Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: kLvAQoI2sRn4jVJASNLIIvsOhWIpqDBLXsWxcociFZg=
Subject key identifier: A9:CD:1C:A6:C6:13:10:24:A8:DD:F4:C7:7D:89:6C:10:84:36:0D:3D
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 01A16269E5A214FD56EDBB4AFC2D49286E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1ABA
Signing time: Thu 22 Oct 2026 07:01:09 +0000
Manifest this update: Thu 22 Oct 2026 07:01:09 +0000
Manifest next update: Fri 23 Oct 2026 07:01:09 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: ZFtxrDYR1EJalblJqDFc9+lEguV61EqaJFubcEuRPBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:69:e5:a2:14:fd:56:ed:bb:4a:fc:2d:49:28:6e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Oct 22 07:01:09 2026 GMT
Not After : Oct 23 07:01:09 2026 GMT
Subject: CN=a9cd1ca6c6131024a8ddf4c77d896c1084360d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:da:5a:6a:7f:05:7f:c4:10:0a:09:63:09:
e5:57:9d:47:fe:7b:08:52:65:06:a9:8e:97:2e:7b:
6f:b8:4b:65:d9:48:a5:73:ce:78:8b:81:dd:4d:64:
81:26:05:53:e3:72:4b:32:11:01:cd:d1:9f:48:7b:
83:e5:e5:4f:1d:ef:2c:f1:87:31:76:12:1e:3b:ed:
98:78:08:2e:24:c5:e7:42:0b:03:1e:d2:bb:70:f4:
da:1e:bd:63:2a:55:c4:8f:08:5e:b0:04:95:5c:02:
1d:f5:db:e8:80:f7:da:f3:91:ed:f8:2a:73:42:56:
b7:0e:23:45:d5:4a:45:aa:7e:7f:49:49:2a:2b:8b:
3c:31:0a:79:16:5b:ee:93:54:11:63:78:52:4d:b9:
ac:e0:e5:a2:81:df:5b:ba:d5:39:39:98:0c:35:82:
d3:72:92:ea:54:f1:46:1f:12:19:11:da:33:ee:9f:
1a:1a:cd:89:29:fc:55:43:11:10:b1:94:a1:b2:37:
29:eb:e4:4f:c2:50:e4:9f:53:83:68:ee:32:84:90:
20:27:bd:e8:e6:64:bb:2d:61:11:58:2f:ff:60:76:
4a:de:ce:ca:1f:58:85:7a:19:0c:ae:1c:58:cf:5a:
68:56:24:c0:03:e7:59:e9:fd:8c:f3:e3:e9:dd:8a:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CD:1C:A6:C6:13:10:24:A8:DD:F4:C7:7D:89:6C:10:84:36:0D:3D
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:db:ac:fa:63:84:49:69:5c:88:55:6c:f7:bc:dd:22:a1:af:
2a:59:c5:0a:64:6a:41:6b:40:46:5d:7c:e7:39:4b:2e:7f:1c:
be:c6:20:59:c2:2e:09:ea:1d:39:9a:4c:8b:42:4d:6a:a8:05:
f4:d7:24:b8:8c:3c:6e:f6:c4:eb:1a:92:9b:6b:e9:d5:69:93:
5b:4d:bf:35:24:4f:e6:cd:f9:d3:c6:63:d3:dc:9b:e3:d4:71:
bc:95:94:e3:c4:65:94:4f:d6:b0:b4:a5:57:46:e3:dd:f0:e9:
f2:64:1c:2f:ae:20:31:98:ec:ea:8c:c0:fb:ed:9e:d7:79:3d:
e0:d0:ad:46:a0:37:c9:a6:b6:bf:0d:28:e3:8d:cd:1d:dc:1c:
db:ba:0d:9b:02:eb:b1:6c:c1:d2:c0:a1:85:65:6d:d0:40:e8:
15:6d:95:96:72:fe:f0:c4:b1:ed:66:e1:27:3d:0c:07:70:f4:
d2:b9:77:93:0a:b0:70:5e:76:06:1f:82:44:5f:94:55:25:7b:
b8:7d:a9:5d:20:19:5a:96:51:54:bf:d9:71:dc:4c:f8:c1:ed:
b7:ba:52:48:ee:f6:47:7b:1e:62:21:a0:e2:02:38:29:92:75:
c4:92:db:5f:ab:ac:2e:7e:b0:f2:db:1a:d1:75:c3:5f:5d:5d:
50:83:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:09:28 2026 by rpki-client