Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: yJ84KBfqCBJ+qtfWmvHAfNrNRXRs45Xa3WR1LSc0TOY=
Subject key identifier: DF:C1:2C:E7:A1:CA:38:F6:27:E4:E9:9E:9C:F5:4C:DF:8E:7A:EB:A3
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 019F867AD1B1BECBD736FFAD3DAD62894698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 0324
Signing time: Tue 21 Jul 2026 21:00:23 +0000
Manifest this update: Tue 21 Jul 2026 21:00:23 +0000
Manifest next update: Wed 22 Jul 2026 21:00:23 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: HZuP1Um4c7/xCT6ko3DfHakEWenZLY18kVJ63v3qgLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:7a:d1:b1:be:cb:d7:36:ff:ad:3d:ad:62:89:46:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Jul 21 21:00:23 2026 GMT
Not After : Jul 22 21:00:23 2026 GMT
Subject: CN=dfc12ce7a1ca38f627e4e99e9cf54cdf8e7aeba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:53:d6:dd:a0:07:19:b4:75:4a:4c:7a:30:
4c:bb:c6:2e:16:6d:31:27:86:37:7d:34:ca:8d:e8:
56:20:51:31:eb:33:d7:af:7e:79:64:6f:d3:b3:db:
b2:c2:c0:a3:1e:92:b6:8e:74:c1:6d:5b:cb:19:9f:
91:67:1b:24:39:8c:74:6e:42:72:cb:b0:67:39:44:
fb:ad:63:2a:b9:e9:40:ce:f1:dc:e6:05:71:35:4b:
0f:52:90:aa:74:4f:f8:e5:38:ed:97:a3:df:9a:bc:
2e:8e:4b:f5:65:e2:15:45:0e:15:7a:16:f4:07:4e:
a3:6b:94:d2:2f:3e:4c:ba:d9:cc:2a:dc:12:a7:61:
54:f5:44:ef:06:5d:47:f5:81:4c:58:fe:42:7e:f4:
67:c2:a1:77:7f:e2:66:74:b5:bb:4f:52:43:02:7c:
e5:56:f7:63:e4:d4:00:20:d0:93:fa:e4:f8:5d:57:
68:25:b3:0c:76:6b:fd:ee:b7:58:e8:4d:61:c9:62:
59:78:b0:73:75:c9:c9:cf:a1:f7:39:ce:80:11:5d:
5d:6a:2d:a1:51:56:6f:d3:37:f3:f7:f6:d1:2e:ba:
a2:2d:46:99:20:0e:42:63:22:05:72:58:e8:fc:50:
81:0b:aa:70:d3:21:06:0e:21:21:79:f9:73:07:73:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:2C:E7:A1:CA:38:F6:27:E4:E9:9E:9C:F5:4C:DF:8E:7A:EB:A3
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:9b:d9:68:33:ab:26:73:63:3d:9a:2b:f5:0b:62:60:31:
50:45:16:f6:77:ab:8c:f0:77:26:5a:e1:2a:76:0a:13:ae:16:
13:b5:0c:6b:f7:d9:18:9e:45:8c:76:cc:c6:df:ec:d1:1c:71:
6a:31:2d:a5:a8:08:db:39:bb:76:1f:85:78:dd:97:3e:c7:ce:
f4:c7:d2:3b:45:da:3b:44:ab:dc:2f:4b:a1:d6:ab:f2:74:96:
a7:4b:ce:05:0a:53:04:7d:f0:79:86:1c:ca:75:8e:32:e4:58:
78:54:cd:03:00:3f:ea:d8:43:52:02:09:14:90:75:77:66:b8:
57:30:27:ee:a1:75:80:5a:b1:ca:72:bd:be:a4:21:bc:46:a4:
c9:b5:71:2b:7a:09:54:80:6d:c0:f8:e5:17:c2:fa:2c:b7:c7:
56:59:d6:26:59:5b:52:2e:b5:36:89:92:cd:2f:38:8f:01:7e:
f1:4c:c0:b4:bf:03:aa:a5:e1:a8:95:e7:78:5b:dc:c1:f5:a1:
c4:d6:2c:40:a8:78:46:01:9e:1b:a3:2b:11:5d:70:00:53:73:
6b:ad:e2:d2:53:aa:d5:1a:96:94:0d:1d:9c:dc:c7:ca:60:ac:
98:ae:2c:e3:17:d0:d6:3a:a5:88:c8:d0:28:58:5d:f7:a3:76:
18:81:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:30:34 2026 by rpki-client