Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: 87MDJkWMPOFJid3BBmupe1OBJovejcacidueM7nIe7g=
Subject key identifier: 60:AE:E7:89:E1:2D:48:63:5C:F6:F4:36:47:D7:AA:B6:82:B5:3C:EE
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 01A17E85EFD19DA8861BABBA1CE564DC025E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 0851
Signing time: Tue 27 Oct 2026 18:01:09 +0000
Manifest this update: Tue 27 Oct 2026 18:01:09 +0000
Manifest next update: Wed 28 Oct 2026 18:01:09 +0000
Files and hashes: 1: CB2ITi-RxPyoR7XH1NEi7Vwgbyg.roa (hash: e+/EujUqMgrunBdFLMp3Y5r4ddJZRAWO/cMR+Mtb/4w=)
2: h2q9_rZm0PV8txh6TfHdCBkulAs.roa (hash: q05w4TZAL571hpUjwgQIi8JE4zKvAGMsaI8J0PpFNXY=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: SsHX5Jz1Rsv95tdX/qKG+dv3r3LI0LCkKmphzSpgu/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:ef:d1:9d:a8:86:1b:ab:ba:1c:e5:64:dc:02:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Oct 27 18:01:09 2026 GMT
Not After : Oct 28 18:01:09 2026 GMT
Subject: CN=60aee789e12d48635cf6f43647d7aab682b53cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:f0:4e:56:cb:48:44:31:45:dd:69:f5:ba:
66:e1:19:e4:95:03:79:42:2a:f2:0c:5b:43:bf:15:
59:87:d9:e9:77:48:c9:cf:37:77:31:d2:2b:10:03:
59:20:86:39:27:ee:1d:9b:ab:5f:e5:ae:3c:f9:c6:
20:9d:48:f0:8f:47:d2:a3:15:78:49:5c:4f:c3:1d:
f0:8a:b8:e6:74:2e:9d:0d:a5:72:ad:66:2a:94:49:
fc:fb:4b:4a:92:5d:63:ea:fd:25:dc:9c:53:d5:02:
a7:c7:5c:7a:17:8d:e1:54:a9:86:3e:22:4a:17:43:
86:52:76:8d:38:58:a7:48:22:9e:79:ea:b7:44:db:
98:0b:3b:e3:2a:02:f5:e1:52:58:53:2d:c3:e9:b2:
62:66:a5:ef:9a:26:e7:7a:4f:f0:56:0e:43:b2:98:
df:6d:6f:fe:fa:67:35:a1:59:2f:98:26:9f:46:a9:
94:38:c6:97:86:2c:e7:9d:0d:25:08:a0:c8:0c:0e:
0f:d2:92:bd:d9:34:ea:46:0f:23:cd:70:ee:e6:20:
45:3c:a7:3e:c1:36:a9:33:0a:13:ed:31:aa:14:04:
f2:ac:b1:25:60:b3:45:df:00:4f:08:74:23:d1:2d:
ba:9a:eb:22:60:b6:0a:f9:d2:6c:af:9d:25:03:40:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:E7:89:E1:2D:48:63:5C:F6:F4:36:47:D7:AA:B6:82:B5:3C:EE
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:d9:1a:54:d1:4d:44:ac:41:43:3f:1e:73:7f:92:c1:5f:
46:62:d4:0e:f1:5a:d2:07:af:f1:13:9b:56:f2:ca:0b:c0:96:
a3:40:56:f7:09:ea:0d:5d:ba:cf:01:bd:b6:eb:29:f0:48:8b:
b9:f0:30:e9:e2:db:f0:3a:2f:5f:a2:2c:00:32:02:5f:b0:22:
66:df:32:2d:20:8e:12:0f:63:3e:91:67:97:50:c8:72:08:b0:
da:d5:90:b7:dd:d1:c5:b9:bd:a4:83:85:ab:22:d0:89:11:77:
e7:39:4b:3b:5d:9f:45:5a:b6:d1:a1:50:3f:1c:30:3c:80:be:
c9:29:b8:ea:6f:1b:e9:28:49:cd:49:b3:13:fc:64:d3:73:8a:
93:f2:a9:35:1b:5a:6d:f6:b9:fe:59:07:b2:fa:a0:9f:93:1a:
7f:29:02:f8:20:9a:55:22:03:62:d7:0b:1a:4a:37:0f:70:fd:
2b:73:bc:2f:d0:9e:66:0a:28:c4:53:85:2a:7e:ca:bb:fd:73:
53:3a:16:ae:95:98:aa:b0:4c:a9:58:a0:0c:3b:34:f0:94:94:
b0:3f:9c:b2:37:02:85:5e:ae:73:6b:2e:15:67:13:61:da:03:
3a:4b:e0:e2:fc:63:97:2f:d2:64:8e:f5:3a:39:13:50:42:23:
29:c0:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:32:50 2026 by rpki-client