Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: Inp+pDH4V/N0xYx/BJIL6e/GPGKpuxr5ocUn5BFxdoU=
Subject key identifier: 37:C3:1E:38:36:33:08:F3:1C:04:7F:01:17:6A:4D:97:79:AA:8E:7F
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 01A1841A9FF00AF293A3DBCCBFBAABCA8928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 1ACD
Signing time: Wed 28 Oct 2026 20:01:39 +0000
Manifest this update: Wed 28 Oct 2026 20:01:39 +0000
Manifest next update: Thu 29 Oct 2026 20:01:39 +0000
Files and hashes: 1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: nzxvzEHG0U/CA/Cv6vjmuryHsWWCPRw7XIUkjDf9Kgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:9f:f0:0a:f2:93:a3:db:cc:bf:ba:ab:ca:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Oct 28 20:01:39 2026 GMT
Not After : Oct 29 20:01:39 2026 GMT
Subject: CN=37c31e38363308f31c047f01176a4d9779aa8e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:33:b7:60:67:2e:e2:ff:d6:c6:55:8b:a6:
09:3a:39:4e:0a:76:45:01:e4:19:52:30:b4:b2:36:
00:c4:cc:44:20:24:f1:99:f9:16:3e:51:27:38:83:
74:d9:57:08:1b:38:a0:6b:6f:20:5c:43:d9:57:e2:
73:bb:0e:2e:a9:f3:7d:5c:38:33:b6:dd:be:21:58:
6f:17:c9:8a:a6:1c:d2:fb:a4:22:e5:b7:8d:ed:9e:
b9:c6:b1:ad:00:36:af:c3:fc:a9:c7:03:e0:ba:57:
37:ef:7c:1f:21:9b:59:cb:d0:0e:5f:b9:7e:c8:0a:
36:28:d6:4c:ca:c7:40:66:79:87:e0:74:dd:50:c7:
59:a7:fc:3d:c1:fc:82:2c:dd:bf:a6:d9:53:33:fc:
f9:2b:bf:dc:02:d5:cb:ee:79:1d:8c:11:40:55:de:
0f:9f:d9:00:35:09:a2:37:f0:82:d2:33:d5:9f:d6:
0a:59:11:3a:11:2f:81:ea:9c:d4:d5:8d:5d:22:17:
7a:20:1b:ad:9c:fc:6e:d7:be:be:9e:b6:6c:d9:74:
27:09:13:97:79:17:92:d6:a1:15:53:77:d6:94:19:
cc:51:40:85:d5:e6:29:e0:7c:fc:9c:77:c3:fd:fe:
c4:78:d8:6f:b1:1e:ea:0a:ea:e0:4b:1e:99:47:fd:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:1E:38:36:33:08:F3:1C:04:7F:01:17:6A:4D:97:79:AA:8E:7F
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b5:8a:23:4a:29:29:41:1c:ff:61:67:62:d8:87:a1:94:74:
0f:cd:77:a5:61:f4:17:64:ac:d8:f5:f3:37:26:83:00:53:db:
4b:29:0a:9d:04:31:2e:6f:5d:93:91:3e:2a:7b:f9:6f:16:2e:
52:06:cf:65:b2:06:98:ff:1c:06:3f:f4:81:e2:79:96:58:ac:
43:84:94:2b:31:c2:fb:7f:2a:f6:9f:e6:25:d3:b7:2b:1a:06:
cb:ab:f1:0f:be:9e:42:c3:f6:ac:92:1d:90:4e:c6:8e:53:f5:
bb:b2:84:bc:cc:47:71:79:71:9f:03:47:df:6f:35:90:7d:db:
41:01:2c:12:a4:8d:4f:3b:a2:b6:7d:59:89:30:60:9b:fa:db:
1a:de:fa:b9:bb:19:b2:79:66:ee:09:ad:c3:16:f7:49:d1:f1:
bc:91:cb:8e:2a:c5:36:5a:ca:19:d7:16:f7:15:8a:a8:fb:83:
32:29:35:86:b5:d4:37:f4:a5:79:f1:30:9a:e3:c7:61:9f:42:
66:69:1f:f1:74:8e:2d:f8:cf:3d:84:fe:22:d2:47:27:59:cd:
9a:ff:bc:51:72:8a:9f:e8:7f:7d:f1:22:41:9c:35:b6:71:cf:
9e:4f:d4:a5:c1:2d:cc:6f:f6:c0:ff:6c:27:84:85:72:47:45:
2e:0c:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 04:36:29 2026 by rpki-client