Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier: LxfeJSbTzZyssdWP+VO9xc7No15W3tB7/YYvfS9hU9g=
Subject key identifier: F5:49:CB:B3:6E:C8:CF:DD:61:55:3B:5A:C0:7A:76:37:94:E0:90:F0
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial: 019F1265E56CC5182E5A9FCAC7BC4D63F53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 08:01:35 +0000
Manifest this update: Mon 29 Jun 2026 08:01:35 +0000
Manifest next update: Tue 30 Jun 2026 08:01:35 +0000
Files and hashes: 1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=)
2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: jKqrjtvK2NknV989PIIh2Fvi2y3fmB+QBOPErLU/mS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:e5:6c:c5:18:2e:5a:9f:ca:c7:bc:4d:63:f5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Validity
Not Before: Jun 29 08:01:35 2026 GMT
Not After : Jun 30 08:01:35 2026 GMT
Subject: CN=f549cbb36ec8cfdd61553b5ac07a763794e090f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:5c:4a:bc:b5:88:24:15:51:c6:a1:c2:f6:
cb:b4:59:75:84:67:82:01:a2:7e:da:e0:99:0d:56:
8f:ee:60:51:f6:aa:10:cc:6b:f7:fc:44:9e:5e:a7:
dc:f7:08:26:9e:99:82:1b:da:62:f0:67:ae:ef:68:
a7:80:1a:03:94:de:20:c4:e3:0f:38:05:06:a6:5b:
29:f8:4a:4b:06:b4:9f:b9:27:e9:5c:8a:2c:db:a1:
74:5e:ca:5c:b4:5b:be:65:be:a6:ae:71:fd:31:cd:
0f:f2:0e:22:0a:a4:bb:e6:f6:1f:8f:d6:aa:e3:fe:
00:eb:d1:7c:40:2e:2e:1b:10:a8:23:4e:34:60:9e:
59:55:b4:46:35:82:fd:82:3e:d5:d7:83:d9:7d:11:
d6:cd:6f:3f:9b:5a:73:af:fa:9d:90:d1:22:04:5c:
3d:db:6f:0b:71:bd:69:9f:91:c9:90:53:10:2c:84:
74:bf:d6:c7:0a:93:e0:80:75:d1:0f:99:8c:76:75:
b9:ce:a7:b5:87:b6:df:79:57:e0:55:3e:f0:d7:a7:
ae:f9:54:80:81:60:69:32:7a:0b:bd:a4:ff:f8:19:
a3:b7:1d:6f:6e:bf:00:57:dc:59:46:06:69:8e:a4:
4c:9f:5b:bd:99:8f:13:77:c8:cb:2c:e7:1e:84:68:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:CB:B3:6E:C8:CF:DD:61:55:3B:5A:C0:7A:76:37:94:E0:90:F0
X509v3 Authority Key Identifier:
keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:97:89:25:72:27:e8:91:52:e8:74:96:2c:e9:fc:79:12:68:
23:1a:a3:73:49:b1:59:57:72:36:be:fc:43:ff:d5:da:37:4a:
c0:fb:3a:eb:af:fa:a4:e9:e6:22:2d:e2:66:29:09:91:43:f4:
bb:8c:d6:b6:68:d1:05:ef:3a:0c:37:ac:75:ce:84:30:c8:37:
63:71:13:62:3a:92:dc:3b:9c:d7:af:44:43:b6:bb:67:28:f8:
4b:a3:75:41:4a:74:f2:b5:1d:f3:8a:10:00:34:0d:da:c8:c9:
1d:74:d4:e1:12:fb:cc:08:07:4e:56:e0:f5:91:b8:7e:9c:34:
5d:9d:1b:ff:2d:90:24:3e:dc:c2:e8:ed:2c:d7:37:91:e3:2e:
22:4d:f9:f7:6a:b2:23:5d:23:f8:6a:77:3e:67:18:fe:5f:5b:
2c:14:04:b5:84:3c:64:ce:65:0f:5d:30:fb:14:99:65:cf:41:
a8:26:12:77:ef:33:fe:72:3e:6f:bf:19:cb:58:8f:3f:bc:54:
ef:f1:14:83:f4:d1:52:05:99:af:3b:ab:db:be:8f:fa:df:c1:
9b:e3:7e:7e:5e:ab:3c:f2:69:dc:ba:a7:bb:a7:08:87:c7:16:
54:d7:9f:d4:6d:7a:b1:ba:5e:70:e4:e8:e3:99:7a:ad:91:ff:
ab:98:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:34 2026 by rpki-client