Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: SXRFZfVe3TvnixvGvOdr+9VGfTnfoIgf7Xnn/gx+z+0=
Subject key identifier: 9F:C9:A8:AE:46:27:5B:40:6F:AA:88:DB:8D:03:26:B3:29:07:46:4E
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 01A01F4324BBFE7BD1B49FEC03DC8AC5EEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1A12
Signing time: Thu 20 Aug 2026 13:01:29 +0000
Manifest this update: Thu 20 Aug 2026 13:01:29 +0000
Manifest next update: Fri 21 Aug 2026 13:01:29 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: SCACoW2VvvUFpAun59RIykLGb1pW6Xt03hwBhIGBUe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:43:24:bb:fe:7b:d1:b4:9f:ec:03:dc:8a:c5:ee:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Aug 20 13:01:29 2026 GMT
Not After : Aug 21 13:01:29 2026 GMT
Subject: CN=9fc9a8ae46275b406faa88db8d0326b32907464e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:38:78:68:b2:e1:83:2f:43:69:82:42:0e:
64:28:91:63:04:fa:bf:67:18:d0:25:c1:b6:17:3b:
18:1a:3d:02:4a:1a:71:e0:0d:a5:4a:54:00:66:5a:
f8:84:2d:6f:7c:fa:27:bf:60:ac:c9:65:6f:2f:7e:
a5:13:d6:e2:05:b9:06:cb:57:90:45:1a:96:8c:ee:
df:33:9e:8c:33:44:eb:89:55:1b:bf:3a:97:ff:f7:
c3:a2:de:72:ca:04:72:05:3e:12:ba:86:01:3d:ce:
aa:23:f2:ab:5a:86:60:5d:63:84:19:5b:a6:84:82:
ab:17:e9:d9:fc:33:ec:18:01:0a:3c:42:6f:40:55:
49:83:59:d0:cf:88:53:52:62:43:18:93:28:26:f6:
e2:4b:d2:16:56:e6:e8:bd:70:17:5f:ca:6f:f5:a3:
a5:74:90:90:0f:5d:bd:a3:43:da:bc:23:23:19:14:
b2:cc:9c:09:82:94:bc:ec:e4:eb:a0:03:86:50:0a:
b4:c3:ae:21:7f:bc:df:59:ac:3e:c1:e2:64:6f:bd:
bf:08:7d:0f:f2:82:bc:35:ff:84:01:b5:75:6e:2e:
ea:97:bb:24:0b:bd:71:72:d6:e3:04:0a:b4:db:47:
cd:92:06:67:a1:d5:2e:56:80:da:60:e4:3e:0f:17:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:A8:AE:46:27:5B:40:6F:AA:88:DB:8D:03:26:B3:29:07:46:4E
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:89:37:1d:d9:66:52:ad:0a:b0:11:4b:e8:4b:5d:5c:bf:
6c:44:24:ae:8a:49:85:70:30:ad:01:4a:98:37:ca:a2:84:b4:
de:c7:3c:1e:4f:be:10:02:dc:46:a1:89:1a:75:83:ae:73:39:
48:c5:2e:cd:bf:5d:50:8c:3d:ff:56:fa:2c:b8:6a:6b:25:e0:
a4:47:0b:d4:14:cb:62:eb:e1:d5:ec:9a:d3:fa:17:a9:92:14:
0d:82:19:c8:90:fb:dd:d8:fc:96:ff:bf:c7:ef:a6:e1:c8:f5:
db:49:83:ac:01:a5:b9:c0:6d:ca:8f:4e:71:bf:1c:b5:59:d4:
fd:f5:6a:8b:69:11:51:e8:1d:78:4c:08:6b:a1:c9:e4:65:fd:
6c:ed:84:d4:6b:ac:af:42:d8:9a:ab:e6:fa:e3:f6:a8:51:87:
14:ba:7e:73:c9:e5:9d:8d:77:97:d8:34:75:63:2b:51:05:2a:
57:94:f6:d9:58:6d:fe:03:6e:5f:92:fb:59:50:db:98:30:2b:
d4:30:54:cb:b7:d3:58:d2:da:a7:7c:86:fe:5e:d6:5f:e1:3d:
ea:47:b9:20:60:80:fa:fd:6e:ab:7a:f6:24:00:33:33:d1:47:
a4:d6:bf:cb:e7:ae:33:ff:50:82:b1:1b:f3:da:c7:6b:92:7a:
6b:3e:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:08 2026 by rpki-client