Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
File: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft (raw, json)
Hash identifier: nbMBvAkeGZlV3sQyYhCLWdfuwRfodQo1DgIHpXcyQR4=
Subject key identifier: 1F:DF:17:AA:F1:02:58:99:43:DA:13:2C:A2:48:9F:A4:CA:E3:26:73
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 019F86E8E2457E9754113CB5DEEE6772AFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
Manifest number: 19C9
Signing time: Tue 21 Jul 2026 23:00:36 +0000
Manifest this update: Tue 21 Jul 2026 23:00:36 +0000
Manifest next update: Wed 22 Jul 2026 23:00:36 +0000
Files and hashes: 1: 1lthQpNbdjvBjBvjx6o7dCcl_Lo.roa (hash: 09BW9AeuTKZNn0ro2yAFDYjo+0iZf6CKLrMs3cH5rIY=)
2: 6aiY7xcGMBhwSg811tAap0q5YOE.roa (hash: 5uK3tyYvucJWaPpSSYb7UKyYwuwhu+iE+thzsmoLCeU=)
3: IYFabOpy34kt07L89z5pfxkyqH4.asa (hash: 2JdSJ7oM52bIUu79CzF95UiMnRGEJELhEYcHEL9TeIc=)
4: RH0DxJdy9sgkSFYB6k0LE7nWDhc.roa (hash: XjBkKwPLZL3Yi2tKr0y72A6eYen+buTvuweq1X1GG4Y=)
5: dQeRFX64w7Gj5tRP8kDuY3-qGYM.roa (hash: NGvNDCH8JOp3+J18djkqIKrsn9XAQSXC2Ct+Fov8XNs=)
6: gahY2AwMV2dT0-Rml8PSy5NNRwU.roa (hash: YqOJQ01+Og7TwNTW8gpVjpEoYoqEByjHecFHs9UvJNo=)
7: vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl (hash: jXK8DpHUJCj5G9Jc5z3gPFtwAABfZX/0k3Sra+gweR4=)
8: xuh6sRkHSsQPLZas7QrHkiH1T2k.roa (hash: /cp/uJIEUnczl8mvWtL8aIuZWLWYTpcWWurRsAFLXiA=)
9: ywNEo0c6G_3EtU_rhMpvOTWsLBk.roa (hash: DK9+AlzaJPs7Bge4vOR9auQX8qnNw3cNCE94Ti0BdaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:e2:45:7e:97:54:11:3c:b5:de:ee:67:72:af:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Jul 21 23:00:36 2026 GMT
Not After : Jul 22 23:00:36 2026 GMT
Subject: CN=1fdf17aaf102589943da132ca2489fa4cae32673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:51:0f:20:7f:d1:a2:b8:90:3a:73:2c:94:
05:80:92:12:18:b0:df:bc:ec:2e:9b:3a:ed:09:f5:
ee:d0:b9:f2:3c:ab:67:33:ac:65:30:25:4f:29:2d:
7e:53:1e:cb:5a:c2:66:a4:65:c8:d1:46:fa:7d:6c:
6c:f2:d1:76:46:11:2e:90:50:a2:cf:ae:c3:21:e1:
14:f4:40:a5:52:f0:5d:f8:98:e0:b0:73:e7:52:28:
9e:96:04:7e:74:a7:76:81:42:90:5d:cc:3c:c2:2e:
71:b8:92:3e:a0:4a:cb:81:d6:f1:74:f2:44:f0:88:
f1:f4:4e:1a:7b:c3:4d:7b:f3:f5:ff:f5:fd:22:c3:
43:d8:b6:8a:18:c6:bf:7e:79:a9:ba:38:e3:32:e4:
f6:24:8f:b9:9d:07:d0:af:5a:68:0d:77:1d:d3:44:
2b:7e:e0:47:cb:66:5f:c7:56:68:55:c9:ff:58:43:
f7:64:d1:4e:36:71:10:f0:6b:ca:41:6a:a8:8c:0f:
30:47:4f:19:3e:9d:45:10:7a:93:5a:df:03:89:79:
10:ee:0c:48:f7:b5:d0:2b:1a:e0:bb:3c:2a:6f:b2:
df:68:d7:37:84:b9:0c:f3:b5:0b:38:4a:1b:b2:47:
58:fe:e3:94:16:70:f7:41:c0:b3:73:a3:5c:31:17:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:17:AA:F1:02:58:99:43:DA:13:2C:A2:48:9F:A4:CA:E3:26:73
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6c:ec:c1:07:13:76:95:3e:c5:04:cc:7a:37:4c:85:48:d9:
65:39:89:d5:67:10:12:db:45:61:d2:65:20:58:e7:01:d8:4d:
a9:2d:80:e0:e5:35:ba:9d:5e:6d:a9:66:64:ac:f6:18:28:bb:
aa:05:70:e4:a1:c5:10:cf:6c:40:80:77:b8:41:db:45:3b:17:
7c:60:51:d8:ef:74:75:66:28:d1:85:84:e1:6d:53:0b:36:5a:
5f:d7:72:6d:a2:f7:fb:3f:f5:90:3b:e5:9f:ae:74:f7:a5:58:
1e:06:00:ff:11:a9:6b:86:12:4c:43:9a:ab:13:9b:30:8f:b6:
5d:aa:8e:2e:cf:1d:30:e4:6b:1b:2c:38:0d:97:b7:8a:68:c1:
e5:39:25:11:e8:71:b0:7d:b5:d4:eb:20:4d:fe:62:4d:8b:4a:
53:4e:22:20:ae:e8:7a:f3:c3:12:33:c9:b5:ec:1b:5d:93:8a:
a3:a2:2f:16:8b:a4:2c:2c:5f:b9:88:3a:cb:6a:92:b7:d8:56:
6c:2e:19:cb:a3:2b:3a:9a:31:b0:60:da:55:3d:e9:7e:7f:9f:
6a:a0:7d:e1:77:e8:41:16:06:eb:20:6e:66:e5:b5:d6:61:77:
6b:b8:fa:07:a5:c5:49:99:63:71:f1:b4:99:f0:37:c7:b9:cb:
1d:1f:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:04:52 2026 by rpki-client