Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier: 3+EDdg9zBtjQL+8R5gQ2wdeDKMw+5qjIj4017iG4RkA=
Subject key identifier: DB:C2:40:9A:46:5D:A7:41:23:D1:1F:55:BA:D0:C9:66:01:28:9B:65
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial: 019FFA5AD99384C254EC964995F53B7ED66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number: 0CCA
Signing time: Thu 13 Aug 2026 09:01:25 +0000
Manifest this update: Thu 13 Aug 2026 09:01:25 +0000
Manifest next update: Fri 14 Aug 2026 09:01:25 +0000
Files and hashes: 1: 3ch1Jb7sFGYOGbilPvREcxXxE6k.roa (hash: J6u00YHUjiuGwv/53UMv+yM4klhV4JggG1AUNdLNZVQ=)
2: mNC5GkRzpe0TcIftq03m_ZQlLiM.asa (hash: l/sJ49tKEXd94Ikw8096y/GdUHEWeA7yG1kPodLn6rw=)
3: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: MKUlGQyUntUksp8wl9Wsi5aU0XM9DU1g9p2JbGmHHVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:5a:d9:93:84:c2:54:ec:96:49:95:f5:3b:7e:d6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Validity
Not Before: Aug 13 09:01:25 2026 GMT
Not After : Aug 14 09:01:25 2026 GMT
Subject: CN=dbc2409a465da74123d11f55bad0c96601289b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:b0:f9:50:05:c0:c5:ae:d8:63:47:9d:70:
c7:1e:83:c7:e0:2a:c8:a5:af:40:ec:a3:35:74:89:
5a:9f:f7:5c:33:e9:76:03:e0:00:4a:d9:93:fc:74:
54:82:57:e3:2b:96:d2:69:97:a1:6c:07:66:ee:88:
26:05:4d:92:f1:34:74:53:0a:51:d5:7f:ee:2b:34:
69:b4:17:e3:93:66:ac:50:b8:01:64:ea:09:da:21:
8f:ab:85:98:11:84:97:c2:1a:a3:e1:2e:8c:00:be:
82:d2:2f:9d:8b:37:91:c3:d3:cc:3d:40:58:08:fb:
a9:22:6f:01:7f:e9:97:e9:03:40:7d:c1:bd:52:4a:
d6:52:52:68:27:a0:c0:1d:bd:e4:7a:64:2c:5e:f8:
4f:56:21:b3:91:fd:d6:4a:d4:30:18:79:dd:0c:24:
f2:e4:37:25:a5:62:42:73:12:0c:d7:8c:ee:bd:c6:
ef:d3:ed:93:06:d9:2c:00:f3:fc:cf:45:0b:ea:8a:
73:07:50:d9:0f:63:89:c6:f1:22:31:74:28:03:70:
42:dd:25:2d:87:02:6f:53:c6:49:e4:66:46:bb:2b:
0e:11:dc:a8:5c:3f:92:9e:e4:da:5e:24:9e:6b:8f:
58:38:a9:2e:c0:b7:a7:bd:f4:bb:2c:30:dc:f8:a8:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:40:9A:46:5D:A7:41:23:D1:1F:55:BA:D0:C9:66:01:28:9B:65
X509v3 Authority Key Identifier:
keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:2e:19:93:cd:c6:8c:1c:9e:e1:88:56:df:1a:99:9a:dc:
10:e7:e4:4a:e8:57:05:a0:fe:7c:6e:88:18:27:e1:23:b8:1a:
9e:7f:2d:08:c6:5e:d0:0d:c0:19:44:09:cc:67:5c:e1:72:46:
83:ee:53:9d:48:f4:68:04:f2:f6:f2:3c:f5:24:60:b8:ec:94:
08:66:49:b1:71:ed:f2:02:e7:44:23:e3:8c:2a:78:68:6c:7c:
c5:8f:70:11:ad:48:1c:94:ad:b6:20:8d:03:6f:4e:60:6d:80:
df:4f:76:4e:f4:f1:27:ea:d9:8f:b5:96:40:59:54:de:48:72:
de:ea:82:d0:f5:b5:21:af:be:2b:6f:80:23:37:f3:05:a5:df:
ba:e4:1b:aa:43:a5:e2:a9:a6:d1:e2:0c:e9:4d:3e:db:c5:0d:
ab:2e:5e:84:cf:ce:05:ef:7d:f3:02:80:e1:10:0f:05:34:10:
80:9b:f2:c3:cb:68:3e:8a:53:bc:c6:25:9b:2f:b3:15:e7:36:
25:f7:73:e3:f5:23:26:33:62:cc:18:ca:cb:4e:c8:fb:ec:60:
5c:da:49:44:3c:ea:88:aa:f0:59:39:7e:dc:b1:f4:11:91:5a:
0e:47:47:7a:ed:18:e1:fb:7d:ea:28:a5:09:ca:f3:00:54:a0:
24:a6:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:52:03 2026 by rpki-client