Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: haHVb9z/jrTSRewhVadRM8fmviCqo65tsBi1EIvdTDA=
Subject key identifier: 28:55:CE:FB:0C:5E:E4:9F:BD:BA:A3:DA:B6:76:03:93:D1:F6:A8:10
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 01A08CE878F696683AD13AA73343CF9BB2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 20:00:40 +0000
Manifest this update: Thu 10 Sep 2026 20:00:40 +0000
Manifest next update: Fri 11 Sep 2026 20:00:40 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: U4doUCjeuW8yHSRGVJpP1fZ2n3ogFDpAHagwRQDxrNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:78:f6:96:68:3a:d1:3a:a7:33:43:cf:9b:b2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Sep 10 20:00:40 2026 GMT
Not After : Sep 11 20:00:40 2026 GMT
Subject: CN=2855cefb0c5ee49fbdbaa3dab6760393d1f6a810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:b8:e7:00:3e:da:58:6e:33:a4:e4:e0:b8:
c1:77:8b:bb:c1:62:9c:88:10:c6:e3:c2:e0:fb:e1:
42:7b:9e:9c:12:fa:21:c7:ec:0e:be:64:4f:80:a3:
2c:b1:82:1b:a5:07:41:b8:85:db:8b:8d:69:b9:59:
87:97:50:18:3e:8b:27:71:1d:3f:ff:9e:51:2e:72:
ea:2d:92:b2:c4:2f:b1:1d:1e:71:94:0c:47:e9:b7:
2d:cb:dd:54:d7:7c:b5:1f:4c:fe:10:e2:d9:66:fd:
0c:0d:af:79:07:3f:35:7a:b9:85:f7:ad:44:82:c9:
63:0f:fe:e8:dd:6e:5b:32:c2:74:c2:4c:b2:36:fb:
83:55:c7:2d:38:98:cf:8a:08:90:d9:5f:c8:08:c2:
e7:73:c3:33:51:bb:98:62:5e:d9:da:c7:06:04:ad:
ad:27:0e:54:84:e6:19:48:69:2c:18:5a:9f:c0:a3:
72:51:5a:f7:81:e8:35:bd:67:63:9e:42:fb:fc:a3:
c9:72:61:ee:8f:b1:cb:23:ab:7b:88:d0:1c:07:f7:
03:16:a9:47:e4:e9:16:5c:8e:00:d2:83:d0:80:34:
53:6e:02:5a:c4:31:bd:29:d2:34:3f:f5:34:88:a1:
66:29:23:52:96:aa:af:92:37:c8:eb:89:b6:6b:17:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:CE:FB:0C:5E:E4:9F:BD:BA:A3:DA:B6:76:03:93:D1:F6:A8:10
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:7d:a8:52:33:64:45:f8:41:31:ff:1b:3b:ea:4b:59:0c:
03:0d:3b:f2:8d:eb:c3:ce:df:be:f2:3c:bb:15:44:2f:54:aa:
b0:c1:d8:d4:17:a8:6e:33:d9:49:e5:fd:a4:2c:c7:a9:cc:4f:
9d:91:39:5d:aa:c4:d6:e1:af:f5:69:18:4d:fc:8e:48:18:2a:
f2:71:8c:52:44:20:34:ce:72:79:9d:bb:be:e1:a4:ae:3c:dd:
f1:70:12:9e:86:69:db:3c:96:e1:ce:74:dd:0d:e6:72:9b:3d:
25:f0:fe:fb:ec:11:59:38:ae:5e:28:10:7d:5d:26:7b:af:da:
69:e0:c6:28:3a:ba:3a:cd:cc:59:c5:10:1b:2c:42:9f:69:b1:
ad:f9:aa:41:98:0b:f4:56:94:26:fc:4c:53:70:f8:44:9b:a5:
a9:39:26:56:16:ed:48:4f:50:31:c1:00:53:1a:56:93:57:9a:
04:8c:46:e3:df:77:3a:0e:91:d7:9b:d5:57:2b:2d:8a:9f:ad:
bb:50:2a:34:2a:15:d4:be:27:19:b0:3d:c4:f2:c2:9f:39:9f:
07:dd:0b:f1:41:ea:fa:83:50:22:a5:2b:c0:e6:ee:4f:d7:94:
22:7a:25:61:f9:98:f6:21:26:5f:7c:95:d5:42:89:b1:c2:c7:
dc:e6:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:00 2026 by rpki-client