Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: KecxelO0oDcqc0WwkW/EhqTHc7kJ5kaztDhvQh1sHVQ=
Subject key identifier: 9E:2E:C9:7F:D4:E9:DF:50:71:8D:05:B8:98:00:F3:CC:0C:4E:67:A7
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 019F84FAE781A4526BF3F58ECDE39CA5F3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0B57
Signing time: Tue 21 Jul 2026 14:01:03 +0000
Manifest this update: Tue 21 Jul 2026 14:01:03 +0000
Manifest next update: Wed 22 Jul 2026 14:01:03 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: hHik7+kNXFUZlCTP/LMwh8ksJV16PLph+94iStrj5YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:e7:81:a4:52:6b:f3:f5:8e:cd:e3:9c:a5:f3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jul 21 14:01:03 2026 GMT
Not After : Jul 22 14:01:03 2026 GMT
Subject: CN=9e2ec97fd4e9df50718d05b89800f3cc0c4e67a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:cf:e2:76:c7:c0:b8:7e:30:9c:e1:5c:e1:
d0:b2:d4:7e:d1:4c:9e:ca:d7:77:f6:e9:53:84:8a:
9c:ac:2c:8d:3d:5f:1b:16:2e:42:27:4e:e3:49:5f:
57:fa:5e:eb:10:49:12:9e:63:14:fd:90:f0:ff:10:
45:b1:05:90:1d:b1:06:7d:5f:75:50:b7:8d:64:9f:
41:5d:c7:d3:ed:f8:8c:47:ef:ee:08:f0:7d:d4:9e:
d6:d4:2b:22:c2:f7:0e:28:9c:5c:4f:18:d7:5d:d0:
29:93:d7:f1:60:0f:e1:c1:78:88:64:07:cc:ae:75:
8e:1d:16:71:8f:0f:41:c1:1b:0f:5b:7c:d6:fe:b1:
61:a5:6e:60:9d:ed:d2:cb:de:19:5a:0b:81:35:0c:
b1:3c:eb:3e:a4:86:86:d1:e6:c0:80:d3:6c:c3:dd:
ff:25:da:af:21:05:1a:96:14:85:3a:db:60:37:29:
3e:ba:46:ae:00:fa:e7:91:9a:25:06:a0:94:51:a6:
c0:4d:cd:04:c9:b7:b9:2f:a0:61:e3:dd:72:d9:96:
e8:5a:eb:e6:44:95:ac:80:d0:f5:d5:a3:45:6a:02:
03:e6:36:6b:2c:49:cb:9f:1c:41:97:8b:7c:a1:19:
4f:08:57:40:63:f3:da:f6:b0:27:f4:ba:f4:27:44:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:C9:7F:D4:E9:DF:50:71:8D:05:B8:98:00:F3:CC:0C:4E:67:A7
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b2:67:b2:71:2c:4a:bd:80:1a:a9:d3:30:ea:8a:d7:f3:40:
a3:6d:82:b3:95:37:3e:43:2e:2a:ee:46:16:45:b9:d6:48:68:
1f:71:df:2c:99:74:83:a2:6a:80:64:9a:38:84:97:fe:8f:b9:
81:7e:e9:98:0b:4c:05:67:7a:81:00:b0:4a:33:a4:1b:c7:29:
b3:62:f1:09:15:e0:d2:79:9e:3a:aa:f8:d3:9a:99:0c:bb:e9:
b6:a9:18:41:b5:da:f2:f4:31:05:8b:22:1a:6a:07:db:5d:3f:
0b:ac:91:d7:d2:46:56:e0:b3:9d:b7:cc:2a:1b:00:bc:69:4d:
82:8b:b6:8f:a1:94:ed:70:1f:e8:e7:c8:b7:c0:cb:97:8e:33:
67:0a:ce:71:4c:f6:65:d6:84:6c:28:1b:ce:5d:2d:d9:08:23:
65:71:90:9a:01:43:cd:74:b4:4f:b3:f7:13:86:a1:e1:a3:38:
6e:a6:20:9c:d1:0d:89:86:e5:69:28:be:97:f4:a7:3e:de:65:
9b:16:b4:7b:a6:5a:b1:92:f8:c5:83:99:eb:7b:e3:f3:30:f9:
ec:6c:b8:40:f0:5c:d8:4c:db:36:a5:5a:ac:63:91:18:2b:fe:
9b:ed:bf:df:a0:a0:60:9a:f8:1e:07:6b:f7:02:5d:98:22:25:
63:c9:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:52 2026 by rpki-client