Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: FAgnPtUkANFpJX+p3prrdCtiI/7jqN7TgQTLuVstGN0=
Subject key identifier: 5A:84:7B:6C:6D:83:05:FA:50:F4:69:24:9F:3B:CA:7F:54:AE:3F:9E
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 01A020553E8758FFC4198E4788DFFD2472FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1A12
Signing time: Thu 20 Aug 2026 18:00:52 +0000
Manifest this update: Thu 20 Aug 2026 18:00:52 +0000
Manifest next update: Fri 21 Aug 2026 18:00:52 +0000
Files and hashes: 1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: oG4gb+ifxcfh0gTp9eCqqd65+DOwz8pYffTFaJAufyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:3e:87:58:ff:c4:19:8e:47:88:df:fd:24:72:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Aug 20 18:00:52 2026 GMT
Not After : Aug 21 18:00:52 2026 GMT
Subject: CN=5a847b6c6d8305fa50f469249f3bca7f54ae3f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:39:4e:9a:c6:96:19:7a:05:09:8c:42:92:
87:84:2b:73:71:2e:56:a9:db:39:c4:24:29:d6:37:
98:6c:fe:12:01:fb:b0:7b:14:8c:3e:3c:dc:13:32:
e8:4e:0a:1e:7b:2a:61:c9:96:e4:3e:5e:76:3c:46:
51:7a:fb:0b:dc:ac:89:7f:af:6d:14:22:d8:ec:a5:
9d:8d:72:c9:35:6a:42:2c:a7:24:9d:69:3d:34:9a:
b3:6f:37:46:1e:70:3a:b9:79:fe:31:18:9a:86:23:
f6:99:e3:ae:3d:0c:71:cb:ed:ff:51:8c:1c:92:5e:
ce:e0:99:50:57:df:4d:a8:83:0e:eb:a6:ac:08:85:
d8:a5:76:03:39:53:f5:cd:68:c6:ce:03:a9:e8:02:
53:4b:ea:2f:9a:8b:4f:c0:89:83:af:1e:35:de:b7:
d0:93:74:26:df:0d:21:71:58:9c:75:bb:14:95:d0:
1e:05:d3:fa:de:30:28:d1:01:1a:c6:c0:cf:5d:7d:
eb:01:e7:de:d9:d1:9f:ae:e4:3d:7a:97:36:c6:51:
1c:85:55:f3:c6:d4:f6:ee:e2:25:56:41:7d:e4:dc:
bb:81:c7:b9:f2:f3:f4:ed:db:4c:83:a3:aa:9b:0a:
c1:4d:71:87:0f:5d:bc:ba:08:bc:fa:ec:55:e2:9b:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:84:7B:6C:6D:83:05:FA:50:F4:69:24:9F:3B:CA:7F:54:AE:3F:9E
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:91:d3:59:c5:e0:07:b2:15:4e:d6:2c:39:59:62:51:68:ea:
42:71:77:d7:fb:f0:60:de:50:5d:16:51:39:83:eb:22:17:97:
49:72:2b:da:ed:e3:11:e9:76:81:cd:f3:8c:45:31:ed:8c:f6:
51:04:a3:e1:2d:e0:74:85:7e:83:f7:6c:73:27:70:4e:02:de:
a9:3d:d3:ae:34:2a:9a:07:b1:7f:28:4b:fc:02:bf:94:db:7d:
70:68:12:05:84:5a:45:f2:37:56:b6:85:ef:67:cb:be:e9:8c:
6b:c2:32:32:33:d4:09:9a:91:6e:67:12:8b:f1:7a:71:b8:77:
15:cd:6f:55:50:69:1f:14:0a:6a:d4:02:28:57:36:66:41:5d:
36:74:6c:8b:da:f3:6b:ed:82:b0:5d:8f:3f:92:92:bd:6b:82:
64:6d:61:5b:87:b4:98:4d:0d:1f:8c:7c:4f:b0:d2:f5:47:68:
24:f9:c2:cb:75:e2:9c:b9:c9:f6:ff:9c:ff:a9:b8:79:cd:b2:
f0:b0:df:e8:8c:60:01:36:f9:65:0d:90:7a:fe:75:ce:20:9b:
40:04:d0:c3:e7:32:18:5a:7a:7e:0d:33:eb:5d:36:52:9e:36:
27:f0:10:61:67:29:8a:b6:c3:ae:28:d1:fd:7d:78:e2:4c:80:
fd:ff:16:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:47 2026 by rpki-client