Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: jlAUPXiyGJJFqnu4teL0bWVusq6dmi+eJ8foHMJxKjI=
Subject key identifier: 7D:42:23:E9:A1:08:34:E3:99:60:00:5A:48:06:BB:D8:A9:8C:97:32
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 01A0EBC09271281B85A258005E821E7398E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 01E8
Signing time: Tue 29 Sep 2026 06:01:01 +0000
Manifest this update: Tue 29 Sep 2026 06:01:01 +0000
Manifest next update: Wed 30 Sep 2026 06:01:01 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: 4K6tiYx2qQNVFysXAEMg0i6Y+HJ0PgNwqRUO7Lcb7/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:92:71:28:1b:85:a2:58:00:5e:82:1e:73:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Sep 29 06:01:01 2026 GMT
Not After : Sep 30 06:01:01 2026 GMT
Subject: CN=7d4223e9a10834e39960005a4806bbd8a98c9732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:e5:68:26:02:8f:b7:d3:b7:8a:fb:9b:45:
9f:80:b7:ee:42:5d:be:b0:ac:2c:74:4e:cc:03:c6:
11:31:1b:bd:1a:94:de:c4:94:9a:43:97:47:09:33:
dc:9a:9a:13:f1:73:c5:48:1d:2d:62:6d:b2:f5:5b:
ed:65:71:65:50:dd:52:12:64:99:6c:71:72:b2:63:
08:08:56:76:c0:a1:a6:f7:14:88:e3:00:67:89:93:
87:94:e0:55:67:ca:56:89:ae:2a:b8:6b:c2:12:3c:
77:bb:c0:ff:ef:bd:b6:12:1b:59:ee:9e:ef:ef:0d:
a6:21:1a:2a:9c:c1:2b:7a:a9:41:c8:2d:8a:16:b6:
b4:12:72:2b:65:fc:cd:ef:5f:b1:b6:47:07:fc:1a:
f8:8d:7b:ff:f4:4d:fb:a9:8b:40:01:c7:ea:84:4a:
2e:8c:d9:0f:0c:12:5b:3b:79:63:74:57:18:83:c3:
66:0d:13:89:02:bb:06:3c:9a:2e:5f:c3:c1:62:13:
fd:26:70:b3:ec:51:33:98:83:21:be:51:c0:ba:6b:
51:16:4b:01:ee:a9:b6:aa:c5:6d:3e:62:9e:4c:af:
79:12:ae:f2:f9:1e:1e:d0:70:53:a9:03:a2:7a:72:
70:b6:bc:fd:7e:4a:b1:83:a9:f9:36:2c:0f:84:e2:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:23:E9:A1:08:34:E3:99:60:00:5A:48:06:BB:D8:A9:8C:97:32
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:5b:e4:d7:a9:a5:31:b1:c5:4e:b9:a6:01:1c:f0:85:e1:
08:1e:89:09:15:59:a9:8a:24:0e:12:09:e0:c5:c9:42:e2:90:
ec:d8:f4:27:65:53:fe:81:0e:69:e6:46:82:39:7c:ab:5d:0a:
4a:ce:2a:38:1c:bb:92:34:ac:f6:f5:0f:f9:17:b8:02:a4:7a:
de:20:8e:ef:ef:16:95:2b:83:a8:5c:9a:bd:38:b9:b0:b4:36:
df:44:6e:71:a8:fe:1f:a5:fb:10:e2:38:cc:6b:06:d6:aa:17:
18:d9:da:59:ce:6b:c5:9b:8c:7b:1d:43:b2:37:18:66:18:6a:
c5:cb:a8:75:a2:10:b9:3b:86:33:be:fe:79:f1:37:2e:17:10:
54:0d:4c:ff:b3:46:29:83:79:8a:ba:37:d4:3f:e2:30:78:8d:
e3:fa:ca:0c:c9:46:70:ff:50:f2:fb:e1:d3:70:13:88:f4:e5:
23:2c:4e:32:b3:8a:ee:ef:6a:3f:63:f9:82:e5:85:cd:58:4e:
8c:b2:fe:a8:41:ca:4b:b2:42:53:62:aa:4f:a6:08:57:17:55:
03:30:63:7e:08:ba:51:13:3d:e6:bc:51:18:42:92:8b:26:30:
9d:8c:54:91:dc:63:c1:80:0b:10:60:51:77:27:73:84:eb:3e:
72:11:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:59:47 2026 by rpki-client