Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: 6DTfORedQ108/OYolup9tFkoe81Z/doQgBJecLCA8AM=
Subject key identifier: EC:8D:AF:FF:76:C6:57:89:0D:0E:F9:6B:1D:64:E7:3D:03:CD:E8:D2
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 01A17C28CF80A9F056EE0BBF1E179344578F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 07:00:11 +0000
Manifest this update: Tue 27 Oct 2026 07:00:11 +0000
Manifest next update: Wed 28 Oct 2026 07:00:11 +0000
Files and hashes: 1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: ErsuZEVnGX1uI4MgEbIpUaJ7FcBHDSUS7SQNwZxDSyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:cf:80:a9:f0:56:ee:0b:bf:1e:17:93:44:57:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Oct 27 07:00:11 2026 GMT
Not After : Oct 28 07:00:11 2026 GMT
Subject: CN=ec8dafff76c657890d0ef96b1d64e73d03cde8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:da:84:1e:bb:fc:fa:c5:b0:92:54:3b:14:
4e:a6:63:be:48:6e:3c:f5:46:5f:e2:76:c3:55:c0:
ed:6a:0e:70:bb:7b:ee:7b:f0:b6:12:71:a8:b8:62:
59:14:f7:ac:80:1a:ba:42:5b:8e:26:69:f0:2d:6a:
01:80:56:d8:0d:72:91:48:b2:b8:6f:14:71:55:8e:
b6:bf:03:51:dd:7a:de:88:82:75:22:58:71:bb:d6:
ae:3e:7b:66:50:c8:ac:cc:a5:11:03:a7:0f:83:b4:
89:ba:4a:b3:9d:89:10:e9:2b:0c:39:9f:c0:7c:32:
7a:d4:fa:d1:38:a2:da:0e:fe:5b:1f:ab:33:46:a7:
fe:bf:c2:53:88:65:1c:1f:56:a0:15:b1:74:27:d2:
e2:dd:cb:14:86:37:eb:ef:9b:ec:52:d1:7e:cb:90:
b3:f3:13:17:ed:06:72:ab:46:63:c8:fd:78:7c:ca:
c3:fc:65:df:3e:01:7a:b0:27:2e:e2:f3:45:b2:c5:
53:e8:29:0c:8e:3e:c5:67:60:4e:fd:e8:18:da:c2:
b6:86:71:b3:60:5b:a7:9a:39:eb:98:70:a9:b6:b4:
76:f9:3c:19:0b:70:d1:f9:c9:be:e9:31:18:1e:43:
e0:db:5e:c3:64:16:16:a7:b6:4b:f6:3b:79:72:ff:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8D:AF:FF:76:C6:57:89:0D:0E:F9:6B:1D:64:E7:3D:03:CD:E8:D2
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:e3:87:18:03:b9:6c:81:1b:fc:0a:c6:c6:a2:a0:84:11:
64:45:4e:72:98:8f:69:01:42:2e:00:39:a3:ca:cd:fe:ef:d7:
7d:43:eb:ff:56:e1:b0:65:84:cf:3d:23:36:77:61:e9:b3:3b:
6d:94:dd:89:01:92:9c:89:7e:97:e9:80:3f:37:d1:19:d2:f2:
80:a8:d8:8d:b4:d2:a5:e5:91:c7:c1:db:a0:c5:45:13:d8:0e:
c3:0a:fc:c3:54:78:d6:1c:d8:3d:14:23:8e:f5:7b:77:e3:e0:
d5:d2:66:e1:b2:18:e2:44:9a:ff:ec:d6:a4:13:28:d9:1f:00:
d2:6f:3c:bb:3b:ed:e8:ca:c3:5a:32:41:f6:f9:65:b6:36:35:
79:80:fe:e0:a2:d5:86:fd:0b:47:67:20:4b:73:4d:8d:0b:8a:
83:d7:f5:46:87:f8:03:1d:70:9c:b1:78:e2:0b:92:a5:70:09:
c1:fa:04:84:ee:44:19:e7:47:e5:e6:22:89:75:89:0a:54:27:
21:a3:09:8f:86:a3:9e:76:db:c5:dd:a3:9e:6c:11:be:23:28:
20:35:91:92:3a:e0:d0:37:fa:fb:98:99:18:a5:d7:35:3e:1a:
72:a1:c2:73:d1:05:aa:ef:ec:6f:5a:57:a4:23:5b:8b:55:ab:
7a:2e:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:18:22 2026 by rpki-client