Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: z0hlPfeAaUX16mwRvEHOLe2TAnEFKLFPhKRKTWcVz2o=
Subject key identifier: 93:F3:C1:82:C8:47:42:F2:97:91:01:37:7C:26:E4:73:4E:28:2D:E4
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 01A17514F2692DB1EDBC5301F8A804452FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 14EC
Signing time: Sun 25 Oct 2026 22:01:09 +0000
Manifest this update: Sun 25 Oct 2026 22:01:09 +0000
Manifest next update: Mon 26 Oct 2026 22:01:09 +0000
Files and hashes: 1: Ghj2CjsRnY1wb2E-XOvEApJyZ48.roa (hash: aHKmPU0uHBHelzcfZtPfiKhS3Lwo9mN4hfojl5TpX04=)
2: TJCXtcNQHbcpm26ywvTJgyF4t7c.roa (hash: Anw9nCC0dCNtJrk9wWN7XS4c1TkpZ/+wtFBY2ICI1TU=)
3: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: cH886CWYMoYFFdbqmyxkpGPgl8e8tDWfFFWBlQ2ga7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:f2:69:2d:b1:ed:bc:53:01:f8:a8:04:45:2f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Oct 25 22:01:09 2026 GMT
Not After : Oct 26 22:01:09 2026 GMT
Subject: CN=93f3c182c84742f2979101377c26e4734e282de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:66:9f:c3:e4:a4:a3:ff:0f:9d:b0:91:51:
64:23:90:4e:87:2e:6e:1f:8b:7d:a8:1e:7f:ac:cb:
92:06:a0:6f:11:1e:80:8e:c4:54:85:e8:5b:64:e8:
d1:a0:3c:84:10:8f:6b:f0:21:1b:7b:8c:4e:98:9f:
9f:40:f1:40:d6:b0:d3:92:eb:8f:79:0b:cc:3a:be:
11:b5:92:bb:92:32:f8:71:2f:63:e8:e5:3e:73:98:
f1:fe:85:e7:38:88:30:25:bc:8a:2a:11:7f:81:94:
e5:bb:1e:e5:79:ab:96:1f:91:b8:e6:f4:9d:af:9c:
86:5a:ce:49:60:09:c7:00:d9:ee:f0:e2:79:34:e0:
f0:28:a2:d6:a6:22:b7:e3:df:58:ef:d2:83:15:3e:
38:6a:5c:16:39:0e:13:4c:71:29:6f:a0:50:94:30:
1d:bd:d5:31:49:fe:e6:f8:a0:52:f5:a2:4d:cf:3e:
83:3c:a0:28:c5:d8:6a:8b:5d:d3:b8:24:9d:0f:d7:
01:c7:a8:24:c4:ab:29:13:2f:61:fc:09:15:cc:1e:
b4:c1:16:3b:47:a7:50:d4:f2:7b:44:aa:92:af:7c:
20:00:5e:65:a4:6a:69:97:38:f9:2b:78:2c:85:9c:
c6:3b:b1:f5:1a:1c:7a:2f:b4:2d:98:d6:58:54:aa:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:C1:82:C8:47:42:F2:97:91:01:37:7C:26:E4:73:4E:28:2D:E4
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f5:c4:66:92:39:b8:f4:75:cd:78:f8:58:28:25:69:d3:44:
ff:bf:11:36:0a:86:ba:7c:e9:90:04:27:65:ac:ae:d2:dd:f5:
d1:88:e5:ba:8f:7a:00:92:9d:6a:df:a8:8d:d8:5e:a4:81:96:
f7:33:fa:33:16:d6:c5:c8:6a:42:45:6c:da:cc:02:d4:e9:71:
75:32:07:03:cf:2e:9e:4d:cd:a3:8a:40:91:c4:77:fb:52:b4:
95:ad:4c:93:6a:07:3a:03:77:a4:21:67:59:69:3d:5b:f2:ee:
ad:15:e8:80:62:dc:e0:73:ee:66:99:24:93:29:d7:82:b9:88:
1b:a2:c4:51:7f:4e:cb:c2:ef:ed:f8:67:88:23:14:93:19:93:
e1:82:9a:9b:82:fb:eb:2d:e0:be:7f:c9:ba:8c:4a:a3:9d:38:
89:e2:06:ea:8b:ca:d5:07:49:04:6a:4c:7b:10:a1:fe:9b:c0:
55:45:60:bf:14:a7:b4:cd:cf:e8:5d:a0:34:29:06:b6:35:12:
e4:5e:a3:13:83:31:fe:de:6c:d0:b9:23:47:f7:51:2a:47:23:
44:2d:49:d2:86:19:ad:1e:5b:7f:52:32:87:cc:b7:6f:b1:1d:
44:9e:a3:e8:97:cc:0e:13:d4:5d:25:58:fd:28:05:41:33:37:
4e:45:75:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:48:38 2026 by rpki-client