Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
File: vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft (raw, json)
Hash identifier: YaVXQt6Ibh/BqQjkd7zK6+cGS3QNVgJZHnrGna+0qlA=
Subject key identifier: FF:9C:A6:4C:C8:8C:4E:76:58:A4:6E:90:CD:25:BF:7C:44:30:04:33
Authority key identifier: BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
Certificate issuer: /CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Certificate serial: 01A12AD62AD3EF6754584A07DD70CF4D2C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:00:41 +0000
Manifest this update: Sun 11 Oct 2026 12:00:41 +0000
Manifest next update: Mon 12 Oct 2026 12:00:41 +0000
Files and hashes: 1: sMBS9OzucQLYRw4kO5MEHGEFHUU.roa (hash: tUsaSUdwGiplp3q5jaJRxYUheCxbRt91fnz6Ktk8t8A=)
2: vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl (hash: /AXFsdoRku5p+ptp1byoSvFhT0HEZeICypDTFQK7vkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:2a:d3:ef:67:54:58:4a:07:dd:70:cf:4d:2c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Validity
Not Before: Oct 11 12:00:41 2026 GMT
Not After : Oct 12 12:00:41 2026 GMT
Subject: CN=ff9ca64cc88c4e7658a46e90cd25bf7c44300433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:b8:c5:b6:a9:73:47:88:db:50:62:89:c6:
76:d5:a5:f8:cc:12:a1:b2:bc:d3:8e:0f:5b:9a:a4:
b7:ec:9d:a2:28:b9:fd:70:2b:14:f2:e6:5e:1b:a1:
6f:37:d0:bd:bc:0e:95:0d:82:b7:f6:be:78:4b:0d:
a6:41:95:1e:c8:aa:aa:d0:4d:71:74:8e:d0:09:f8:
29:13:f0:d5:34:1e:c4:70:c2:91:92:7f:9b:f5:8d:
bc:8a:84:a7:6d:7a:8e:df:af:19:16:ef:7f:96:eb:
17:b1:e3:b6:17:23:81:d5:19:ed:0c:c6:1b:17:29:
e7:d8:14:bf:5f:1a:06:f3:52:f5:7e:ee:27:ab:66:
67:bb:20:0d:c1:18:43:a6:d2:68:c2:cf:8f:47:b9:
cb:78:a3:e7:10:55:1a:71:43:70:9e:49:ca:8a:30:
0f:37:96:47:9f:49:24:78:f7:b2:8e:57:cb:0c:96:
20:ad:6d:a5:0c:31:b3:cc:ad:4b:b8:b4:d1:28:19:
4c:2e:7d:91:ea:98:44:54:1d:93:45:c3:b4:d1:c0:
1c:ef:5b:3c:9c:a1:eb:2d:af:c0:2c:4e:83:43:fc:
a7:fe:50:50:24:00:d6:3b:af:89:51:56:db:0e:ca:
a2:0e:fe:43:d9:0b:cf:0d:c0:57:8d:a7:9b:38:59:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:A6:4C:C8:8C:4E:76:58:A4:6E:90:CD:25:BF:7C:44:30:04:33
X509v3 Authority Key Identifier:
keyid:BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c1:e7:05:28:43:f9:a6:33:aa:69:e0:3c:8a:f3:f3:78:89:
73:56:a0:a5:5b:90:4d:7b:ed:66:32:a3:73:58:fe:7e:ee:0f:
8e:f6:66:06:f6:0f:5f:2a:94:8f:3a:3f:61:fd:04:46:48:1f:
3f:3f:ff:19:39:1e:0d:73:b7:37:1a:15:55:25:e7:dd:c3:33:
d6:d8:9a:59:ff:61:bf:e8:3a:36:b5:34:51:5e:e3:6b:a6:9e:
ec:38:e1:97:6a:c3:a4:fd:51:84:60:e1:8b:cb:f2:be:5c:7b:
2e:c6:33:94:0d:88:e8:45:4a:2b:40:d7:e0:df:30:8d:be:0c:
ab:f1:eb:06:b7:39:13:33:44:46:26:0e:87:32:12:9c:78:3c:
a6:15:1c:06:e8:50:94:d2:1a:be:ea:81:ee:e3:da:bf:59:54:
ac:ca:2b:74:b0:16:bf:25:12:4d:91:98:9f:26:d9:84:ca:82:
50:cc:41:99:57:b8:a1:07:70:11:ad:13:f6:d7:c0:3a:24:3e:
56:eb:4d:a1:5e:d9:53:b4:ea:c6:ff:10:bc:e4:d9:e7:85:dc:
3c:0b:d0:cf:01:8e:73:a6:0b:3e:69:38:69:bb:c7:d4:fc:93:
ef:3f:5c:b0:c0:85:52:c5:df:dc:fb:db:b4:8e:95:a3:c0:3c:
05:3b:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:33:32 2026 by rpki-client