Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
File: vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft (raw, json)
Hash identifier: 19Svak7u2iVA8D9EC4m+PcmSqpXKZxdYquIjbHyfmhA=
Subject key identifier: 79:2F:1C:BF:75:06:8D:94:F6:98:65:46:A8:36:DD:56:36:B1:88:50
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 01A191D585A999A635C5F1B48222C22BA5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
Manifest number: 014C
Signing time: Sat 31 Oct 2026 12:00:52 +0000
Manifest this update: Sat 31 Oct 2026 12:00:52 +0000
Manifest next update: Sun 01 Nov 2026 12:00:52 +0000
Files and hashes: 1: AU8OktUluDemDAVdWC4o1rs1CnY.roa (hash: RjEeTRpnG44Tfxlx6Pp88uWbFbQRVFzej/AZva1uDPU=)
2: loonKh87j1JfQT3Dn_52JOEnZ1U.roa (hash: FrraXYxBriCt6ZUnE28kpvG91WIcfWLwXgT69XX5IxY=)
3: vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl (hash: RGFZwtnhxf4n8d2XSHukIrSvqYinq/U4dxoT+1wOG6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:d5:85:a9:99:a6:35:c5:f1:b4:82:22:c2:2b:a5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Oct 31 12:00:52 2026 GMT
Not After : Nov 1 12:00:52 2026 GMT
Subject: CN=792f1cbf75068d94f6986546a836dd5636b18850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:04:02:41:8e:cf:c4:ec:12:6f:b3:bb:fc:
84:38:6d:ac:bb:e1:7d:ab:33:40:5e:a8:21:7e:36:
5c:61:97:5a:30:60:67:77:91:0b:1c:8d:bb:06:0d:
ed:f2:7c:46:02:cc:53:db:d8:17:34:9b:c6:f0:a6:
5e:82:4b:a1:36:09:92:8b:b9:65:86:dc:dd:23:05:
4a:25:91:28:4e:74:30:1c:f3:e5:30:0d:08:ed:3f:
d8:01:8e:a5:42:1e:ed:ae:c8:6b:c6:c4:2f:3e:07:
36:65:b4:a9:0a:b1:ef:1c:7c:64:3d:8b:c4:5c:80:
fd:f5:84:8f:2a:77:2d:a5:90:80:0d:c6:e7:d5:50:
53:8a:4a:1a:d6:4e:a0:76:26:cf:98:4c:cd:01:67:
9b:44:33:72:ed:45:d2:e3:ef:0c:bc:71:60:6c:03:
59:f2:22:c7:49:f0:a4:06:af:7e:8b:41:f5:60:1d:
29:ff:86:e0:21:ea:fd:87:74:ad:01:40:be:b0:8e:
62:7c:d2:8f:0f:92:4d:c2:fe:f8:ae:90:13:a1:d8:
0e:34:4e:ed:3e:d3:5d:8e:1a:8d:be:5c:ca:fb:4b:
19:64:8d:e9:a0:3e:80:5e:a3:58:e4:7e:2e:3c:36:
01:22:fb:e6:08:3f:74:bb:c3:b1:82:0e:1f:51:5b:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2F:1C:BF:75:06:8D:94:F6:98:65:46:A8:36:DD:56:36:B1:88:50
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:41:7a:06:60:b9:e9:cc:31:82:34:cc:37:2a:16:6c:12:3d:
c7:f3:d1:92:c5:a3:b9:2c:b3:44:70:51:c7:12:07:bf:3d:37:
66:64:6d:eb:d4:49:22:12:a8:bb:40:d8:03:7a:d2:6f:d2:83:
b4:70:52:74:bc:2c:fc:25:0d:11:66:54:04:02:93:74:8c:37:
56:a7:f1:97:af:29:8a:01:95:72:d4:c8:88:51:f0:7a:68:68:
49:80:42:87:e1:d2:27:2f:9b:11:a8:c4:66:23:23:e3:8b:6c:
ab:6d:9f:d2:51:80:21:4e:63:b4:06:93:0c:97:38:ac:02:86:
81:76:8d:f7:dc:7e:8a:c2:ac:58:f8:b4:2a:ff:31:25:92:40:
2d:42:f6:5a:e8:43:c7:0e:e2:a4:51:82:66:50:14:fc:c2:e8:
18:83:d2:13:1c:10:9b:7d:74:4e:53:6c:0d:45:9e:22:87:d9:
21:34:6e:27:e3:b0:b5:7d:9f:3e:f3:3c:78:64:f3:b0:9a:97:
32:23:a4:a5:18:4d:6e:d5:7a:5d:52:ca:3f:d4:76:1a:8a:02:
a4:3e:d2:93:c8:aa:30:5e:0f:9f:c2:41:26:6e:6f:5c:77:68:
2a:47:f8:f0:a9:af:bd:a9:5e:fa:9a:a0:2e:83:b2:6d:14:12:
8b:06:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:12 2026 by rpki-client