Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: l8Y0MTjdwK4P8z2E/lQHqYEy1VwZdgj1PYoirMplayI=
Subject key identifier: 6D:B4:78:39:CA:8E:0E:39:28:7E:7D:AE:98:02:0D:D0:5D:B6:14:1E
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 01A117F45C4F7AFF4FFE8A02E8CA537F8884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 1A92
Signing time: Wed 07 Oct 2026 20:00:52 +0000
Manifest this update: Wed 07 Oct 2026 20:00:52 +0000
Manifest next update: Thu 08 Oct 2026 20:00:52 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: lv/BXXElT1czNkhuiuGw+KFbvmjuZhQ2mHIAZys5AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:5c:4f:7a:ff:4f:fe:8a:02:e8:ca:53:7f:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Oct 7 20:00:52 2026 GMT
Not After : Oct 8 20:00:52 2026 GMT
Subject: CN=6db47839ca8e0e39287e7dae98020dd05db6141e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:83:53:39:88:ea:7e:51:af:b0:69:7b:88:
91:2c:a3:59:69:f6:48:b3:f1:4e:95:94:ca:a2:90:
53:5c:60:c8:5a:64:2a:95:57:8d:09:ff:7b:f9:1b:
d6:52:bd:41:85:5d:dd:8f:92:1a:2d:a7:9c:73:73:
7c:18:5a:23:73:75:5e:42:7b:d3:79:b1:6c:3c:fe:
84:a4:dc:cd:dd:97:11:38:c6:b1:24:ee:7d:74:b6:
39:5b:be:3d:65:e2:a1:88:35:a2:ff:2c:1c:9a:47:
c8:79:a9:c7:84:d1:56:a4:96:da:5b:d3:83:8d:91:
41:db:e3:ce:91:07:02:dd:d5:69:01:bb:6a:cb:09:
c7:13:77:ad:bb:7d:37:54:a4:b3:03:02:4c:85:14:
8e:a6:55:a8:92:97:b2:d7:08:f8:54:f2:36:80:24:
d7:fc:41:b6:27:21:d9:e9:fe:b8:f1:df:73:dd:60:
90:57:5c:c2:50:38:47:99:2c:cb:0b:7f:c4:49:13:
93:30:2a:43:a2:c8:77:eb:3d:e7:ef:45:18:69:1e:
65:02:33:25:0e:df:bb:4f:55:88:57:6b:37:5e:c9:
0b:f1:8d:ca:30:b1:55:38:ee:28:9c:0a:8c:aa:27:
97:56:98:d9:52:c6:96:e9:ea:63:b1:e6:33:f9:db:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:78:39:CA:8E:0E:39:28:7E:7D:AE:98:02:0D:D0:5D:B6:14:1E
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ed:62:82:ad:5a:c3:30:f5:65:8c:51:38:54:8d:17:fd:68:
63:d2:66:29:c5:bb:ec:51:97:99:3e:70:e9:83:18:2f:8a:53:
e4:f1:f6:cf:0f:78:97:0c:64:f4:2f:66:8a:5b:8a:8a:c0:67:
b7:a2:9e:fa:67:fd:5d:5f:c4:a2:4f:75:02:93:f7:93:b8:0e:
19:7f:13:91:f6:9e:82:da:93:be:e4:7a:4b:51:84:83:e0:bd:
38:8b:ec:57:e6:b0:1b:9d:e2:29:93:f6:74:6c:9c:f7:60:ac:
b6:1a:14:89:fc:2b:d4:18:fc:aa:9b:af:9e:26:91:6b:6e:23:
c8:d2:b6:49:72:ac:f9:61:8d:66:cc:05:81:14:29:07:b6:bb:
86:6e:b6:b3:4f:3e:a4:9a:02:2b:94:9b:09:6e:e0:aa:03:00:
46:03:82:7a:3e:91:8b:af:c3:d3:41:b1:e4:96:25:6e:cb:a7:
c1:e7:c7:da:16:4b:4d:04:5b:db:a2:fc:82:58:39:d0:e7:74:
65:69:8d:c6:aa:c3:9f:2b:0d:f3:c3:aa:67:5b:cb:41:ff:de:
56:6c:c0:3c:28:81:1d:ad:65:18:86:5d:2a:fe:b6:69:87:55:
12:75:d1:3a:74:9e:d5:ae:14:75:d9:a6:46:8e:a8:a9:8a:eb:
ce:62:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:26:36 2026 by rpki-client