Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: f5tUwYTrO4kUYW0VVPFk/8+Fk8e9zD5juMfmDDC89qk=
Subject key identifier: 66:DB:30:47:E5:35:35:9C:B0:94:04:6A:AD:D4:68:51:B1:BD:F5:4C
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019FA0E08348B73565B0E7848C8CACEF71BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0D86
Signing time: Mon 27 Jul 2026 00:01:35 +0000
Manifest this update: Mon 27 Jul 2026 00:01:35 +0000
Manifest next update: Tue 28 Jul 2026 00:01:35 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: KQpriAKiRtEG/wqDOvNWhYc/coFIJLed8Mh3OQVUkKw=)
2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:83:48:b7:35:65:b0:e7:84:8c:8c:ac:ef:71:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Jul 27 00:01:35 2026 GMT
Not After : Jul 28 00:01:35 2026 GMT
Subject: CN=66db3047e535359cb094046aadd46851b1bdf54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:48:2b:62:05:f4:b1:33:35:2f:11:10:7d:
80:20:3c:e8:be:bd:fa:4b:02:fe:85:f4:d2:b3:fc:
b1:ba:ea:db:f0:01:e5:3d:4b:ef:06:6f:12:31:41:
96:3d:4f:2a:eb:f5:46:44:75:d8:5f:ee:4e:c5:ab:
d0:bc:23:7e:02:e3:51:b1:87:c9:27:c3:d2:fc:7d:
c8:70:4a:62:98:62:00:55:b4:96:e2:9e:1d:aa:68:
4b:18:f5:38:68:33:be:8e:ec:ec:49:5a:ce:c6:ad:
89:c7:e9:ef:c5:f8:d9:0a:e0:42:01:7f:da:95:95:
4e:29:ad:30:3d:35:23:2f:2e:14:e3:47:0c:8b:f9:
08:71:c0:14:90:f1:ae:16:a6:ad:cb:6e:c4:bb:2f:
34:c7:3b:01:8f:2c:79:20:67:ec:c3:b6:dc:e6:c6:
e8:11:d7:9d:6e:1d:03:bc:90:f2:80:29:7f:ec:5c:
a1:27:17:e8:49:f2:f2:36:e4:19:d9:a7:13:5c:7b:
bc:70:ce:bf:c5:9c:d2:0a:d0:86:c4:35:24:5e:97:
9c:ee:af:e3:2f:37:b2:01:3c:da:0d:ee:d4:0f:22:
e8:e3:02:4f:70:85:e0:50:f3:7e:97:03:35:9d:70:
ef:68:f0:0e:7b:5a:90:f9:aa:68:68:2d:80:63:63:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DB:30:47:E5:35:35:9C:B0:94:04:6A:AD:D4:68:51:B1:BD:F5:4C
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:1b:77:0d:a0:ff:5a:08:11:60:ad:bb:29:ac:86:ee:29:8b:
27:2e:d7:da:97:92:dd:24:4b:57:f6:4b:ef:95:7c:fe:ab:1e:
85:1e:0e:e4:ee:93:9f:91:55:f0:d5:b4:f3:3f:d9:a5:95:eb:
73:4d:b8:a3:4b:fb:55:08:f4:5e:93:34:7d:b3:83:c9:f7:63:
c4:2c:1d:47:20:f2:35:dd:59:1c:4f:b8:a9:22:bf:bf:62:20:
85:0e:7d:18:c4:6b:02:93:4b:0c:19:22:ff:4f:76:ab:88:d4:
2f:db:02:9a:0d:5d:42:a2:f7:f5:56:d5:c7:89:14:89:a7:1f:
06:8e:7c:b2:b7:c2:df:a1:b4:ca:48:36:a1:81:47:c6:f4:a4:
56:1c:f3:76:d4:6a:2b:fc:f5:b7:39:dd:7d:3c:4a:fb:2d:c9:
39:b6:ec:5c:05:df:ea:bb:6d:43:22:b3:95:e4:11:0e:7d:90:
04:d7:41:0d:de:4e:4a:47:f7:8c:05:99:db:b2:1d:9a:ea:c8:
69:f4:5e:c6:95:39:f0:25:56:cb:a8:df:85:df:15:09:ac:ca:
79:ef:ef:47:ce:87:52:38:1e:6b:2c:e5:f1:93:07:87:6d:5b:
2e:ab:45:d9:e5:67:f1:e0:f9:be:be:a4:b9:f6:2c:62:28:8f:
12:10:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:42:03 2026 by rpki-client