
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier: CTuuw8gYlNfyC5vLjuZJsciZwt+ilHhFp1l71pvzNgo=
Subject key identifier: 09:3A:16:7B:33:70:C4:6C:FE:45:3E:0F:A0:BA:94:56:27:0A:4B:1F
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial: 01A08B67F4844C9B91931987ECEA4BAF15C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number: 04FD
Signing time: Thu 10 Sep 2026 13:00:40 +0000
Manifest this update: Thu 10 Sep 2026 13:00:40 +0000
Manifest next update: Fri 11 Sep 2026 13:00:40 +0000
Files and hashes: 1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: yEpZVFbVD++LEZ2D3bSSjzYzZ+U+gKOaX3qzUZOSxDw=)
2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:f4:84:4c:9b:91:93:19:87:ec:ea:4b:af:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Validity
Not Before: Sep 10 13:00:40 2026 GMT
Not After : Sep 11 13:00:40 2026 GMT
Subject: CN=093a167b3370c46cfe453e0fa0ba9456270a4b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:58:c7:4d:8c:6c:ac:76:62:1b:df:cb:ba:
20:23:d1:8e:71:c4:3b:46:52:3e:17:59:1a:3c:c1:
38:1b:15:d8:55:d9:7b:c8:6d:86:3e:74:44:dc:97:
ff:9d:2a:43:29:28:7b:ab:30:a5:0e:13:06:f1:ea:
2c:e2:f0:d3:1f:f6:38:73:cd:0b:8d:6a:d6:f9:9a:
21:56:04:1c:a8:9f:e0:49:05:ea:8f:bf:5e:8d:6c:
87:95:aa:a6:52:24:d6:40:0b:22:e0:dd:53:86:7c:
b5:ac:33:02:30:75:26:b7:58:fc:11:3e:47:67:89:
6a:97:1c:c4:b9:5c:42:8c:69:ae:29:d4:96:52:82:
62:64:55:3f:5c:3a:d9:49:ce:c5:23:2f:75:2f:32:
e1:71:2d:26:be:63:0a:24:a1:6e:84:f9:78:78:7c:
e1:b5:3f:d2:34:33:b8:0f:6b:50:f8:96:fb:8a:6b:
63:8a:27:5e:05:9d:d5:6f:f4:65:da:9a:53:ee:c7:
c9:31:12:5b:c6:65:b7:da:ce:97:e5:63:90:aa:35:
c9:68:83:dc:f0:96:af:cb:55:cb:e9:94:8d:a9:0c:
ca:20:e5:ea:68:4f:dc:5a:51:24:fb:f0:e8:2c:34:
42:ae:53:11:e5:92:ee:56:e6:c0:8a:47:b1:6d:0b:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3A:16:7B:33:70:C4:6C:FE:45:3E:0F:A0:BA:94:56:27:0A:4B:1F
X509v3 Authority Key Identifier:
keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:dd:a7:7e:32:a6:eb:4d:2c:9c:2d:c4:13:34:35:bd:39:90:
9c:d2:9a:ad:4f:89:b6:80:f7:72:d8:b2:a5:bb:9d:f8:5e:43:
fb:70:a1:ce:e7:cf:18:0a:77:80:45:f2:f8:81:1d:4d:83:cd:
0a:e1:7f:78:6e:8f:a2:cf:4c:0f:70:04:76:f3:12:bd:b4:40:
05:f4:63:e0:ea:88:0c:a2:02:5d:ce:63:5f:22:0d:8b:f0:a3:
b7:bb:e9:50:5c:31:6b:79:a8:89:98:53:53:89:85:74:43:91:
32:86:4f:08:9c:66:2f:cb:89:3c:3f:43:35:43:5d:4e:85:bb:
97:4b:76:6d:13:8e:97:fb:ff:d8:51:2d:4a:4f:b8:f9:39:07:
09:09:12:cc:ac:d6:e6:1b:3b:b2:3d:e5:ae:23:43:6e:a4:35:
3f:24:49:74:fb:dc:59:54:35:af:0c:8d:d4:4b:08:4f:4b:7b:
7a:ec:fc:06:0c:55:52:b1:33:b1:27:34:c9:07:75:71:03:4f:
82:c1:29:5a:34:16:73:7c:36:99:1c:ce:ce:70:0b:86:28:13:
ac:dc:d2:02:54:28:22:02:1b:09:f3:f5:5c:e7:e3:23:60:0b:
13:3f:b4:1a:8f:53:84:5a:1b:c6:0b:34:79:61:e3:5d:72:4a:
33:01:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:51:29 2026 by rpki-client