Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File: _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier: /ABr6uYRfHSdBD9BtrN87cX1FA7mJc+KZfSiIETWbMA=
Subject key identifier: D5:DF:13:F1:90:50:AD:15:93:4A:1E:55:72:E3:2F:DB:7A:ED:9A:42
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial: 019F2812667CA69648961A0436B7C0A13A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number: 0CB9
Signing time: Fri 03 Jul 2026 13:02:02 +0000
Manifest this update: Fri 03 Jul 2026 13:02:02 +0000
Manifest next update: Sat 04 Jul 2026 13:02:02 +0000
Files and hashes: 1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: UM3QvoSsNGQ4xwqZdJZnDm3Cu8gZpc0niiZJpnlS8GE=)
3: fzZPCo2MgwRNx0jBproZuv-eSHg.roa (hash: TUdwZLmcSuUajJ8XwoB2OnQqd7+GFsXBXptVyFTtu7c=)
4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:12:66:7c:a6:96:48:96:1a:04:36:b7:c0:a1:3a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Validity
Not Before: Jul 3 13:02:02 2026 GMT
Not After : Jul 4 13:02:02 2026 GMT
Subject: CN=d5df13f19050ad15934a1e5572e32fdb7aed9a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:01:4c:2f:be:64:24:8e:63:08:12:2b:a5:
6b:d2:b6:b2:20:b8:3e:2a:b2:3f:57:56:a9:a5:7c:
49:b1:1a:b6:32:b3:be:bc:be:fd:a5:8a:f2:b6:b2:
55:66:64:76:2c:2a:24:70:ec:d7:67:bc:64:19:c5:
69:0d:3d:da:1f:f3:cd:aa:f1:6d:88:e2:4c:d9:c4:
76:1d:38:35:c7:65:02:d4:71:39:17:50:3a:da:99:
41:bd:0c:1e:69:0c:92:de:11:f6:6e:c0:f0:80:f8:
cb:1a:48:66:20:bc:ae:6e:b0:ad:82:3b:40:8d:a5:
11:b8:24:8e:1d:8e:6a:cc:d9:fc:23:3d:58:fb:6a:
d1:20:32:71:97:58:f0:0f:fc:ae:d1:2e:87:d1:1a:
0f:e5:0a:f3:2b:81:2a:45:6f:8b:08:53:dc:92:a1:
57:d9:31:d5:e4:27:88:dc:d8:19:ef:14:90:c3:4b:
e0:22:ea:5b:44:c0:35:b9:de:b2:b4:6e:0f:62:8f:
b6:14:44:72:0b:d7:d7:7c:94:9a:d6:a3:c4:9d:80:
be:06:f1:5d:2f:43:87:a9:46:5b:ca:45:7e:5f:a1:
a0:d8:7e:e9:7b:c3:2a:9b:1c:84:73:48:8d:2d:54:
7e:06:a7:41:50:75:6f:00:10:10:6c:eb:ef:cf:b4:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:13:F1:90:50:AD:15:93:4A:1E:55:72:E3:2F:DB:7A:ED:9A:42
X509v3 Authority Key Identifier:
keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:95:3b:d0:33:8b:ae:00:63:fc:b8:53:cf:99:01:3b:66:e3:
26:3e:24:b9:87:09:87:b2:80:04:24:3f:17:4c:3a:28:d8:53:
73:ba:9a:ef:60:2f:db:1b:d2:af:20:67:b1:88:45:fd:1e:54:
b2:c0:54:dd:06:17:4a:ac:89:76:8e:d2:0c:3a:ac:1a:42:22:
bd:dc:4d:ab:be:ee:c3:5d:1b:1e:e6:f7:7e:cb:e6:66:f5:62:
5a:2d:0b:75:cb:b7:9d:03:e6:16:e8:da:e8:f4:82:54:c5:02:
8d:3c:36:1c:2d:a8:a6:dd:fa:38:f5:30:8a:bf:37:8d:db:21:
22:b2:38:de:bd:39:9b:c9:93:39:da:aa:d8:58:7e:51:2d:58:
ef:b1:07:c0:f5:b9:76:98:91:25:0f:c0:86:64:01:5a:d8:81:
3d:ac:49:fa:24:5a:ea:9b:61:8c:b7:ba:9a:45:f6:b8:9d:96:
74:4b:37:70:c4:bf:5b:e7:29:98:e3:26:75:f2:98:df:8e:b3:
8c:c8:86:91:c0:82:24:14:5d:07:25:4e:74:3d:df:dd:8e:e4:
cb:1e:56:1c:11:76:41:51:25:a2:ad:7f:fc:53:c6:96:36:cd:
cf:89:c9:52:83:b8:54:c8:b9:97:7b:32:39:1d:7e:7d:05:4a:
96:bf:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:33 2026 by rpki-client