Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
File: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft (raw, json)
Hash identifier: aYFEqT2i0i9DyAOxRqVm5et2R8ABXC4IoGHnpmcmT8w=
Subject key identifier: DE:B8:4E:E4:3A:11:1E:7F:EA:A0:1E:D2:89:F2:3C:14:D4:50:31:FF
Authority key identifier: BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
Certificate issuer: /CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Certificate serial: 01A08A8C119D32A94792CBFFDF4DAE7EAA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:30 +0000
Manifest this update: Thu 10 Sep 2026 09:00:30 +0000
Manifest next update: Fri 11 Sep 2026 09:00:30 +0000
Files and hashes: 1: Dgm0yJxRGKkWzuCmtXAV_Sap5C4.roa (hash: iEzyR4D1PeG/2/gt5MrfspiuGu469FZd2g1heNAGkMA=)
2: GNjrvjIiN-OXUdCPEIpZchNO6Ys.roa (hash: isKT3r2eXooAKP6/3EQPs1CjALz2zfPJBsvBDqAhScY=)
3: vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl (hash: IYPwlhfZJIvVM96WqUf17uDXfolQD0vfrET9XORfj8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:11:9d:32:a9:47:92:cb:ff:df:4d:ae:7e:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bec2b3f51913b685aa98a64f5a222a1ae67b2720
Validity
Not Before: Sep 10 09:00:30 2026 GMT
Not After : Sep 11 09:00:30 2026 GMT
Subject: CN=deb84ee43a111e7feaa01ed289f23c14d45031ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:fb:46:03:d8:18:39:c1:14:1a:a2:28:46:
1d:00:d0:30:71:d7:17:70:ef:76:04:d5:11:21:25:
c2:ac:fd:d0:a2:d1:8e:9e:8e:7f:05:77:fd:61:51:
d1:fc:e7:2e:03:0d:63:c2:4f:e3:9f:fc:35:44:2d:
92:6a:62:4e:0a:03:0d:41:fb:29:4c:c5:8e:df:fe:
4c:63:a7:18:cc:73:44:9b:fc:e6:6e:42:ba:9c:00:
ed:c5:4f:c1:40:cb:ca:63:c3:1e:52:4c:71:0d:4e:
cf:a0:1e:7e:2d:e0:5a:3b:14:5e:b4:cf:08:ff:76:
ab:a0:12:a8:79:bd:44:24:ec:ce:0e:9e:67:0f:a6:
5b:39:9c:aa:e6:37:8d:ee:07:11:9b:5d:75:de:d3:
52:8d:ff:e4:85:e4:ec:a9:39:56:ed:40:e0:fe:a7:
07:e4:34:5a:64:c8:9f:e8:b6:89:04:b6:80:c1:f2:
b7:8a:76:e4:cd:a8:3b:ba:07:21:21:27:bb:27:aa:
c1:21:d1:93:43:1a:0c:73:cf:78:58:aa:4a:75:7f:
5e:13:b8:07:e1:f6:e1:53:70:47:99:8e:b5:ed:93:
93:57:ad:84:2e:2a:9d:54:17:1a:2a:b0:85:78:c2:
3b:83:a0:f0:af:e7:2f:81:fa:c2:8f:50:31:ef:c7:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:4E:E4:3A:11:1E:7F:EA:A0:1E:D2:89:F2:3C:14:D4:50:31:FF
X509v3 Authority Key Identifier:
keyid:BE:C2:B3:F5:19:13:B6:85:AA:98:A6:4F:5A:22:2A:1A:E6:7B:27:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/vsKz9RkTtoWqmKZPWiIqGuZ7JyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d0:52:6d:6f:e5:b1:7c:b8:40:34:79:62:74:21:84:26:ea:
f9:ce:c6:1e:08:07:f4:ff:39:42:f7:e9:eb:e6:ef:5b:6e:5c:
49:36:e2:6e:5f:d5:21:2e:d6:f3:00:34:61:7c:ea:07:0d:67:
e4:03:70:51:cd:79:e7:f6:76:98:7f:e5:20:5a:62:3c:34:8b:
87:af:10:62:27:bb:ba:ac:53:2c:70:b2:dc:e9:59:84:94:67:
40:5e:02:d3:90:d1:fd:5c:63:93:43:80:7e:7d:e5:2a:f9:c0:
d4:6c:45:7b:8b:08:ac:79:62:55:38:aa:6e:dc:8f:17:e5:87:
9a:11:7a:83:91:a6:2a:b2:41:05:21:75:d3:ad:f5:64:a1:cc:
91:f7:d4:0a:44:54:80:62:a0:46:c0:99:d4:35:48:28:50:13:
a0:41:2f:d3:a2:f0:8f:a5:cb:9f:72:35:1a:da:d1:78:23:52:
f8:1d:41:0c:ee:80:86:98:32:ef:20:07:1a:d0:e1:13:73:94:
66:2e:6e:6a:d7:42:7f:d1:7e:27:ac:c0:aa:ea:4d:1f:47:91:
8d:d4:29:40:6e:c8:dc:4e:fd:ad:81:e8:3d:25:11:47:f5:85:
61:05:5c:1e:a3:e4:34:de:c0:aa:49:37:e2:3c:e2:bf:95:1f:
39:78:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:05:48 2026 by rpki-client