Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: LBWQw5FEPA17RHQCfjCdpdFfSbeO8x+Om/Zs1K2trsE=
Subject key identifier: D4:BA:13:FF:8A:B0:79:96:2D:84:4E:57:3E:1A:64:8B:A6:A0:8C:8F
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 019F9DDF3EAA98E11976CC61AF02EC0A99CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0DCE
Signing time: Sun 26 Jul 2026 10:01:21 +0000
Manifest this update: Sun 26 Jul 2026 10:01:21 +0000
Manifest next update: Mon 27 Jul 2026 10:01:21 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: p3wkJOL60/+KPQkYoVECIQMFCWDtXClJk5FTkCLElmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:df:3e:aa:98:e1:19:76:cc:61:af:02:ec:0a:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jul 26 10:01:21 2026 GMT
Not After : Jul 27 10:01:21 2026 GMT
Subject: CN=d4ba13ff8ab079962d844e573e1a648ba6a08c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:f0:86:ac:ed:b9:d7:64:fa:9f:62:60:a9:
c0:94:b6:b0:b0:b6:db:07:2e:fb:d9:aa:ca:94:34:
60:22:90:c8:bc:13:58:43:e2:cd:ec:a8:bc:08:3e:
5b:f3:ba:05:e2:db:70:ca:26:2d:fc:3f:81:7c:ab:
3e:d3:2c:fc:41:77:87:ab:01:97:70:21:dc:43:37:
fb:15:bb:cb:e8:62:9b:89:ea:ee:ad:17:9b:a8:48:
64:6b:99:ee:32:49:b1:93:36:57:df:d8:b1:41:2b:
7e:2d:33:66:ff:cf:42:5c:dc:16:0d:91:75:4c:7b:
e0:8d:61:2b:77:0a:a9:48:da:fe:b5:53:dc:83:82:
f0:87:ce:c9:9a:a1:56:60:f6:a8:c0:be:00:81:de:
96:4b:ea:e0:24:55:ad:90:8e:21:4d:02:a5:44:4f:
ee:e3:30:30:b1:4f:71:b4:3a:52:4c:da:a2:ed:f5:
c2:83:21:76:16:67:38:f4:64:a1:0a:ca:5b:ca:38:
e3:b5:64:03:95:6d:d8:b2:82:d3:5b:4f:2c:d3:fb:
2f:e1:f9:a7:ce:ec:1e:ba:80:a4:9f:25:82:f5:7f:
3e:24:a3:b8:15:64:85:fb:2d:23:bc:95:a6:bf:20:
b3:df:8d:3b:2c:7a:5d:7e:14:96:55:7f:47:5f:85:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:13:FF:8A:B0:79:96:2D:84:4E:57:3E:1A:64:8B:A6:A0:8C:8F
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a2:c1:20:a5:4b:2a:88:64:ad:48:9e:ec:9c:8f:ac:ce:99:
39:e0:d8:95:55:f6:cb:ef:6b:9a:cf:45:92:11:36:f9:75:9e:
86:69:36:f4:71:a9:b8:c2:2b:34:9f:d6:d0:eb:ef:3c:61:e3:
07:49:26:93:73:18:fb:db:d0:7d:d4:63:8c:b9:39:0b:96:cd:
7d:e4:09:4d:48:84:d3:fb:03:58:b2:96:ae:b5:12:68:e8:87:
2a:f6:f3:ea:9c:37:14:37:44:e0:7b:88:6a:66:cc:37:3b:d1:
a3:d8:ea:50:a2:4a:0a:0e:f2:34:47:8d:d0:3f:29:20:1c:9e:
cf:3d:16:c4:da:d7:20:89:3a:02:c3:0e:f7:28:40:80:84:ea:
76:70:7f:cd:d1:fa:33:3d:41:1f:72:20:f8:28:d6:49:10:89:
9f:52:e1:b6:0b:47:37:62:45:29:43:92:72:9b:bd:3b:0f:d7:
fc:25:dd:56:da:05:e1:8b:0e:b2:85:0f:7b:91:f3:70:46:65:
7e:42:a4:a3:23:3c:9d:78:ec:85:82:16:dc:b1:14:5b:ae:31:
5f:9a:4b:99:8a:24:8c:be:35:7e:f4:cc:fb:11:59:bc:ff:20:
44:b4:d5:02:ea:ad:70:9c:91:50:a2:48:f1:6c:02:d7:6d:9c:
ea:6b:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 14:51:40 2026 by rpki-client