Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: A9OXraDxHpfL6GLwhGA0qQVDBI3CeRHFRv+FP+zLpgY=
Subject key identifier: 6D:2B:BF:FA:BE:F9:5D:4C:50:9A:19:19:FB:62:4A:BD:53:90:4E:1D
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 01A16F494FFE028AE88B5D565C9DA8AEB543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1ABE
Signing time: Sat 24 Oct 2026 19:00:37 +0000
Manifest this update: Sat 24 Oct 2026 19:00:37 +0000
Manifest next update: Sun 25 Oct 2026 19:00:37 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: HoD5xskiXyqs1ysWiRC3mKc8JqavnbEeHH4TtpSrrA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:4f:fe:02:8a:e8:8b:5d:56:5c:9d:a8:ae:b5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Oct 24 19:00:37 2026 GMT
Not After : Oct 25 19:00:37 2026 GMT
Subject: CN=6d2bbffabef95d4c509a1919fb624abd53904e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:cc:54:05:16:2d:33:0e:bd:4b:74:86:59:
f5:c2:79:80:90:29:2b:5f:d0:16:15:84:99:99:2e:
9d:af:d9:c1:51:77:55:e3:33:18:cd:a8:bc:e5:1d:
53:ed:45:d7:5f:4e:0d:d5:76:c1:13:95:46:9f:9c:
70:58:f9:d8:a4:5c:85:76:4a:9f:4b:8f:f2:dd:04:
b2:4a:f0:5a:e7:38:79:dc:77:bb:b8:cc:79:92:19:
6c:b7:d2:12:ae:18:6a:f2:67:3e:f4:5e:34:44:73:
b5:4d:12:9f:9c:87:88:95:a0:46:5a:8f:88:d2:82:
eb:37:a0:6d:b9:d3:3e:d5:06:65:60:8f:83:95:b1:
af:5b:03:ac:f6:8b:4a:db:88:ee:3a:af:e4:b3:af:
3e:58:7f:78:65:e1:6d:6d:57:80:30:5a:e3:4e:24:
70:20:bc:72:83:3a:da:c1:c5:83:32:75:cd:a8:be:
72:74:fe:0f:b5:73:93:3a:22:d1:66:c8:97:0d:0e:
c9:92:ef:1b:8c:da:1b:cd:71:a2:a0:a4:f5:ee:56:
24:16:d5:36:3f:65:68:58:e5:c2:23:6d:ee:3b:a6:
a7:10:f0:2e:67:d1:2e:be:14:fa:7c:0f:70:8a:20:
0e:b2:6b:a0:55:bf:73:40:10:4c:1d:49:8b:5f:1d:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:BF:FA:BE:F9:5D:4C:50:9A:19:19:FB:62:4A:BD:53:90:4E:1D
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:92:a1:b6:68:cb:4d:b1:8d:5e:b5:3a:bf:39:ae:6b:35:
8d:6d:fd:00:6f:66:a3:e1:3a:38:6d:1f:ba:70:58:1f:08:86:
9a:24:2c:e0:69:ce:9b:1c:80:ac:a7:42:e2:22:54:b9:5e:4c:
ea:dc:72:04:2a:8f:1e:3f:80:45:f5:3e:f0:31:b3:9e:f9:87:
9b:81:f9:ee:e1:a7:19:d2:63:56:ec:92:d8:94:e6:0b:61:24:
51:28:8a:df:00:e6:6d:5b:42:1f:65:ff:c2:6c:19:4a:02:61:
fa:03:08:02:99:d5:99:9e:31:8b:79:8f:4f:a0:72:58:8e:7c:
e2:e3:14:e4:00:df:a2:d6:94:58:f8:3e:fc:b5:05:18:8e:75:
28:25:a1:a9:81:5c:05:51:e9:13:47:ac:2d:77:9e:64:29:eb:
0a:b5:fb:b3:72:28:29:4f:d9:5d:c2:aa:23:71:c7:21:c0:d3:
1b:27:0b:45:f7:0a:6c:37:78:4c:8b:3e:50:9a:6b:db:a0:de:
c0:e5:e3:46:2e:49:8d:5d:fe:fd:54:58:73:31:37:5c:3b:d8:
25:19:cd:3a:85:ca:84:d0:d2:1a:d9:87:a3:d1:f0:a2:26:14:
2a:df:f1:0f:45:d8:df:97:5e:19:2b:46:89:6e:2e:61:6a:01:
55:8e:4c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:23 2026 by rpki-client