Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: kXSgwGUWi9c5u17LWQeACG0I3GOkJdtMzkcwLEEgb24=
Subject key identifier: BD:05:15:B5:7E:74:EE:45:B6:93:88:31:BD:FA:4B:D9:66:09:CE:36
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 01A17882FDA85D54EE8D4CD7F4D4B8F15A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1A54
Signing time: Mon 26 Oct 2026 14:00:12 +0000
Manifest this update: Mon 26 Oct 2026 14:00:12 +0000
Manifest next update: Tue 27 Oct 2026 14:00:12 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: hEV9ciMY9uSfI06CMMZr16tLUzuHuwGJrYGPKzYmpIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:82:fd:a8:5d:54:ee:8d:4c:d7:f4:d4:b8:f1:5a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Oct 26 14:00:12 2026 GMT
Not After : Oct 27 14:00:12 2026 GMT
Subject: CN=bd0515b57e74ee45b6938831bdfa4bd96609ce36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:86:2d:11:9f:c9:17:ba:4a:ca:f8:38:53:
38:1b:54:3b:c0:46:48:fa:03:8c:10:17:e3:c3:30:
98:d7:37:ad:54:72:dc:8e:4a:d0:19:28:46:6c:3b:
c8:14:9f:4d:a3:1f:f8:1a:8f:09:86:69:ab:5c:e2:
ac:ce:e0:99:cf:83:bc:dc:88:26:4f:7a:d7:5b:38:
55:5a:a7:5b:97:67:de:bd:4e:a1:17:4e:ef:a6:a7:
f0:78:09:44:df:f7:52:28:98:3a:0e:ee:37:4f:51:
c6:07:e7:e5:fa:dc:16:72:8c:dc:0f:fd:bd:13:58:
79:78:94:1d:98:ba:2a:54:f0:88:31:f5:7e:1d:ca:
c2:62:96:13:40:9c:04:cb:9f:1e:a5:fc:93:8a:54:
e4:a7:e1:91:01:92:e9:74:19:6e:62:79:73:8a:de:
07:9a:9c:c2:77:48:6c:ed:ba:e4:bf:10:b9:04:3d:
ea:5d:c0:c2:e8:04:24:9c:75:19:c7:ec:e2:81:4f:
f1:46:06:e9:16:70:0f:e9:a5:c1:1c:3b:11:ec:a7:
ed:be:58:61:76:24:a8:e1:37:3e:a0:4c:17:4c:94:
f9:91:ff:0a:4a:06:3c:74:90:65:c7:9c:d6:be:a2:
85:66:9d:b4:b5:f6:a4:28:6e:1d:53:61:bf:29:1c:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:15:B5:7E:74:EE:45:B6:93:88:31:BD:FA:4B:D9:66:09:CE:36
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:22:35:eb:dd:1f:69:1c:b7:7b:63:7d:ed:6e:ab:67:5f:31:
8a:a0:4b:ba:a7:17:b7:af:f5:97:91:6e:73:a0:b0:45:42:d5:
21:65:ba:5b:82:75:57:56:ba:c5:d4:ee:e1:1d:8b:20:cf:7c:
48:0b:f9:8d:a3:ca:d0:b8:12:af:31:5a:d4:ae:d1:28:34:98:
2e:c3:a6:99:cf:d0:76:d0:6e:a6:26:f5:ef:0c:b0:91:6f:dd:
a9:fc:b9:04:24:b1:8b:f3:fe:62:2c:72:ce:ab:98:a9:10:c2:
5f:b0:88:5f:5c:b0:94:f6:80:85:f0:af:35:57:ad:28:83:8a:
56:97:06:a6:af:ab:c7:13:f6:25:f6:4a:7b:12:b2:f5:52:8c:
40:d2:71:0b:03:5a:61:e4:ac:a0:4f:a8:a9:84:bd:7c:bc:d9:
03:ee:09:aa:4b:77:d6:de:30:5f:5b:81:b0:20:92:54:c7:0b:
e9:57:38:54:06:e5:dc:3d:07:94:89:fe:52:68:4f:eb:5f:6b:
86:25:56:0c:b4:f4:b9:71:01:0f:67:24:8d:60:10:06:20:d4:
fa:f2:b6:d0:10:0c:f3:e5:45:67:13:03:c2:9f:94:7d:f7:58:
a2:24:7d:56:57:c9:c8:95:d9:35:32:03:8a:b7:35:2c:72:68:
e8:d2:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:57:31 2026 by rpki-client