Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
File: vX2BeM7FzTdlSKkEkRf0acCnQxw.mft (raw, json)
Hash identifier: 72NbvEBtTfcLQi38axK04Jzot3XhEbtRyttHwLhPbM4=
Subject key identifier: 2F:D1:53:01:65:54:4E:00:45:E9:66:97:48:5D:51:D3:2F:16:E8:27
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01A0035DE78900CAAEDC2A9206D3EA073429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
Manifest number: 1A14
Signing time: Sat 15 Aug 2026 03:01:20 +0000
Manifest this update: Sat 15 Aug 2026 03:01:20 +0000
Manifest next update: Sun 16 Aug 2026 03:01:20 +0000
Files and hashes: 1: 5OsbbnnHwhVNORbPHv-OJIeuoGI.roa (hash: XRJA8VpJASXYSnFu9o5yKclI6PUgREHgPT2bBiqSOmk=)
2: XiD6lDrgMPuS8eayCDVkIbui-4s.roa (hash: SBkJkhDft5A8cF6t/KuhZfif5su+kzjqoUhMEaiSsSk=)
3: pBECGuvlqI1JRG7h1KFoBdoLOQQ.roa (hash: g1yrRU6vVwlNdEkW9jmsyPMMiYUAGVw0ecH5Z2RUhlM=)
4: vX2BeM7FzTdlSKkEkRf0acCnQxw.crl (hash: To8HB6urrFf/AaxEYFD9b6UbzdgthJLXtnw/xS369T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:e7:89:00:ca:ae:dc:2a:92:06:d3:ea:07:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Aug 15 03:01:20 2026 GMT
Not After : Aug 16 03:01:20 2026 GMT
Subject: CN=2fd1530165544e0045e96697485d51d32f16e827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:30:2b:7e:20:d0:a6:76:fd:8f:46:be:94:
aa:8a:38:cc:f0:c9:b3:98:63:d0:67:ea:71:89:fa:
ef:db:c0:5f:b8:bc:9b:09:75:ed:49:88:4d:c8:f7:
33:e5:13:1d:b5:77:28:97:2b:c5:65:6c:81:3b:a3:
b9:a4:4c:59:84:02:2a:a1:a7:ef:41:27:02:d1:2d:
27:0a:cb:ad:fb:bc:ad:fb:eb:50:40:79:e1:d7:ce:
28:bf:09:83:a1:3d:32:11:fc:07:67:49:4b:3b:ce:
57:dd:4e:99:7e:44:15:18:7f:6c:88:0a:11:79:ea:
4d:13:95:db:31:e6:d6:d5:99:6c:c1:ea:eb:7c:dd:
83:d2:a7:4b:2d:f2:a3:cf:ad:c0:56:e7:b6:fe:e1:
6e:2a:fb:6c:c6:1a:d6:b7:58:53:e2:49:7e:dc:af:
4f:cd:1f:bf:37:41:d6:9e:3e:dc:2f:34:62:58:89:
8d:4a:b9:e2:38:f3:a2:2c:ed:cc:dd:4c:1c:ec:7b:
70:01:b7:f2:d6:8c:28:f1:e5:c5:a0:d8:bd:e5:24:
5f:e8:73:96:b9:c5:34:e8:45:82:b4:6f:32:db:c2:
e7:34:8a:09:ac:e3:a6:f0:2c:60:16:62:a0:50:f8:
d2:5a:61:d5:6f:50:d1:06:ba:75:ff:7a:f7:e8:19:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:53:01:65:54:4E:00:45:E9:66:97:48:5D:51:D3:2F:16:E8:27
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a7:dc:ea:73:06:6e:e5:55:b9:8f:5c:49:2d:71:2a:4b:07:
6c:36:fb:7a:05:18:f2:04:9f:13:08:9f:1c:57:4b:ed:cb:4f:
70:ba:e5:31:86:26:2b:d7:a6:61:e3:fb:32:b1:3d:fa:6a:f6:
bb:e5:27:62:64:4c:cd:1a:9b:55:97:f6:fd:d9:87:2f:c0:6a:
31:1d:40:97:c7:7f:64:3b:66:20:be:65:f7:e9:55:51:0e:2f:
b7:6f:0d:bd:1f:16:49:8c:f4:ec:59:d1:ec:54:ef:c9:78:1c:
a3:b8:e0:16:fd:e8:bf:39:ae:3a:1a:87:66:fc:0a:5e:97:5f:
ee:08:bc:23:89:62:9c:ea:77:b7:fe:2b:85:5b:9e:a9:29:eb:
2a:d8:21:2a:f5:ed:27:c6:98:a8:1e:e6:4a:bc:05:f5:38:68:
12:6e:3e:78:38:59:e1:64:ff:d4:f1:f5:81:62:39:08:76:c4:
6e:83:6b:92:86:46:10:35:40:8b:c5:9f:95:10:a7:31:f0:b5:
58:f1:7d:87:cc:34:26:67:a6:90:5f:a1:41:fb:80:f1:e7:21:
14:3b:90:af:07:e9:7a:c8:bc:cd:36:bd:39:62:e4:36:c1:aa:
ef:a1:b8:60:e8:99:9f:b0:13:05:f6:ed:e2:0c:3c:ee:54:da:
87:2d:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:45 2026 by rpki-client