Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: sHNAX5NUm7Zrkzwv8rivqZcSw9azBTw0s2wZ6yB3WRg=
Subject key identifier: 36:A8:63:34:5D:E6:A0:1E:24:0C:5A:3D:56:D3:BB:FE:3E:90:7D:BE
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 01A1875185EF78DE45BEBA0748C19790EF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 1ACA
Signing time: Thu 29 Oct 2026 11:00:29 +0000
Manifest this update: Thu 29 Oct 2026 11:00:29 +0000
Manifest next update: Fri 30 Oct 2026 11:00:29 +0000
Files and hashes: 1: UIEwD2VfFc8CUBWRPi8avZckaik.roa (hash: 8TxOkmSlxviUZm8/elB/UjCoqFq67VcYcIo+38oGuL4=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: y1H9GiG3gT2VrzR2nCGPlUV+2+166WEwjKo72r3c1b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:85:ef:78:de:45:be:ba:07:48:c1:97:90:ef:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Oct 29 11:00:29 2026 GMT
Not After : Oct 30 11:00:29 2026 GMT
Subject: CN=36a863345de6a01e240c5a3d56d3bbfe3e907dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:11:0f:45:86:04:ce:e2:36:4f:b5:eb:75:
ea:d1:8d:04:5b:49:2d:23:ba:97:c3:03:cc:bc:d8:
20:b5:9b:27:51:59:54:9b:11:75:23:40:87:dc:e0:
b7:93:b5:20:02:bc:55:60:df:07:3b:96:49:b1:69:
36:13:ff:82:21:fc:be:b2:dc:f9:e4:87:86:69:1e:
1b:9b:f1:70:7f:70:05:b5:aa:1c:d8:01:3f:61:8e:
fc:71:fd:b7:a4:a7:20:c6:85:08:5d:96:92:63:71:
fe:d4:07:dc:24:39:05:ac:cf:66:a0:e7:66:5e:2b:
09:9c:2d:fe:41:97:79:cd:fe:f0:5c:99:f1:19:13:
1a:14:a8:24:7e:f5:d4:ec:1e:61:f6:de:68:1f:82:
6e:b3:f5:53:6b:cc:9e:55:fb:e7:4d:0c:c7:4c:76:
92:55:21:22:da:15:03:6c:a3:39:ec:8f:83:0f:e2:
29:07:55:8d:07:94:2d:2b:cb:fe:7f:48:a0:1b:fd:
1e:20:bb:71:9a:a1:43:e6:4e:62:14:8b:ad:2a:2d:
9f:d3:04:ee:24:46:b1:5b:1a:00:e9:8d:31:19:f6:
fb:0e:f7:13:17:f3:62:4b:b4:b5:91:bd:e9:20:0e:
87:bb:1e:13:71:a7:8d:7c:63:f7:45:d5:47:10:8c:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A8:63:34:5D:E6:A0:1E:24:0C:5A:3D:56:D3:BB:FE:3E:90:7D:BE
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:75:b6:22:f8:b4:28:0b:55:4a:98:2d:ee:75:ba:06:22:
28:5c:38:a7:4c:80:3d:dd:86:82:bf:68:60:ea:67:b8:eb:c3:
f7:07:8e:37:88:76:4f:f6:2a:0a:2b:ac:3d:d4:2d:ed:cd:14:
24:16:74:9e:1e:ff:0f:c9:6d:b9:76:87:55:e9:f7:f7:c3:44:
78:c8:11:2e:f6:2c:61:4a:6d:86:75:cd:5e:b2:a0:95:97:39:
77:32:b8:d3:97:ab:d6:28:95:ac:f1:f5:dd:a9:aa:e9:66:4e:
16:ee:97:98:3f:76:96:cc:74:fd:32:ed:c2:a3:19:8c:5d:66:
92:7a:e5:b9:20:8b:6e:3f:07:df:8e:59:59:1f:e0:00:0c:15:
60:11:f2:bd:f1:a1:99:6f:f9:2a:50:f2:83:bd:71:0e:e8:c6:
09:5c:51:02:11:69:92:79:4a:92:95:54:b7:f9:59:10:97:ea:
27:0a:6e:40:a8:e7:2d:fa:f4:b4:c8:62:bf:7a:55:f0:66:dc:
7d:50:06:ad:8a:3c:78:ef:1d:a8:64:df:b9:ad:f4:fc:9c:42:
4b:ce:4d:ae:e8:60:80:f1:1b:74:37:9f:4f:56:12:fb:3b:61:
2f:6f:bf:71:e0:e8:3d:59:5e:06:27:71:54:bf:f6:2b:e4:59:
71:02:f0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:33:28 2026 by rpki-client