Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: FLZWCB5oytPRlAYejn9Gel/QNIpwuKcLNOk5AE42hUo=
Subject key identifier: 44:09:DC:AE:A7:23:67:6F:CA:E0:1D:50:4E:83:99:F3:27:4C:B8:A3
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 01A119E270165A24765547EAFD5286AF3FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 1A93
Signing time: Thu 08 Oct 2026 05:00:32 +0000
Manifest this update: Thu 08 Oct 2026 05:00:32 +0000
Manifest next update: Fri 09 Oct 2026 05:00:32 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: tbGc1eFcu5kZDGj7abAlcIvri0ymt23Rwk2e/Or7S3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:70:16:5a:24:76:55:47:ea:fd:52:86:af:3f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Oct 8 05:00:32 2026 GMT
Not After : Oct 9 05:00:32 2026 GMT
Subject: CN=4409dcaea723676fcae01d504e8399f3274cb8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:b9:c7:7c:db:a6:dd:b2:40:2a:26:a3:aa:
88:3b:13:e5:e2:b7:65:ad:5b:24:93:64:68:e2:c1:
79:51:87:a3:1c:49:8d:26:67:83:08:1b:28:7c:a5:
0f:7b:0a:8a:7e:9c:be:f9:7c:7f:6d:eb:05:5b:33:
40:10:2b:d6:5e:c3:40:54:83:bf:a4:e0:c5:89:9d:
e8:59:2c:ab:f1:3a:72:95:df:cc:c1:a6:4b:f1:b6:
d6:4c:e7:ef:fc:9d:25:68:59:f2:05:89:dc:5c:5f:
9f:5d:29:75:dc:44:a5:0d:e5:da:e5:e5:99:02:b3:
6f:c4:32:1d:67:c5:5a:b6:77:45:77:9e:cf:12:32:
19:aa:9e:c8:82:89:80:59:29:4b:cb:bd:b9:59:74:
69:23:3f:45:d7:03:81:51:8b:f4:38:20:ae:4c:1c:
7e:d2:ef:23:64:79:7c:41:3a:42:a7:78:51:4e:73:
8f:f4:1d:8e:23:8c:b3:78:7f:03:31:4b:20:d3:3e:
e4:17:0c:37:df:be:bf:65:7c:8b:19:be:bf:86:ee:
32:8e:9c:2b:0d:a0:6f:bb:f9:42:27:63:a9:fc:47:
34:e0:6f:79:6d:42:d9:cf:57:13:a7:a6:76:75:28:
35:24:cd:5c:ce:43:9b:54:b2:f5:65:ea:88:39:26:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:DC:AE:A7:23:67:6F:CA:E0:1D:50:4E:83:99:F3:27:4C:B8:A3
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:37:88:d5:09:0f:b2:73:b4:92:7d:bf:82:26:cf:08:e7:5f:
4c:80:39:5a:a6:52:d3:b8:a3:46:ec:db:c0:9c:03:33:63:5b:
d2:ce:45:c3:df:d3:08:c1:75:2b:bc:0f:f6:d5:eb:d7:d9:e5:
35:11:92:db:f7:c9:21:62:a5:d0:3b:93:03:47:23:64:e7:2d:
25:cb:05:0a:24:ea:1a:45:f1:cd:0e:cb:78:fd:45:72:6c:ad:
e1:44:07:f9:ca:fb:df:41:22:f2:92:5e:be:00:5d:17:c0:47:
05:5c:b7:96:59:8b:4b:0c:1f:04:d0:cc:4e:be:90:1d:99:fc:
c7:ef:d4:b4:ad:ac:b8:d6:7c:08:78:7f:53:8a:83:ef:a9:cc:
e2:75:5f:cb:e7:92:af:0f:15:06:01:2f:c4:55:a8:0d:43:36:
cd:e1:b6:d6:8e:51:eb:f2:cb:1f:93:1c:a8:62:4f:6b:11:3f:
6c:9c:7b:01:88:2d:6f:ac:53:aa:31:92:fc:9f:3b:3b:13:9f:
15:e3:0c:f7:1f:da:24:32:da:bf:4e:e6:40:c6:4a:55:86:47:
fc:34:00:7d:ed:a1:fa:88:50:4f:1b:90:f9:14:a0:17:63:32:
10:e4:ff:23:9b:68:f3:d1:50:5b:d5:83:5a:11:77:04:0c:0e:
97:60:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:26:10 2026 by rpki-client