Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: jNnpCTqEDl5PJCLDEfcduspNySmrZp9Os3+Rf1W3bvY=
Subject key identifier: D3:A3:2B:4C:44:B2:98:49:A3:CF:75:B4:6D:8D:9D:04:B8:21:7C:56
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 01A06EA74DCCC48992F8A5A0DFD10110A963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0BD0
Signing time: Fri 04 Sep 2026 23:00:53 +0000
Manifest this update: Fri 04 Sep 2026 23:00:53 +0000
Manifest next update: Sat 05 Sep 2026 23:00:53 +0000
Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: TRlx7fFl4uv+/GNPS830fOH0z1kTLhfEodIe2Kg2rSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:4d:cc:c4:89:92:f8:a5:a0:df:d1:01:10:a9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Sep 4 23:00:53 2026 GMT
Not After : Sep 5 23:00:53 2026 GMT
Subject: CN=d3a32b4c44b29849a3cf75b46d8d9d04b8217c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:f1:35:7c:81:8b:1c:dc:1f:ee:57:60:5e:
86:f2:de:f3:d9:74:c4:34:5b:5f:86:93:22:77:db:
da:b9:5b:60:20:5c:32:7e:8f:e1:7d:4d:52:87:a3:
75:cc:2f:3e:82:a2:10:c3:f0:a9:fe:cd:c4:a7:46:
4a:70:0e:8e:61:13:f8:6d:9c:35:d2:b6:53:f1:4f:
69:f6:0f:c3:38:f1:c9:b7:fd:f3:73:b5:d0:fe:e6:
c2:a5:06:ea:bf:56:af:5c:c7:75:ff:1a:3b:ef:a8:
1e:c2:92:b2:d4:6c:a2:a6:08:c4:ce:49:89:d5:ab:
0c:b3:b4:17:88:5c:2f:bf:fe:e4:6e:26:ae:99:9e:
0a:f5:5c:fe:17:67:67:97:3f:71:11:39:cb:f1:15:
b1:3c:d2:8d:fd:54:4b:80:e7:cf:47:4d:61:c5:03:
b0:1b:5c:8a:ea:fe:a7:33:d0:9c:6e:48:07:62:0c:
ef:c2:01:f1:98:0b:90:81:92:77:e1:47:3c:1a:18:
d0:d1:f9:22:aa:63:7f:76:88:d7:cc:5e:8d:cb:c7:
66:ea:f2:d6:c5:66:f8:5d:50:c2:8c:e6:36:f8:57:
7a:1d:bf:ac:a4:d4:48:a6:a7:02:d3:44:7e:b7:f7:
55:5e:fa:a9:2b:58:71:75:2c:eb:3a:d8:92:49:f0:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A3:2B:4C:44:B2:98:49:A3:CF:75:B4:6D:8D:9D:04:B8:21:7C:56
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:d5:14:47:35:03:ca:0d:07:71:13:6b:26:4f:af:95:fc:
4a:26:6f:01:03:97:04:8a:ba:df:9e:af:0c:dc:0a:0f:22:59:
ba:ca:6a:02:3f:72:25:e9:2c:90:11:79:79:99:e9:49:fc:bd:
3c:93:1d:72:98:a7:f4:a9:5b:5a:c1:fd:fc:57:c5:9c:1a:47:
63:4d:83:7c:f0:84:30:6a:0c:c0:b7:f7:6f:93:ea:25:d1:d0:
1d:fa:7c:d9:00:c9:31:5d:c7:9a:d4:a8:67:3f:95:87:4d:bb:
e5:3e:74:b1:38:b5:f1:60:bd:c7:a3:78:0f:c4:d5:78:cd:59:
3f:a5:c6:a5:cb:0e:92:7d:3c:c4:77:8c:74:82:51:f5:93:25:
93:fa:3a:1d:19:f4:86:27:aa:f7:ed:ce:2a:2d:20:60:30:24:
6c:de:d6:50:8f:40:a5:e1:8e:da:71:08:80:9c:39:b6:17:6e:
2c:e7:ce:8e:83:f8:e1:e8:87:3b:9b:18:80:96:00:57:09:21:
4a:91:56:62:97:90:ba:b3:ec:3c:52:b2:47:6d:0f:99:eb:b9:
1f:e4:a9:55:16:a4:58:bc:cc:b0:ed:4c:ff:1a:df:95:e7:e7:
15:1b:58:13:a9:30:73:08:3a:d9:31:fb:52:99:fd:cd:04:f5:
b2:c7:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:33:02 2026 by rpki-client