Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: dj2tOl+PRXjVjbrdlD6c8MEGjs3umcXN7K9kH5nFuTs=
Subject key identifier: ED:67:74:3B:86:30:99:2A:4B:4C:EE:63:40:A4:ED:B3:B4:D2:29:C6
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 01A06D26FED2FED06D9884C418054125BE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 16:01:07 +0000
Manifest this update: Fri 04 Sep 2026 16:01:07 +0000
Manifest next update: Sat 05 Sep 2026 16:01:07 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: MjRb9aJ0ArMjJMBTE8JaccgsLyidP+czwzOKhBsRano=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:fe:d2:fe:d0:6d:98:84:c4:18:05:41:25:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Sep 4 16:01:07 2026 GMT
Not After : Sep 5 16:01:07 2026 GMT
Subject: CN=ed67743b8630992a4b4cee6340a4edb3b4d229c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:bb:c1:a6:cb:25:dd:12:c1:be:72:3d:52:
62:ba:d6:ce:41:86:4b:4a:be:19:53:12:dd:a8:fd:
bc:18:60:53:bf:b9:0f:9d:4f:e5:45:7c:8a:a7:fd:
5e:92:f3:82:68:db:92:e8:1e:f0:07:33:44:4e:52:
71:1a:d9:74:10:a1:53:19:0b:9a:eb:b3:39:5d:02:
8f:84:41:b2:b9:5d:b3:dd:6a:90:f1:ee:1d:33:4b:
4a:26:8b:ce:e9:68:6c:b8:1d:c6:c3:db:c6:fa:8c:
ee:69:e3:14:2c:d2:12:a4:a1:0f:18:41:d2:f4:5a:
ad:47:d3:40:59:63:7f:97:dd:6b:df:83:28:70:c0:
a6:a1:1f:de:0b:23:6f:e2:91:4c:79:07:6a:b6:ec:
bd:36:d7:41:d3:d1:40:a7:65:c8:ea:e7:78:55:c5:
8c:57:fe:9d:d7:a8:2d:12:32:5f:e2:53:bf:9c:fe:
35:92:fa:cb:b2:29:bc:cb:7b:72:5e:4a:4b:ea:a2:
c5:a2:af:ed:be:d1:c1:4f:cb:6d:20:aa:a1:20:bf:
bd:1e:1e:81:19:b3:31:b4:5b:0d:58:7f:6f:b7:cc:
09:43:d6:62:8c:11:cf:5a:41:08:55:12:66:fb:99:
53:0e:dc:ab:fa:c4:82:4b:e6:93:a6:0c:29:b1:43:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:74:3B:86:30:99:2A:4B:4C:EE:63:40:A4:ED:B3:B4:D2:29:C6
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9d:ee:c1:61:cd:49:fd:7d:08:9b:79:ee:10:e6:e1:72:4f:
b7:ae:d0:bd:9f:a6:45:7c:b7:d1:60:6f:2d:3d:45:30:c8:63:
b3:80:2a:30:1d:ab:12:2c:19:0d:36:a3:60:bb:ee:9a:d6:9a:
56:59:b2:ab:38:63:f2:62:52:6b:d2:31:c3:57:d6:f1:75:d9:
09:4b:d5:b6:5c:d1:21:c5:db:2c:a2:f5:65:93:34:4a:da:f4:
eb:64:0e:33:34:bb:72:49:6f:be:fd:2c:52:29:02:94:c9:55:
45:d8:77:db:55:76:b3:22:36:65:cc:d0:43:f4:13:f3:c8:98:
54:e7:fa:1f:53:bc:bc:63:a1:0b:e8:0a:ee:0d:9d:5b:b6:c0:
fe:66:0d:94:f1:84:12:1a:6d:fa:0f:d5:77:0d:9c:52:98:98:
d4:20:1b:92:6d:5a:e5:60:da:35:6e:57:f7:d0:aa:8a:69:e9:
24:b2:9b:ce:b5:c4:f9:79:d3:86:fc:4d:d3:73:35:1c:47:55:
f7:f6:bd:e5:9c:56:d7:3a:39:04:f3:f3:a0:ef:dd:d3:1b:3f:
7d:d3:cc:7f:7d:42:9a:0a:4e:5c:62:85:5b:3e:e6:76:3e:de:
c1:c2:ca:0c:f4:5b:51:41:f2:b9:c6:b8:25:ee:88:69:cc:7a:
f4:a8:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:30 2026 by rpki-client