Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: pEIF+l/asBM+LcGE/2Ueql+ZAyUbsbmsdhUd0qeedOU=
Subject key identifier: 48:96:72:CC:5C:A7:7B:AB:CD:3D:0F:03:07:8A:40:08:77:2D:AD:00
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019F34BAE921760A4422C14052B165349514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0E23
Signing time: Mon 06 Jul 2026 00:01:32 +0000
Manifest this update: Mon 06 Jul 2026 00:01:32 +0000
Manifest next update: Tue 07 Jul 2026 00:01:32 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: 07YNovEIvOvESW6w7XCxLu2sfGq68HZmciyGEElreLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:ba:e9:21:76:0a:44:22:c1:40:52:b1:65:34:95:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jul 6 00:01:32 2026 GMT
Not After : Jul 7 00:01:32 2026 GMT
Subject: CN=489672cc5ca77babcd3d0f03078a4008772dad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:91:15:76:e7:17:db:83:43:31:e3:67:5a:
a6:43:28:0c:78:7f:31:7a:23:85:b0:3b:14:d8:20:
d5:95:0c:d5:a1:37:8e:15:fb:66:ba:dc:c0:1f:bb:
8a:4e:42:b9:38:e7:a6:ab:24:f2:df:b4:ce:91:b6:
15:3f:1e:10:a7:a6:ec:ca:6e:19:1f:cb:55:8c:9d:
49:59:49:05:ab:a8:56:44:17:14:64:2f:a4:74:96:
4f:ae:6a:66:6f:e5:49:6e:14:47:9d:b5:6b:72:1f:
b1:8b:fd:da:2b:4e:2b:de:3a:b1:6f:41:b8:c8:1c:
41:50:bd:64:3c:d8:c7:19:f5:6c:a2:db:fe:72:94:
43:39:a0:b9:33:5b:d3:c2:3b:1d:4a:0e:76:a0:72:
12:50:67:e0:b4:e2:23:ab:51:7c:9e:18:71:c1:d3:
7a:59:e4:7c:1c:fb:bd:45:82:6b:d6:ba:81:03:ef:
3d:94:14:b4:c2:ef:3a:b9:15:bc:37:a7:59:79:f3:
43:59:dc:e3:c6:8c:b9:fc:9f:2f:ba:23:c8:d8:17:
13:e9:31:f9:d0:7e:20:7b:78:bf:85:fc:f5:97:bb:
52:4a:99:41:75:8b:47:8f:3e:66:93:05:c0:a5:78:
74:24:53:15:94:c7:e0:87:b0:15:b0:bd:f9:c0:20:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:72:CC:5C:A7:7B:AB:CD:3D:0F:03:07:8A:40:08:77:2D:AD:00
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dc:fa:27:4f:75:e8:84:e8:5b:11:b1:d2:73:d2:be:0f:c1:
f0:67:cf:7c:1b:0e:d5:a5:16:08:f7:42:92:f9:17:b5:4e:98:
ce:46:fa:c8:56:b2:61:ee:32:88:41:58:de:9f:25:5a:e8:ab:
7c:ea:43:15:27:da:db:4f:d7:8f:b2:d4:eb:39:54:42:ce:2a:
26:b0:c5:5b:d4:e1:36:33:d7:b9:dc:e8:40:89:02:72:13:d6:
83:99:8f:ba:95:96:17:a3:2f:47:36:3e:02:ba:4c:98:98:fc:
87:e5:1f:f6:5f:81:d6:cd:5e:15:57:3b:13:4c:3c:fb:5e:dc:
6c:0a:2f:62:a2:c6:0d:5b:d5:a1:43:dd:cf:ae:4a:92:45:ea:
d0:6c:15:9f:34:d5:de:ac:fb:2c:f9:9e:25:fe:22:25:7b:b0:
84:fe:8c:29:1d:ad:3e:42:6e:b4:bf:96:37:c5:30:f6:09:e2:
91:9c:40:33:ea:b5:f3:42:b7:09:85:ce:c5:18:37:c2:48:b6:
82:27:a2:df:c5:78:f8:c9:fc:d2:35:0e:45:e8:4f:67:29:1f:
82:2f:50:54:67:80:83:5d:d1:2c:6e:ca:df:f4:d3:a4:08:14:
d4:83:93:89:04:81:e3:b0:cb:6d:67:1d:3a:b1:e1:f5:04:ee:
e3:db:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 09:09:17 2026 by rpki-client