Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: lUPHjxQHGPkMnDVBshzUR80gJor+ly05yNSgcKiPOXQ=
Subject key identifier: 76:7F:A8:11:95:F0:50:A0:05:AD:B4:25:77:D8:C5:7D:58:E3:32:AD
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 01A181BDBD2908D761C4FD958972D277DFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 09:00:57 +0000
Manifest this update: Wed 28 Oct 2026 09:00:57 +0000
Manifest next update: Thu 29 Oct 2026 09:00:57 +0000
Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=)
2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: wEw05B8hekuFNWQJlP4Mq9O268X5znkFdExrJxIZhYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:bd:29:08:d7:61:c4:fd:95:89:72:d2:77:df:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Oct 28 09:00:57 2026 GMT
Not After : Oct 29 09:00:57 2026 GMT
Subject: CN=767fa81195f050a005adb42577d8c57d58e332ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:44:a0:a4:73:f2:b0:38:91:c9:64:49:a6:
15:80:7f:db:04:1f:6d:a9:53:5c:1b:36:57:00:a3:
2f:68:31:a9:0b:92:1b:5a:99:b3:87:75:be:49:7b:
fa:65:b3:49:61:7e:2c:cf:73:38:c2:6a:24:dc:ff:
45:71:19:ef:0b:4a:23:97:39:5e:db:07:59:cc:35:
33:83:bc:e8:ca:4d:b2:d6:27:e1:c4:84:86:e4:43:
f0:9c:24:d4:ac:6a:f2:3a:dd:64:3b:c9:13:0a:6e:
33:d9:98:ac:27:21:10:55:0c:e5:c7:3f:33:46:fd:
a6:24:9b:fc:ce:10:a2:b5:8b:c4:30:6e:3b:3e:c5:
d5:5a:14:3c:1d:9f:2d:06:4d:a5:d0:a8:19:4d:c8:
4b:aa:0a:5e:89:75:a2:dc:bb:f9:19:1d:43:10:46:
25:0f:2d:fa:91:19:34:52:87:75:bb:9b:7c:d5:b7:
ac:bb:fb:52:33:89:3a:10:b6:54:15:56:45:e8:52:
4a:75:1f:bf:59:ae:e1:08:2a:2d:22:8d:a0:3d:f1:
74:20:37:7d:85:e8:37:df:77:d2:8b:d6:54:17:1a:
51:84:b5:ae:dc:cb:d0:e1:4e:35:10:a8:62:46:18:
82:1d:03:1e:3d:ce:ca:7f:22:c9:a7:5c:82:dc:1f:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:A8:11:95:F0:50:A0:05:AD:B4:25:77:D8:C5:7D:58:E3:32:AD
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d2:51:b1:2b:94:d6:42:af:18:8c:af:bc:23:1c:a2:db:1d:
ed:dc:58:f6:d8:85:31:0e:48:da:6f:92:03:6c:30:0b:d9:03:
dd:a7:7e:f1:e2:dc:75:89:b9:ce:fc:63:ce:82:a4:72:e5:c8:
45:61:43:07:d7:8f:2b:ab:f6:5f:88:a3:9d:d8:ed:01:83:2c:
0b:50:f9:b7:5b:e3:e8:b6:e8:99:a5:3b:57:8e:7a:f1:23:d0:
68:8b:89:63:19:ce:d7:0a:9a:f9:03:65:67:59:b7:95:aa:dd:
44:19:eb:22:e4:75:90:bc:0e:82:fb:74:72:61:d9:9d:0f:a1:
3e:1f:34:61:09:d1:1c:50:b3:67:9f:0e:d1:c7:c3:bd:66:f2:
fd:09:f5:11:bb:db:4e:fa:93:04:73:e6:95:de:2c:67:bd:59:
43:1c:1a:91:f4:4a:a6:30:c2:9f:a3:66:c1:fd:5f:0e:84:07:
1d:f9:1b:42:cd:2a:1d:c9:86:74:dd:c6:ff:fc:88:9a:67:e1:
c0:29:74:c9:c4:bc:d8:f2:c3:70:f6:94:9b:45:6e:aa:37:93:
4a:c9:f7:90:65:6d:9c:97:a1:16:bc:07:9f:a4:0b:8b:c6:2b:
bf:e9:85:4b:48:b4:41:aa:d1:01:c3:af:97:54:49:ff:65:24:
49:80:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:29:58 2026 by rpki-client