Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: MQXlUhuyGaQ6ySTcA6mFl/Hl0461WdqalMifVMMfMDA=
Subject key identifier: 5E:82:AD:FB:3F:D8:ED:A7:29:B8:8B:AD:B8:32:C9:A2:6E:9E:4F:1E
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 01A12767ED19DDA3DD8836EA9D2180331F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0BB7
Signing time: Sat 10 Oct 2026 20:01:24 +0000
Manifest this update: Sat 10 Oct 2026 20:01:24 +0000
Manifest next update: Sun 11 Oct 2026 20:01:24 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: RzCWS9QMcVxbOycTQObcQG+DOaJ0MDYk8JXJtwYKXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:ed:19:dd:a3:dd:88:36:ea:9d:21:80:33:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Oct 10 20:01:24 2026 GMT
Not After : Oct 11 20:01:24 2026 GMT
Subject: CN=5e82adfb3fd8eda729b88badb832c9a26e9e4f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:14:15:d8:4e:07:70:30:4f:3f:d8:1b:f5:
7f:d7:a0:2c:b0:99:e7:02:6c:a1:9f:30:eb:02:1b:
01:c9:92:eb:9a:8d:1c:7d:20:fd:38:e1:dd:a8:35:
41:86:5a:cd:ee:ee:0e:b7:1e:08:d4:e6:93:eb:fd:
01:7a:89:58:c3:6a:7e:c4:d6:7e:11:d5:9e:53:9d:
30:7c:4a:1a:4b:51:c3:a9:39:f1:04:30:8d:22:56:
f4:8c:e4:93:23:f9:13:33:bb:75:b9:84:a9:62:da:
2f:6e:db:bd:d4:1f:f6:50:5d:f0:aa:36:db:7a:60:
37:48:62:61:bb:50:1c:af:d9:9c:8a:ee:74:d0:d6:
97:85:c2:4e:ac:f8:cb:b7:89:9b:c1:5e:c9:e1:ca:
27:9f:e0:e6:65:2e:21:b1:02:9a:0a:a2:b6:e9:8a:
3b:b4:6a:bb:9b:f2:80:8c:dc:e8:a4:64:53:f2:bc:
23:33:e1:18:62:ea:b5:fd:13:5a:ac:39:b0:53:c3:
d3:5a:86:9a:ba:f2:56:17:3a:39:65:43:78:fa:15:
2c:12:67:c0:ef:06:b1:a0:4d:19:3c:d7:37:43:8a:
c8:39:71:5f:76:28:e9:29:ec:45:59:06:95:f7:7a:
f2:b8:94:f2:2c:3b:be:b3:68:b3:78:17:8d:57:8b:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:82:AD:FB:3F:D8:ED:A7:29:B8:8B:AD:B8:32:C9:A2:6E:9E:4F:1E
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7a:8b:f0:24:2f:0f:6a:29:01:6e:ef:8c:42:ae:9f:bc:34:
f0:64:35:53:ea:e9:f6:c3:6e:cf:9c:aa:43:68:fb:eb:72:7d:
3d:c0:a0:a1:49:1a:ab:e7:ff:4a:c3:1f:db:0a:e0:36:30:01:
6b:99:83:50:5a:b1:04:1e:cf:e5:0c:28:eb:a2:c9:6c:31:d4:
30:db:32:5f:96:66:50:d2:cc:79:76:80:b7:f9:d6:93:98:1a:
19:34:37:56:4b:d9:8d:bb:e5:61:f0:44:34:49:dc:c4:06:b2:
84:cc:70:a3:1b:f2:aa:6f:37:d6:c2:83:65:23:f4:cb:28:02:
c9:08:a6:ee:bd:ca:51:1a:f0:ba:d8:23:99:6f:9f:14:e9:d0:
0f:15:ad:c2:b3:6e:1f:35:3b:a5:83:ef:cb:a1:cb:47:a7:b7:
8f:da:a6:8d:79:70:6c:92:f3:86:96:95:e3:6b:15:74:19:3f:
9a:b3:97:f9:3b:1a:c4:a7:79:ed:40:06:74:c5:ed:03:42:83:
f6:0e:8b:84:c8:fb:77:02:35:27:a2:54:46:aa:46:b6:ee:86:
7d:c6:e2:47:45:40:70:98:47:8e:c0:22:51:f0:9d:32:a1:95:
e6:c1:bd:aa:de:e2:ba:1d:28:cb:b7:94:13:4b:6b:c4:fc:e4:
07:18:9c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 05:14:59 2026 by rpki-client