Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
File: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft (raw, json)
Hash identifier: rJnI13bI8oLUfvBVU97pIXcXFul3Pef9iC6C+Lbyd2c=
Subject key identifier: 66:C1:95:96:D7:35:D0:F5:38:0B:34:E6:66:B5:C0:DA:8E:A5:CE:AB
Authority key identifier: BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
Certificate issuer: /CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Certificate serial: 019F9EF26FFAB90F659EFCCF862F5B0C6D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:01:56 +0000
Manifest this update: Sun 26 Jul 2026 15:01:56 +0000
Manifest next update: Mon 27 Jul 2026 15:01:56 +0000
Files and hashes: 1: 1CjpuaS4rw8ge0-ltXV4l2OX60Q.roa (hash: xS3Tyjiosi2JKWLFjDH1G3QDY2JB3RAWfG149pE1I9U=)
2: vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl (hash: PSuhwQWgurbKR2OO6AxNazI8/XN6LoXPIlCxAmlm8jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:6f:fa:b9:0f:65:9e:fc:cf:86:2f:5b:0c:6d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1f4ace719908e5db67d5c87ef054aa1676928d
Validity
Not Before: Jul 26 15:01:56 2026 GMT
Not After : Jul 27 15:01:56 2026 GMT
Subject: CN=66c19596d735d0f5380b34e666b5c0da8ea5ceab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:be:34:53:00:a6:fe:d8:7d:13:4e:bd:bb:
63:ba:3b:0c:4e:8c:07:6d:9a:5b:47:29:cc:8b:a6:
3d:04:9b:4d:3e:0a:64:37:f5:69:32:7d:08:22:24:
b9:02:6e:3a:95:3d:65:24:5c:9c:b2:64:49:a0:1b:
54:3c:bc:6c:38:8d:9e:10:79:f3:fa:da:56:db:78:
3b:f5:1a:6b:d2:ef:76:ce:92:e4:eb:80:79:19:e2:
21:93:59:14:ad:52:38:8c:5d:86:8b:c2:ce:89:57:
92:ab:4c:e6:ca:e6:81:54:04:bc:56:9d:13:99:26:
98:13:95:11:7f:9a:9a:90:be:bd:57:7e:a6:91:76:
b0:09:d9:f0:cf:e1:e9:49:b7:9b:2b:1b:60:ff:bf:
3f:9f:22:ef:a7:40:9b:00:0a:a3:8e:4a:e1:5e:61:
22:3a:ae:7a:ed:95:4b:fc:be:a0:1e:28:9d:24:8f:
0c:91:ae:70:90:03:a6:21:23:2d:5e:b6:72:e7:70:
90:74:37:96:08:4c:67:56:c7:04:60:55:d3:a5:c0:
80:1a:c1:1e:37:2d:6c:04:9d:a3:07:ad:42:f2:92:
4d:1e:f2:13:ef:de:e0:cd:9f:18:4e:54:14:1e:33:
ba:70:3b:dc:3d:b6:c7:2b:1a:b8:61:50:4b:e7:50:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:95:96:D7:35:D0:F5:38:0B:34:E6:66:B5:C0:DA:8E:A5:CE:AB
X509v3 Authority Key Identifier:
keyid:BC:1F:4A:CE:71:99:08:E5:DB:67:D5:C8:7E:F0:54:AA:16:76:92:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/vB9KznGZCOXbZ9XIfvBUqhZ2ko0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:03:ef:fe:b0:e5:96:ea:48:94:7a:57:1b:34:05:c8:19:47:
e0:19:2b:8d:cb:97:4c:5e:b6:ae:e1:ff:fe:e9:25:86:24:f5:
b9:3b:76:50:87:dd:ca:24:73:8b:2b:e7:01:38:dd:42:a7:c5:
56:b2:1b:51:0c:7d:09:5e:df:35:bd:f3:bb:94:44:ca:58:90:
c8:5d:b7:7f:13:e0:2f:13:16:8a:c7:19:23:73:ad:a5:6c:7e:
57:6e:28:38:79:8f:97:e7:aa:df:7a:34:f3:cc:06:70:e1:0f:
fe:11:25:6f:12:3a:cf:04:98:4c:57:bb:0d:4f:85:c5:08:3f:
1f:ba:e4:4b:c8:db:16:40:ef:0c:f5:c3:b1:f0:23:06:54:fb:
5d:f5:5e:c9:7b:43:c5:1f:ad:28:07:30:ba:8e:a0:93:29:09:
7a:fd:1a:90:6e:1a:59:ff:a5:a5:1a:8a:c3:ac:57:3d:ac:49:
c6:08:82:d3:cf:7b:3c:d9:e3:55:5e:e7:74:2d:10:59:4f:97:
e4:ba:4e:11:29:b0:05:56:e0:a3:bd:fa:18:63:75:ce:f1:03:
1b:18:17:06:f3:cb:86:6c:be:26:ce:21:fc:b9:27:7e:5a:d7:
e0:b8:ca:76:d5:76:35:e3:51:00:b8:d0:c0:c7:e4:eb:86:bb:
ca:76:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:45:42 2026 by rpki-client