Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
File: vnApzozJt4fZQyPgyg0U3R4AQ-w.mft (raw, json)
Hash identifier: wPTn69IkRscfwzfvPlNsa3jo9nA8OJF7bApYNCnYxcQ=
Subject key identifier: B5:2D:49:F7:1F:92:70:5B:FC:8D:60:5E:E6:3C:69:3D:B0:0D:13:F5
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 01A175827F6B225B4C2960B0466260B711F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
Manifest number: 018A
Signing time: Mon 26 Oct 2026 00:00:48 +0000
Manifest this update: Mon 26 Oct 2026 00:00:48 +0000
Manifest next update: Tue 27 Oct 2026 00:00:48 +0000
Files and hashes: 1: PREiP0WtH9ua_lz3N4aim-V6AL8.roa (hash: 1d1XtFoMmk8IeE22KgiEf8/gZMUj3LiFZydzZU53viM=)
2: Rse8KVJ-qnRoFq6yUvasvPGC72s.roa (hash: 5L9ESppL3oc4AteITAQXY4+3w1JEM9PNJuyAgfgBzq4=)
3: vnApzozJt4fZQyPgyg0U3R4AQ-w.crl (hash: TnojX8+I9DcSNWHU+x7Rxwvh260OZWXRCD2rHH7yZG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:7f:6b:22:5b:4c:29:60:b0:46:62:60:b7:11:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Oct 26 00:00:48 2026 GMT
Not After : Oct 27 00:00:48 2026 GMT
Subject: CN=b52d49f71f92705bfc8d605ee63c693db00d13f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:37:f7:9f:05:d6:fd:94:1e:77:6c:06:27:
6b:d0:fb:e4:5e:5b:44:df:13:ad:a2:d9:fe:51:26:
3d:3d:72:78:22:30:3e:42:a1:cd:af:4a:8e:54:58:
14:1e:be:da:26:bf:01:fb:cf:e4:a6:9e:28:d4:e6:
15:52:7e:1e:37:58:fa:42:e3:90:94:f5:81:2b:5a:
de:30:86:ec:37:38:16:1d:59:7e:55:91:1d:bd:a4:
d1:cd:35:5b:3b:98:d4:80:53:13:bb:19:36:4f:1e:
30:ce:b1:0f:34:d9:80:5f:e4:e1:01:80:3c:c0:00:
5a:46:8e:ae:b0:88:ec:06:63:f0:36:66:65:f0:92:
41:37:93:fa:1e:18:97:e9:41:8b:57:0a:c5:86:3b:
02:7a:ce:4a:7a:e6:0c:a7:96:c1:04:3a:ce:6f:4d:
8e:4d:e3:c1:ea:c5:9b:b3:c5:2e:4b:04:45:55:29:
bd:86:17:51:22:97:c5:50:25:f6:3b:69:0c:24:65:
73:ff:1f:8e:46:2e:ba:04:f2:e8:54:5c:b1:d4:ba:
9e:2e:d1:18:27:ce:5f:4e:1b:d5:0c:a3:71:4f:88:
42:a5:23:c2:fa:77:cd:8e:9e:09:bd:1a:d8:51:2c:
e7:28:4d:25:1f:4b:46:a0:3c:13:33:ea:f7:78:27:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2D:49:F7:1F:92:70:5B:FC:8D:60:5E:E6:3C:69:3D:B0:0D:13:F5
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2e:a2:2c:3e:36:5d:fd:4c:e6:74:1e:7e:ac:31:4e:9c:f8:
14:5d:05:98:86:1d:38:81:dc:0d:13:d9:fb:6f:21:c8:54:af:
88:7e:e4:60:3f:a9:e4:fb:9d:af:c8:2c:ad:d4:bd:8b:2f:74:
95:1c:fc:d8:98:46:91:a0:c9:89:0b:5e:20:33:4f:08:e0:66:
d3:20:cc:28:21:22:98:87:fa:13:d6:e7:c8:93:3e:f1:9c:26:
9e:60:f5:27:01:2a:82:81:3c:f3:b5:92:30:99:be:7a:c7:5b:
43:0a:3b:7e:d1:34:57:a7:43:2e:7a:56:97:5d:7f:ff:91:1f:
93:41:9f:c6:70:07:cf:92:b5:58:e1:66:b4:78:2f:f1:37:b9:
24:b8:02:1e:36:91:a5:3b:39:38:e7:fc:fd:73:b8:0c:d3:bf:
bb:e6:6d:16:ad:47:e6:2e:69:95:9e:74:e1:da:02:1d:6e:f7:
e2:25:2b:16:b1:aa:d5:67:9f:86:08:6b:55:e1:13:7a:1f:10:
46:78:f0:a2:32:93:6c:e1:64:48:26:2a:79:54:23:cc:09:dd:
2d:55:e0:a0:be:b1:81:84:68:ad:0f:7b:4a:d6:9f:79:25:f4:
73:20:b1:ee:09:7e:b2:a6:71:81:db:a6:60:bf:c3:07:b7:2d:
22:7c:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:31:03 2026 by rpki-client