Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: Ome6lTgRogRWq9t0Wz3midJ62mvDe/Fq83oYxVnNqPI=
Subject key identifier: E2:CE:86:4D:09:F0:20:4C:D4:67:9D:ED:41:B3:C7:51:1B:66:3E:C9
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 01A178BA7DD34FC9814BE27CDAD6ED144E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 084E
Signing time: Mon 26 Oct 2026 15:00:49 +0000
Manifest this update: Mon 26 Oct 2026 15:00:49 +0000
Manifest next update: Tue 27 Oct 2026 15:00:49 +0000
Files and hashes: 1: CB2ITi-RxPyoR7XH1NEi7Vwgbyg.roa (hash: e+/EujUqMgrunBdFLMp3Y5r4ddJZRAWO/cMR+Mtb/4w=)
2: h2q9_rZm0PV8txh6TfHdCBkulAs.roa (hash: q05w4TZAL571hpUjwgQIi8JE4zKvAGMsaI8J0PpFNXY=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: /HPJ2q27RH93CYz5PebwGrP7x6yEqRnY17q7aJESkfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:7d:d3:4f:c9:81:4b:e2:7c:da:d6:ed:14:4e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Oct 26 15:00:49 2026 GMT
Not After : Oct 27 15:00:49 2026 GMT
Subject: CN=e2ce864d09f0204cd4679ded41b3c7511b663ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:d5:5f:74:af:c2:7e:63:ff:88:4d:3f:29:
b2:1b:95:0f:e2:91:7c:7d:15:2e:db:a6:dd:2c:d3:
e0:03:9c:53:76:8d:5a:04:bb:03:ce:c2:11:01:bd:
7c:ca:67:ea:7a:71:ca:55:60:c6:aa:06:ae:ed:9b:
b6:6b:15:09:d7:1e:2e:31:1b:86:54:52:c5:9b:36:
54:dc:54:90:cb:8e:a3:ac:8f:f3:5a:09:73:b7:fd:
f4:dc:cf:47:42:08:0e:13:58:5e:4f:ba:66:f0:a8:
00:f5:84:4f:e5:79:d8:1d:1c:31:9a:25:42:b8:05:
c3:b3:fd:ae:d2:e1:07:46:77:5f:47:fa:09:00:2f:
82:25:e1:14:04:47:01:a3:60:e1:64:97:aa:35:58:
67:09:c8:73:92:d8:7b:6c:0c:67:99:29:ba:77:aa:
20:69:f7:ff:62:d6:44:cd:ff:04:a9:9f:f1:61:28:
d5:cf:0d:22:90:ac:6c:db:f8:8a:2e:3c:b5:e1:82:
b9:35:99:4d:56:b9:a0:8b:7d:ac:ca:f4:b8:47:e8:
e9:4f:f1:8c:cf:7a:99:a3:cd:72:e7:d3:38:bd:16:
dc:cd:1b:f5:82:f9:c5:25:6e:e3:63:ef:f7:db:3f:
54:9a:9b:2b:41:5a:46:ec:be:3c:3b:63:aa:0a:bd:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:86:4D:09:F0:20:4C:D4:67:9D:ED:41:B3:C7:51:1B:66:3E:C9
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:84:c0:9a:e8:e3:83:4d:f9:80:c0:fe:16:88:cd:e8:fd:
e3:4e:34:12:e5:d3:63:c8:19:4b:8e:81:82:d9:ab:1e:b8:c4:
dc:0d:69:7a:d0:b0:b8:37:81:4a:ef:a3:fd:49:e3:54:07:0e:
33:25:ac:08:a8:8c:5b:b5:68:4d:f4:3c:45:81:ac:68:c7:f1:
79:4a:61:16:4e:3c:dd:b3:c0:0e:21:61:23:ed:c8:e1:5c:53:
a3:f9:26:f2:59:75:8c:dc:fe:67:47:1b:79:71:eb:dc:9b:66:
39:06:d2:ea:4e:1a:25:56:1c:3e:b1:0e:84:fa:c1:2c:24:22:
df:e8:ee:1f:6d:df:16:f5:44:da:d0:e3:5c:88:80:ec:81:42:
04:da:2a:42:79:12:80:e4:50:b7:aa:8f:46:52:ad:c1:d0:ea:
02:4e:a5:16:0f:1d:74:0a:ce:f2:b2:f1:b5:1a:bc:2a:61:56:
4e:f8:fc:f6:80:36:b5:cd:f7:93:00:d4:06:96:3c:15:6a:99:
19:77:0a:b4:a5:39:fb:bb:f2:e0:27:b5:c3:24:f7:92:a5:cc:
35:7d:ec:b2:ce:a0:b5:4c:fe:c5:62:c3:49:d0:7e:85:27:14:
4a:4a:b6:8f:91:5d:c0:f0:05:49:4a:ba:fd:e4:1f:20:e0:d7:
b9:4f:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:49:45 2026 by rpki-client