67:1b:a0:bb:20:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:53:FA:57:57:2A:51:5D:76:37:E5:69:53:30:E0:84:2A:3C:54
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:58:07:43:cc:b6:0d:f7:79:3b:4a:5c:76:07:3a:3a:78:7e:
b0:0f:a3:42:ce:a3:4d:de:35:10:77:c5:57:d8:99:23:a3:49:
70:53:9d:d0:af:22:c1:ee:03:53:45:c4:68:07:0f:8a:40:c0:
2d:13:f4:f1:8f:a8:54:3b:9f:ad:96:f5:23:f5:69:44:ce:7c:
ab:fc:66:08:71:8b:65:4f:1d:ee:1a:bb:96:5c:ed:d9:91:73:
e8:37:2e:a1:06:7a:68:f6:0a:51:01:ef:72:43:12:cc:26:96:
80:c5:bc:ff:6c:5d:b7:ff:ac:b7:af:75:2e:4f:45:82:fa:01:
86:3f:bd:6a:5d:60:39:28:db:81:4f:3d:f8:63:5a:e4:0a:6a:
f1:27:c2:aa:d7:15:f0:39:51:9b:ba:fa:9e:6e:cf:18:45:c1:
c0:af:5a:46:f6:17:6e:20:72:44:ca:20:90:02:0c:f0:7b:bf:
7e:68:26:24:6d:16:37:36:19:f1:c4:71:be:ae:70:94:0e:78:
dc:b3:e0:13:85:b1:5b:92:83:98:ea:c8:37:2f:a2:04:26:72:
63:46:25:58:ae:94:21:1b:b4:dc:d2:08:cf:ea:18:a0:74:56:
72:c9:83:27:ef:c5:ed:b9:85:0a:e9:ee:32:cb:5a:2d:46:17:
88:a1:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:59:28 2026 by rpki-client