Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: 3dTwei8XgMPT4tgQgharKAhw55crddKMLvtAXyRclYg=
Subject key identifier: FD:96:5A:95:AB:07:6E:AF:A2:CE:1A:53:EB:6C:23:34:F9:07:57:27
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 01A19C5980B556E325D3C10FCCC1E3A29857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0D23
Signing time: Mon 02 Nov 2026 13:01:13 +0000
Manifest this update: Mon 02 Nov 2026 13:01:13 +0000
Manifest next update: Tue 03 Nov 2026 13:01:13 +0000
Files and hashes: 1: BqP8JpSkO9zmFzKOVwQO5quzGwc.roa (hash: mL1va32nLh3K1Fn2SjIGSxBOV9vU7EKGw0UkMzUCNeA=)
2: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
3: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
4: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
5: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: IzxNYSeRQONOwgePAss6ksL16ezz66ORHjvNJwhEPEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:59:80:b5:56:e3:25:d3:c1:0f:cc:c1:e3:a2:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Nov 2 13:01:13 2026 GMT
Not After : Nov 3 13:01:13 2026 GMT
Subject: CN=fd965a95ab076eafa2ce1a53eb6c2334f9075727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:bc:f4:2f:00:e4:22:7f:f1:3d:d5:4e:bc:
65:f4:e0:0b:1f:47:d3:a8:66:b1:2e:1b:d9:09:1a:
70:a2:83:ee:46:1c:3b:34:9e:be:cf:4a:d8:ae:64:
f4:c2:7b:ad:1e:f6:b3:73:02:b5:7b:27:8a:da:98:
3d:85:55:b5:a0:fd:2e:b8:bd:5f:b7:fd:e7:ba:45:
31:04:46:71:ed:b6:2d:a8:86:ce:bb:91:c0:8e:40:
2b:36:cd:74:02:38:c6:46:2e:21:5c:d0:c4:78:cf:
05:89:a9:e9:0c:17:9b:e4:71:14:f2:4f:31:73:a2:
d6:78:c8:db:a0:c3:ff:ac:f2:a5:54:16:ba:23:43:
47:d4:b4:ce:40:b3:40:89:26:83:db:8a:e1:18:ce:
0f:9e:8d:b7:b5:35:dc:c6:04:f5:43:16:f3:a9:53:
7d:0b:60:87:c8:39:1a:07:91:0a:3a:1c:e3:b4:5d:
5f:fc:5a:3e:cb:7a:2b:f7:38:c9:8e:16:e2:ea:c3:
67:9c:36:b1:e2:31:1d:73:d2:4b:7d:ef:5a:4f:36:
a6:07:d6:c0:35:8f:90:a0:3c:41:da:3c:65:47:78:
75:11:d1:4a:d6:69:d7:9c:80:a0:20:73:eb:57:9a:
39:7a:36:95:3f:29:dc:76:c1:c5:6e:9b:42:e2:c8:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:5A:95:AB:07:6E:AF:A2:CE:1A:53:EB:6C:23:34:F9:07:57:27
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:19:09:67:b3:c6:37:f0:49:a3:17:19:0c:95:fc:33:14:31:
24:d8:64:6d:03:ba:06:44:f8:9e:c4:87:bb:25:7d:8f:ae:be:
c7:3c:94:e0:91:09:6f:b1:a8:6d:76:d5:37:ce:72:b8:36:7d:
b6:54:16:f3:f6:6c:89:ad:10:ef:fa:ed:fe:8e:1c:42:51:e6:
f9:1b:b1:36:ce:72:f1:d3:53:eb:ee:21:28:13:49:43:68:20:
e3:e1:c2:94:59:8f:30:29:8e:e7:01:46:b7:25:84:73:be:4f:
42:88:05:bf:a2:53:c8:ee:de:5f:e6:a6:92:41:63:8c:b3:bf:
13:b0:6c:29:95:11:23:e2:a1:78:8d:ce:86:db:41:37:be:22:
c8:47:c6:f7:2c:3b:b0:b2:97:9d:d3:76:55:f1:fa:26:1c:1e:
5f:65:2d:86:c5:50:97:32:f4:ee:0c:c9:8e:4d:31:75:c1:45:
1b:ab:69:02:5b:e7:0d:26:e6:58:ac:8e:0a:b5:43:87:72:0e:
dc:54:7d:94:75:61:01:98:50:00:8f:b2:5b:9c:11:1d:2a:1b:
63:22:3f:5b:1c:07:56:1d:7d:73:2a:80:c8:d7:0b:cb:c6:a1:
b5:83:21:bf:57:15:e6:ec:cf:2c:9f:1d:aa:93:a9:52:56:82:
0c:af:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:51:20 2026 by rpki-client