Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File: vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier: p0L2EoZwFr0I076Ja4QHV64ivKF/AB7x34T1sSkFiBA=
Subject key identifier: B0:7D:AA:B5:BF:9C:82:3B:5F:0E:22:28:38:27:1A:BB:DF:02:98:0A
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer: /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial: 01A03C3B0902525C5064418246DF3780CCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number: 0271
Signing time: Wed 26 Aug 2026 04:01:36 +0000
Manifest this update: Wed 26 Aug 2026 04:01:36 +0000
Manifest next update: Thu 27 Aug 2026 04:01:36 +0000
Files and hashes: 1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: v4fxpxyCuj2EVZvZYadUUIYj9la5g+9zriyMqip1R0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3b:09:02:52:5c:50:64:41:82:46:df:37:80:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Validity
Not Before: Aug 26 04:01:36 2026 GMT
Not After : Aug 27 04:01:36 2026 GMT
Subject: CN=b07daab5bf9c823b5f0e222838271abbdf02980a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:91:24:02:20:ef:03:1f:78:bb:b5:5f:fd:
e5:77:71:4a:04:6a:45:23:17:20:97:07:e8:7b:6e:
67:60:01:c6:d0:6d:98:54:08:04:55:5c:2b:01:d0:
51:4d:df:33:f7:6a:f9:92:2b:2c:ca:a4:5d:fb:17:
82:28:ab:e7:9f:89:1e:24:ba:56:49:fd:b8:91:6d:
d6:16:07:65:af:ce:9d:c3:c1:7b:05:47:fc:91:7e:
d5:16:ce:35:c0:fe:fe:13:6b:ee:46:e5:00:08:b8:
78:64:b5:19:cb:29:8a:e7:ec:04:ad:cc:d9:de:65:
b0:e0:06:5c:7a:28:ff:bb:61:06:af:50:b9:41:13:
17:e0:d5:63:9d:e9:f6:bd:5b:43:6b:79:c5:9f:38:
f2:dd:70:57:b4:ae:f3:d7:7c:3d:cc:60:7d:da:82:
08:41:4b:8d:e3:0a:1e:50:37:9e:73:5a:7e:9f:8b:
36:5e:a8:d8:3a:a8:1d:fb:d4:96:c1:d1:ad:1c:66:
05:2a:0f:1d:f3:d8:b9:17:31:c2:5d:66:ee:21:4e:
ed:5d:b4:03:0c:74:55:29:cc:f2:19:ed:75:23:c5:
29:d5:4e:ad:c0:d3:45:5e:e3:1b:8f:b4:e8:63:00:
32:f0:e5:51:ab:2c:5d:e0:30:1e:f2:0e:b7:d2:d8:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7D:AA:B5:BF:9C:82:3B:5F:0E:22:28:38:27:1A:BB:DF:02:98:0A
X509v3 Authority Key Identifier:
keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8d:e6:9f:da:12:5e:a2:5d:a1:5c:30:e2:0a:a3:41:38:7f:
29:fc:be:e7:06:4d:26:8b:f3:db:ba:61:6c:cb:89:94:a5:ba:
51:56:a6:42:87:98:15:60:87:77:ff:2e:5b:f2:9f:b2:fe:b0:
9f:13:31:bd:8a:7c:bf:06:cd:99:d7:dd:72:12:83:df:04:3e:
54:e1:cf:2f:be:bd:d3:94:9a:1a:6f:db:9c:b9:4a:32:35:92:
ad:58:4e:b0:64:e4:a0:ee:88:b7:39:7f:ea:fe:8c:65:b3:27:
8f:6d:9b:6f:d4:39:4a:b5:86:ea:46:dd:3e:47:fa:0c:29:5f:
b3:6d:63:5c:23:04:c4:a9:58:f6:04:12:42:d9:1d:dd:66:01:
76:3e:ef:32:27:52:de:21:2e:df:4a:09:26:bb:46:52:9d:f9:
5a:ba:c7:f1:e1:b2:3c:ef:a8:ca:a0:8d:4c:b0:23:5e:82:2c:
6d:e6:9b:ce:c6:46:75:5d:ed:26:37:6b:80:a3:92:1a:86:09:
25:f4:1d:a7:de:48:d5:af:05:27:46:2d:ed:09:5f:3e:90:82:
26:2b:8c:ad:de:b4:17:3f:5e:cd:89:1e:1b:f2:cd:b3:c4:c7:
b8:81:6d:02:3f:d2:22:73:9b:3b:34:d3:f8:58:e5:69:fb:0d:
8a:3b:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 14:06:22 2026 by rpki-client