Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: 8diBwoRB9tcyNnhUVpVLPvrHGwQddyC+zkFF/YiBXu8=
Subject key identifier: FE:FC:01:9F:92:58:89:06:7F:DB:BB:AD:86:D1:E1:A3:D7:0F:FE:5E
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019F0C2D0E5254D655B9E12796B8134BEFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1980
Signing time: Sun 28 Jun 2026 03:01:47 +0000
Manifest this update: Sun 28 Jun 2026 03:01:47 +0000
Manifest next update: Mon 29 Jun 2026 03:01:47 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: DTOCyLBSA97jrgkTneljLgBaw85EsbGT2N+l3wsvuy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0c:2d:0e:52:54:d6:55:b9:e1:27:96:b8:13:4b:ef:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jun 28 03:01:47 2026 GMT
Not After : Jun 29 03:01:47 2026 GMT
Subject: CN=fefc019f925889067fdbbbad86d1e1a3d70ffe5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:03:7a:60:8a:c5:89:b5:ac:92:2b:4f:b3:
d4:bc:2c:94:b5:3e:71:e3:00:ad:d2:28:64:c1:ff:
37:d8:0c:3f:db:ab:1f:30:4b:f9:b8:d4:1f:8a:e8:
bd:12:b8:03:1a:5e:3d:de:8b:7f:89:0f:50:f4:14:
0e:d2:02:1f:f6:7f:44:71:8f:54:44:00:a1:66:3b:
78:5e:b4:21:c0:d0:05:8f:b3:26:f9:0c:3c:19:58:
63:85:2e:f9:a5:f6:cd:18:a3:70:de:20:dd:a9:0d:
06:ef:33:31:c7:34:ef:09:c7:a3:71:8d:d4:5e:15:
12:0f:25:80:a6:98:ba:fb:62:2b:39:81:20:ff:93:
df:ad:17:7b:8c:62:51:50:39:0a:63:a6:44:f1:31:
eb:53:64:69:7d:e2:34:31:32:14:40:de:f6:09:56:
ee:d8:26:40:c2:29:c0:ea:e9:1d:50:16:19:f7:c6:
68:41:17:8e:59:87:34:09:ba:9d:8e:e2:68:50:fd:
5d:eb:86:da:97:50:26:8a:62:0e:ea:c0:0e:fc:47:
87:ca:d7:2e:6f:d7:67:0a:96:76:0c:b9:14:a2:88:
f8:46:ab:23:e2:58:87:3f:57:1a:5a:66:4e:bc:98:
60:48:d9:20:83:c9:04:ca:0f:61:2b:cc:1a:0a:7b:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FC:01:9F:92:58:89:06:7F:DB:BB:AD:86:D1:E1:A3:D7:0F:FE:5E
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1b:29:33:18:ee:01:f7:e2:4b:41:8f:2a:e1:39:6e:80:b1:
84:4b:ad:4b:79:22:27:46:7b:02:e7:b6:bc:19:30:d8:7f:1b:
62:ce:ae:56:86:4e:4b:3f:ee:f4:93:24:bd:f0:d5:2f:2d:64:
cc:c2:78:ec:9d:a1:8a:75:f0:86:2a:c5:ee:1e:bd:86:76:5b:
0d:82:c1:e8:69:00:9a:ca:b7:c7:59:67:bb:e3:97:d8:f3:26:
c1:f1:21:9c:b0:ae:44:09:00:7c:97:d0:7a:5a:c5:72:7b:61:
be:69:98:8a:94:6a:24:68:cc:b0:a7:40:10:11:d8:ec:1c:15:
43:82:b8:31:9f:62:07:59:4c:9a:97:22:bc:cc:0b:cf:2c:52:
eb:c5:6f:d7:25:87:f2:43:e3:bb:94:29:b5:5a:cb:8c:93:fb:
38:ad:5a:e6:91:5b:ae:fb:90:e9:dc:ad:33:c6:6e:a1:59:f2:
12:05:96:80:35:ff:23:f3:c1:ef:76:07:7b:26:3d:a0:ba:46:
60:0f:d1:11:ee:78:ff:34:4b:94:f4:8e:0d:59:a9:54:b3:bb:
1a:35:1f:70:9d:8c:0b:01:e9:b2:22:79:65:5a:4d:97:62:12:
84:df:09:ea:25:dc:09:80:d8:5d:fd:22:39:23:58:c7:78:e9:
56:c5:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 08:02:14 2026 by rpki-client