Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File: vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier: USSHyRmQPf95WTMxpGs48MfFAgS24fVtHhzjCh7YyNM=
Subject key identifier: 37:3B:8F:6D:A0:DC:42:35:5F:A6:F9:A2:95:F5:D9:12:03:8D:EB:7D
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 01A17F2AB8AFEE1AFC39F9C27BCD43AA172C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 21:01:08 +0000
Manifest this update: Tue 27 Oct 2026 21:01:08 +0000
Manifest next update: Wed 28 Oct 2026 21:01:08 +0000
Files and hashes: 1: Y-wzvP3OyKelpaxWEwdHMeF9K8k.roa (hash: V1H9z7tRL5qSfBvpxCwsmztKo7ytMvvx2XjMrup+mfA=)
2: aoYPhsTIFF-ZRbj6_xiKg3VbYUc.roa (hash: VNCClnv/XVF60bxM7vBP7Gf+3o6ieH1yV7iuVnvTEkA=)
3: jG4WSmG-xXEWodjP13_7K7HSQG8.roa (hash: CsZTy+c92ZJOl54ewvYtYiNxeF6FGAF7oJqgyUzk8Uk=)
4: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: XnuTtnFIqBFPKIDX47mWd2tIYSDq7r24rQOdd5f8xgs=)
5: w4XW2p6ELMHxqyCP4OQW9fgfzfA.roa (hash: I0kThNaOy3rd6EMJewACkngTS9RmK2ddcj5IKnlI7p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:b8:af:ee:1a:fc:39:f9:c2:7b:cd:43:aa:17:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Oct 27 21:01:08 2026 GMT
Not After : Oct 28 21:01:08 2026 GMT
Subject: CN=373b8f6da0dc42355fa6f9a295f5d912038deb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:df:ee:e2:09:4a:2c:03:8e:07:56:d8:74:
f5:eb:43:d7:e6:5e:98:e1:dd:f2:0d:67:3a:5a:1c:
bd:c2:96:fb:34:a6:22:76:85:94:8e:6f:e3:ff:3f:
ae:4b:18:63:39:da:66:80:50:9b:c0:c0:7b:ee:67:
fb:59:a0:cc:4b:63:5d:a6:f3:1e:78:da:5d:e0:03:
7b:79:15:60:73:e1:76:0b:12:2f:16:fd:d4:6f:e5:
03:2c:3d:bd:ff:07:e9:97:60:ea:64:32:81:48:c7:
94:17:c3:17:43:d2:25:e8:f0:2c:07:2e:a1:15:78:
cd:50:a0:49:c6:43:81:ce:14:7c:3c:66:7f:21:b7:
02:da:25:41:1d:f7:00:f2:5c:f4:75:c2:85:b5:ee:
f6:d1:c5:17:48:12:8c:5f:de:11:20:9b:c7:32:1e:
69:16:3d:d2:8a:4f:dc:3c:f3:02:c6:79:49:4d:fe:
a1:e5:b1:7d:ad:18:2f:41:b3:eb:d4:2a:c2:d3:f9:
00:9e:af:f9:eb:7c:bf:38:6b:ee:a3:e4:d3:77:ad:
ca:7b:d5:84:36:36:69:31:5a:84:f8:e2:78:9f:d9:
ef:6a:b3:5a:25:d5:d3:7f:94:1c:b9:7d:18:19:51:
fb:0e:84:b7:28:a6:fe:33:28:86:d9:a7:51:7e:57:
63:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:8F:6D:A0:DC:42:35:5F:A6:F9:A2:95:F5:D9:12:03:8D:EB:7D
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c8:85:14:23:61:3f:7d:ea:c2:96:05:91:51:1a:06:d3:84:
31:1e:8b:ec:60:35:4c:e7:17:c3:c6:51:a5:29:78:b1:87:b6:
cf:15:2b:43:47:19:2c:7f:b1:24:21:1e:17:98:51:59:75:e7:
e5:ee:c6:5c:4f:21:7e:3c:d0:66:ac:73:8f:2e:76:d2:30:5e:
84:60:79:e8:99:66:54:c1:2b:0a:a4:8f:29:59:c1:dc:0b:ea:
98:fb:8d:27:dc:e1:7f:45:62:b8:c7:6f:b7:0e:64:ca:ae:4d:
ae:73:32:45:a1:5e:6d:d0:fb:60:3f:9f:bb:c5:97:7c:b7:90:
84:ae:c5:d5:b2:72:dd:3c:6c:be:0f:23:3a:2e:a6:d8:6f:f4:
e4:f0:3c:32:a3:f4:fc:4c:96:79:33:33:cd:e1:95:98:5e:c8:
85:93:f0:14:b4:00:ff:ea:0e:4c:cc:32:04:f3:87:d3:a8:12:
bf:de:e3:65:4c:84:fb:1a:a8:c9:3d:2a:1c:b5:2e:c7:28:9e:
a5:11:25:e1:80:0e:40:fb:b4:77:ad:b1:e1:11:bd:bc:4c:72:
27:34:63:d8:2d:7b:38:2f:08:b6:d4:70:b7:36:a7:4f:05:bf:
20:b7:ef:86:10:2e:55:81:47:f9:d8:dd:ec:35:4b:03:c7:e2:
77:ce:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:28 2026 by rpki-client