Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: 7hVz5rl88bRUnal1q+NwEF/wkiEK893nxsvidL6Vvdo=
Subject key identifier: 1F:7B:EA:F1:B1:75:EC:80:E6:0C:F1:6A:9D:2A:DA:AC:DD:A7:2A:C8
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 019E2B15B51D86D1BB4BCEC7C8108391F5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 190E
Signing time: Fri 15 May 2026 10:01:43 +0000
Manifest this update: Fri 15 May 2026 10:01:43 +0000
Manifest next update: Sat 16 May 2026 10:01:43 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: J2VUfn3FSVm6427n2aU4Fdn6EeLQYn4jb4AJmMv1yEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:15:b5:1d:86:d1:bb:4b:ce:c7:c8:10:83:91:f5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: May 15 10:01:43 2026 GMT
Not After : May 16 10:01:43 2026 GMT
Subject: CN=1f7beaf1b175ec80e60cf16a9d2adaacdda72ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:40:07:f7:1e:66:38:f8:24:17:59:dc:8c:
86:54:72:b7:47:97:f1:d7:b5:3a:57:54:05:d1:e5:
42:90:4b:91:cb:0a:62:be:82:bd:b6:88:ad:e0:d1:
e2:82:7e:b0:7d:34:48:79:07:d8:a5:ab:96:58:ea:
71:36:b9:dd:2b:68:5f:f8:64:83:9f:7f:83:71:19:
56:d1:4c:3f:81:18:33:aa:54:31:aa:28:36:4b:eb:
bd:a8:de:28:ce:1c:fa:01:e5:9e:06:d1:4f:ed:12:
82:bc:c3:86:0d:b2:b9:cd:5c:5e:2c:3c:e8:43:4f:
32:72:ce:db:6a:7c:ef:70:8d:6f:b5:ef:9d:cd:6f:
e8:3a:28:a4:23:9e:af:00:19:7e:35:0a:a9:18:b1:
25:b7:34:b8:1c:dd:21:80:03:14:18:ff:d1:7d:c3:
b5:8d:bf:da:66:3d:c3:12:31:f4:4a:d5:4f:2c:94:
cf:3b:d1:43:52:0d:27:fb:d2:cf:5d:50:35:87:4d:
83:d2:83:8f:c6:d1:be:19:60:14:7c:3c:d4:d6:4a:
ec:b0:b9:b1:05:79:82:7f:31:e3:18:7c:25:93:6d:
4b:19:0d:63:0f:2b:09:90:b5:1d:43:87:7b:86:24:
a2:07:cb:04:0a:0a:97:39:48:69:3d:2f:f3:f6:2c:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:EA:F1:B1:75:EC:80:E6:0C:F1:6A:9D:2A:DA:AC:DD:A7:2A:C8
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f2:81:79:06:cd:a1:ce:63:91:7a:f8:92:0a:61:00:c9:f7:
48:a5:0f:2f:74:e0:b1:43:01:1f:36:d3:c9:c1:d4:40:e7:cd:
cb:d5:b7:cf:c9:e3:ad:6d:ab:53:d6:96:c9:d4:64:7a:88:2d:
92:a7:75:1d:fb:30:0c:b8:90:b4:ad:2d:a8:2a:d9:21:80:1f:
59:26:cf:6c:90:8a:a2:26:1c:43:8c:53:d7:30:2c:9a:a4:ed:
7c:27:43:48:d7:3c:3c:4e:98:b4:2d:da:d6:18:e3:75:2e:e4:
6a:69:b8:73:96:91:65:df:60:6a:ef:47:1e:c3:c2:dc:6d:95:
a2:03:90:d5:40:24:e2:99:27:90:8f:07:83:16:6b:7c:6c:86:
c5:b6:08:bc:19:e8:87:9c:e2:36:03:3e:70:e2:ba:ed:f9:92:
77:d6:49:4c:98:0a:e3:07:1e:66:29:6f:64:50:98:51:b9:fc:
34:d3:c0:1a:a8:11:95:95:0b:32:4b:5e:4d:1c:c2:cd:0a:0b:
d1:9a:80:a3:c6:6e:57:b9:07:65:e8:4e:4c:e2:0b:5f:c0:70:
f1:d5:cc:eb:60:8f:ab:12:78:bd:cf:cf:d4:79:95:c0:c4:7e:
22:66:d5:d1:7f:e8:10:4b:ae:da:27:b4:2c:57:06:d5:cc:ad:
88:eb:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:25:51 2026 by rpki-client