Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: ctDhDuTAemEkutS9tgf4CbryMFOF+tre1V4w3Okl62o=
Subject key identifier: 92:56:E4:45:71:90:72:30:29:23:FF:F0:0D:29:9D:18:EB:ED:A9:EA
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019FF9B62C6F7FCA3873D1ACC6FEE854772D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 19FB
Signing time: Thu 13 Aug 2026 06:01:33 +0000
Manifest this update: Thu 13 Aug 2026 06:01:33 +0000
Manifest next update: Fri 14 Aug 2026 06:01:33 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: QwNzPNTNKHYAxtFx/XDdb3NRwfVntODgL82MflwkKJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:2c:6f:7f:ca:38:73:d1:ac:c6:fe:e8:54:77:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Aug 13 06:01:33 2026 GMT
Not After : Aug 14 06:01:33 2026 GMT
Subject: CN=9256e445719072302923fff00d299d18ebeda9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:2c:29:65:24:69:30:6f:bc:c8:e0:24:92:
c5:df:db:61:8c:8e:ea:ee:05:99:7b:ab:bd:a0:5e:
0e:8a:8e:94:20:a3:35:64:e3:c7:92:b3:a1:77:1a:
c4:f1:15:b5:29:7d:18:e3:52:55:f2:e1:4e:2e:fc:
f8:e0:82:e6:61:01:0b:5f:38:13:37:69:c9:b1:74:
79:12:10:2f:ef:94:09:39:7c:4e:6c:5c:4a:04:63:
57:9d:a1:e6:bf:13:81:45:bc:91:d0:46:76:ca:e8:
42:e7:ff:e4:3f:43:d8:3e:bc:98:12:a0:fc:74:98:
d8:99:bd:c1:f9:77:c2:65:bd:72:a1:d2:dd:8b:ee:
79:37:43:75:ee:9b:ed:e8:ee:8f:92:19:a7:d5:3f:
44:b3:b9:1e:99:f7:35:b4:46:1e:26:1e:9c:e3:32:
9d:e2:16:f6:99:33:e0:62:8b:32:8e:f1:b0:cf:fd:
1b:46:fb:47:a5:be:bf:a8:3f:f5:d9:c9:12:19:c0:
6e:79:3d:53:ad:d3:b2:86:91:56:38:8b:9b:47:d0:
59:41:73:04:35:2b:9f:a3:e9:d7:00:0d:4a:50:42:
73:b3:bf:6f:7e:0e:fb:90:3a:37:92:5c:97:93:43:
68:4b:2e:6b:de:5c:c1:a9:4d:f2:67:45:51:da:bb:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:56:E4:45:71:90:72:30:29:23:FF:F0:0D:29:9D:18:EB:ED:A9:EA
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a8:d3:e5:c7:fb:6b:b2:6d:d9:d4:e1:c8:4c:75:81:52:d5:
74:1c:e7:68:56:94:64:1b:10:10:36:04:64:0d:2a:78:02:4f:
9d:d0:d2:f9:e0:82:2b:ed:b0:7a:0a:05:50:1d:d1:a8:94:6a:
7e:39:b6:12:3a:36:eb:4c:0e:2e:58:46:64:cd:82:2c:fc:73:
d0:ae:ac:3b:52:11:34:04:a7:3e:fe:46:d9:1a:fd:28:8f:22:
90:6d:64:85:83:a7:a8:04:c0:90:0a:01:63:63:0f:32:14:9b:
46:01:26:28:b0:3a:15:3e:b3:fb:dd:a2:d0:50:ec:3d:43:63:
85:7d:30:33:39:7c:c3:33:7e:77:7c:4d:e8:8b:60:08:77:97:
30:76:c0:d5:60:13:40:6c:42:44:94:a3:b6:99:be:0f:91:42:
ed:ad:de:10:09:35:d9:30:ab:b7:bb:e8:ef:01:51:75:e1:a4:
0b:b2:5b:28:28:e4:f6:37:ad:9b:5c:d9:f1:b4:d2:b9:18:0a:
0f:d3:a9:0f:db:03:cd:2d:7f:ca:af:39:65:24:bf:43:16:af:
73:2f:2a:77:94:25:2b:2c:1f:bb:b4:73:ab:01:2c:62:a4:61:
6d:57:89:74:43:38:25:a1:cb:92:af:c4:01:2b:29:3e:6c:a3:
70:81:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:49:12 2026 by rpki-client