Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File: vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier: bZiIFT3aSH8sODC6NrIHt9lqqOrotumJnaR2o/VgB2A=
Subject key identifier: AF:A1:9C:D5:DD:E7:E0:DF:A8:1F:49:19:87:D6:D9:03:56:8F:0D:56
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 01A1724AB2E68E602C095D7F6CBBC4774742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number: 1AC2
Signing time: Sun 25 Oct 2026 09:01:00 +0000
Manifest this update: Sun 25 Oct 2026 09:01:00 +0000
Manifest next update: Mon 26 Oct 2026 09:01:00 +0000
Files and hashes: 1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: rY+dUNy2Plgr5DlS34PyvI1OP91Zr2F83gNKrjjYU+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:b2:e6:8e:60:2c:09:5d:7f:6c:bb:c4:77:47:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Oct 25 09:01:00 2026 GMT
Not After : Oct 26 09:01:00 2026 GMT
Subject: CN=afa19cd5dde7e0dfa81f491987d6d903568f0d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:51:63:81:c5:bd:21:30:5a:b2:8a:cf:71:
36:f7:c0:27:09:2b:34:18:2d:aa:3d:02:c5:1e:fb:
4e:55:dc:72:56:20:9c:c7:86:1d:82:ce:46:36:9a:
d3:6f:bb:c9:81:03:b2:74:1a:1d:fd:34:31:43:aa:
b8:e5:6c:f3:5d:71:75:1e:9a:80:85:30:58:00:86:
6e:ed:c8:1f:05:35:ca:ae:06:e9:54:fb:e3:9d:98:
3e:40:9f:ba:d1:74:e7:86:00:1e:17:7c:2f:f6:56:
cd:9b:eb:b7:8c:b4:f6:75:4c:50:6b:2f:24:eb:78:
59:bc:4b:a3:41:ff:9f:d7:1b:c4:9b:93:22:04:e4:
ce:5b:11:1b:31:4b:1b:58:75:a5:a4:12:cd:d2:0e:
3a:76:a1:64:53:82:9e:2d:08:4c:a2:66:93:5c:3f:
42:b5:c7:5c:6b:12:e5:43:cf:9b:82:66:5b:27:97:
c0:ca:a7:8c:8f:76:42:a3:32:0d:b5:0d:6c:4d:9c:
9b:5c:ff:b5:9c:95:78:1f:dc:16:b6:76:b8:29:b1:
77:78:d3:0d:07:c2:81:82:84:11:68:54:f5:8b:7e:
b3:09:83:3c:e2:5f:b6:11:7a:97:68:6f:2c:6b:f3:
93:11:7f:bd:a2:5b:2e:b3:c5:43:2d:e1:a1:b5:28:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A1:9C:D5:DD:E7:E0:DF:A8:1F:49:19:87:D6:D9:03:56:8F:0D:56
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:95:fd:a4:30:2e:6d:f5:3d:49:15:1c:b9:c8:fe:17:04:27:
25:6a:1a:93:85:3a:c1:6c:04:03:30:96:bf:6a:b5:83:35:2c:
e7:f3:33:cd:16:a7:ed:f1:f0:fe:8d:03:d5:f9:d5:9c:ef:f3:
e0:58:6a:ff:f2:65:94:ce:13:de:58:d1:25:c2:ba:0f:37:e3:
c2:80:36:cc:83:4a:f4:c6:9f:65:0e:25:c3:9a:16:3e:a6:ad:
12:8f:52:6c:5e:20:aa:a5:28:6f:c7:5a:02:8c:08:82:b8:c7:
3f:43:93:b9:ce:74:3e:48:72:4b:cf:2c:5b:4c:50:76:cb:22:
4b:7a:d2:b5:86:05:d2:21:48:ef:1e:83:6a:42:a7:75:a1:11:
1a:c3:a9:03:ad:19:da:75:86:4a:25:5b:08:85:ca:26:5c:f6:
28:65:b5:55:b0:55:c4:78:b2:50:c3:cd:27:ce:47:82:95:e7:
11:90:33:08:34:a3:a0:3a:94:8d:7f:80:2b:09:d5:b4:00:98:
3c:13:2b:5d:a8:bb:cb:96:d3:ce:ca:15:18:c5:d2:b7:b0:e5:
1c:e4:37:b5:c4:94:bf:90:6b:87:5a:f7:ad:ee:d3:b8:7f:fe:
ec:cc:81:3b:90:60:12:47:c9:5e:05:46:d3:c4:58:8e:40:fe:
24:11:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:35:30 2026 by rpki-client