Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: 0M0K3kJmL61chl4c2VhVOYArp9w1M2lW9bXxcYj6//E=
Subject key identifier: 3C:23:EB:4E:9F:31:FB:76:54:6D:4E:AC:DB:31:F0:3D:DE:08:6D:E8
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 019FA1BC120FAB18C8048D0D314C2DB0319A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 04:01:24 +0000
Manifest this update: Mon 27 Jul 2026 04:01:24 +0000
Manifest next update: Tue 28 Jul 2026 04:01:24 +0000
Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: ICwtj9GFHLWq0LgSjIBfFZpUrk2gCUyILKzD0TZ6E7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:12:0f:ab:18:c8:04:8d:0d:31:4c:2d:b0:31:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Jul 27 04:01:24 2026 GMT
Not After : Jul 28 04:01:24 2026 GMT
Subject: CN=3c23eb4e9f31fb76546d4eacdb31f03dde086de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:78:68:5c:ac:1e:e9:50:bb:84:2e:8a:81:
38:70:88:3d:89:62:fa:ec:e5:34:70:6b:01:ad:cc:
5c:9c:db:c4:05:2f:4c:f5:89:49:78:0d:3c:0e:8d:
4b:d8:26:bf:14:6d:9f:2c:f0:cc:29:40:12:d5:57:
19:74:9e:80:38:53:97:29:66:52:c2:f5:29:40:c2:
04:c6:bc:bd:8d:d1:e9:bf:2d:9a:8b:67:a5:56:e4:
9a:d3:a8:7f:5c:b5:7a:c1:f8:6c:8e:78:a5:66:e6:
0a:4c:9d:7d:45:f3:6d:bb:43:41:9e:8e:1d:42:90:
98:44:01:fb:7e:ae:84:7c:b5:40:11:c0:f4:10:68:
98:e0:42:d0:5e:7c:5a:aa:72:f0:cf:7a:7a:7d:e6:
ee:97:60:13:fc:20:95:09:ba:13:08:53:4a:c1:16:
15:51:67:ee:db:4f:56:5d:2e:8c:84:94:4d:99:ea:
6e:2b:5d:c8:bd:a8:93:e1:7d:7e:6e:09:ad:62:0e:
5d:e1:9b:fe:3c:c3:e2:af:f6:99:d1:c9:41:9c:ec:
51:dc:17:69:b8:42:9f:af:c7:de:6c:f9:8a:a9:91:
c3:d1:c7:83:fe:93:a9:c4:28:82:64:6a:51:0d:d9:
9e:56:61:62:67:ae:e2:3a:0a:0d:8c:57:12:a0:c1:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:EB:4E:9F:31:FB:76:54:6D:4E:AC:DB:31:F0:3D:DE:08:6D:E8
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e2:95:d5:6d:cd:92:5a:65:ca:71:9b:5b:01:61:db:69:e2:
b5:5f:b5:5e:90:ae:9b:91:46:d8:b5:c2:fa:2e:4e:47:33:d1:
52:2e:35:3e:3b:64:8f:97:f7:e1:31:11:31:09:5b:8f:f2:ea:
e4:82:97:5c:c6:52:22:88:d4:15:a5:1f:80:f4:82:80:fb:9d:
0b:17:51:17:91:09:ed:cb:8f:0c:11:45:cb:30:de:57:f4:94:
c6:a9:bd:2b:0f:87:4a:5e:19:33:a9:81:d4:c3:33:1b:7a:bf:
cf:b4:ac:9b:f1:68:a9:ec:9b:0d:ef:17:c5:50:81:2b:b2:54:
bc:e3:39:cb:21:4c:66:73:bd:7f:dc:97:66:a7:c5:ca:c2:bf:
3e:1e:41:2f:9d:44:17:2c:0d:bf:0d:c7:6b:41:bb:1e:54:ff:
d6:77:aa:42:f5:6f:56:79:1c:7f:58:b7:43:dc:60:92:b4:c0:
48:e7:2c:29:fb:37:6e:6c:45:77:fe:c7:cc:1a:d1:4b:96:9c:
6e:18:f3:55:96:76:92:4d:bb:df:b5:c8:de:84:16:51:aa:35:
ae:cd:1e:c5:e4:b7:ba:ce:0f:38:12:db:97:fc:93:47:6f:8d:
f7:ff:35:38:11:ca:80:6b:6a:60:42:38:b5:a2:ba:e8:80:f5:
72:8f:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:09 2026 by rpki-client