Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
File: vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft (raw, json)
Hash identifier: hXu+2F0kaD7a0fhSlN4Xqg3fBkwsoc0QWpMzKUlw17I=
Subject key identifier: 9A:5E:B1:DE:1F:E9:9A:1D:3C:81:FC:30:36:84:5B:C6:49:C4:B3:2C
Authority key identifier: BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
Certificate issuer: /CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Certificate serial: 01A1A6A617CDBB6385B26F0228C7032469D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
Manifest number: 73
Signing time: Wed 04 Nov 2026 13:01:05 +0000
Manifest this update: Wed 04 Nov 2026 13:01:05 +0000
Manifest next update: Thu 05 Nov 2026 13:01:05 +0000
Files and hashes: 1: 7CQfmSnA7xlofoaIh6O3s__ALU0.roa (hash: 5qzHN9BjrU3TGNOdR1wkA5orwEhZQeK5CFHWatWFVuo=)
2: vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl (hash: s+Qs+kUtayHJ/9Kor6j72mS4Vguwe5y0wnJIrVxXit0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:a6:17:cd:bb:63:85:b2:6f:02:28:c7:03:24:69:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Validity
Not Before: Nov 4 13:01:05 2026 GMT
Not After : Nov 5 13:01:05 2026 GMT
Subject: CN=9a5eb1de1fe99a1d3c81fc3036845bc649c4b32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:d0:2a:2d:b4:b4:34:40:f7:14:f5:d7:5a:
c7:2b:7f:51:7b:02:68:3f:bb:a7:c8:11:6a:79:18:
c0:03:2f:c3:4e:d3:be:64:e3:26:77:17:73:9d:85:
1f:fa:ea:54:a7:dd:68:d2:f2:27:0f:a1:d3:7d:22:
f1:3e:ac:9c:6c:cd:6c:c6:d6:56:b5:8c:86:3b:b2:
a9:c7:a4:a5:9a:6f:37:89:90:76:e9:30:ac:83:93:
8b:cf:55:08:40:35:e1:28:12:d9:41:b3:9c:2a:53:
56:53:d9:45:ef:df:4c:60:7e:35:81:6b:d9:58:40:
58:05:fe:ee:dc:ec:44:34:14:fa:cf:3e:21:47:e5:
7f:cd:ca:d1:21:4a:27:9e:52:6e:d3:29:fd:4c:32:
20:a5:a9:dc:30:a4:d8:e1:45:79:f0:1a:41:5f:36:
74:c9:33:7f:1e:ae:41:58:16:cb:50:9c:67:a9:79:
61:b4:04:90:2a:19:b8:2c:c6:f7:cb:de:99:e1:c1:
c1:58:2d:30:cb:e2:71:e9:20:d7:a5:a1:f6:00:40:
ca:6b:70:9a:59:30:5f:f4:06:a5:de:d4:4b:c8:f4:
6b:da:8f:50:6c:be:a2:c6:ac:a3:20:db:ba:84:ad:
e6:3d:95:ce:0f:64:9f:fa:c2:e6:c4:7e:59:ba:d2:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:B1:DE:1F:E9:9A:1D:3C:81:FC:30:36:84:5B:C6:49:C4:B3:2C
X509v3 Authority Key Identifier:
keyid:BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7c:e1:4f:f2:f6:a0:eb:fe:18:23:14:63:98:ea:ea:ff:b2:
c6:db:04:5b:49:b1:f2:b4:da:8e:68:0a:9b:20:ec:4e:03:24:
bc:56:25:2a:94:7e:db:58:21:f8:c2:a9:67:56:38:66:c1:80:
ce:23:a6:93:94:58:ac:23:73:31:3a:83:e1:3d:d6:c3:f5:ba:
fb:7d:ed:6c:9d:35:9a:93:af:d9:d3:a8:eb:2d:e7:8f:c5:98:
29:25:81:50:3c:e5:43:dc:10:a1:f0:9d:b7:59:27:3a:29:5f:
91:19:2b:5f:3c:11:4c:ce:c4:2f:4b:93:29:73:e0:e5:85:52:
8b:25:b7:08:0d:6f:56:38:cf:b8:dd:19:d1:25:5a:89:e5:80:
11:61:af:e1:53:70:4c:0a:e8:ff:ce:78:f3:ca:2e:c1:dd:f6:
c4:66:92:01:d1:71:db:f4:5e:a4:28:f2:31:90:34:4c:e6:a1:
d1:d9:33:43:65:46:d5:e9:e7:db:cd:da:ab:25:d8:b8:68:18:
8b:49:37:e8:f7:0b:42:29:a4:45:19:04:21:78:5d:a9:b6:83:
2b:f6:a3:48:37:53:3e:58:8d:aa:d1:69:ba:10:42:22:08:f9:
08:fe:ff:98:57:3d:d8:4a:cf:63:84:df:08:d1:33:ef:1c:c2:
19:ed:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:03 2026 by rpki-client