Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: nq/PaFmOxPtCbGjHSaB9mL+BfxOXI3yAWxLPsOFddNQ=
Subject key identifier: B2:1F:63:E1:FF:C3:2D:38:EB:30:13:02:2A:20:54:BD:36:C2:06:68
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 01A0890C82584588D897AE8FA96AC014AEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0321
Signing time: Thu 10 Sep 2026 02:01:33 +0000
Manifest this update: Thu 10 Sep 2026 02:01:33 +0000
Manifest next update: Fri 11 Sep 2026 02:01:33 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: f8ILfP/mr5YjvY+XWBoeFs89NqKw7sDkNBNLkbQ0BYU=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:82:58:45:88:d8:97:ae:8f:a9:6a:c0:14:ae:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Sep 10 02:01:33 2026 GMT
Not After : Sep 11 02:01:33 2026 GMT
Subject: CN=b21f63e1ffc32d38eb3013022a2054bd36c20668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:9f:8c:ef:50:84:0d:ab:29:0b:ad:d7:ae:
ac:20:c3:f9:56:19:c5:31:3e:60:c5:d9:7c:15:0c:
af:3d:9f:b3:ae:f5:cc:d2:fc:ca:e7:92:be:8b:72:
08:48:db:b5:f8:19:61:07:90:cc:1e:9f:ca:ab:06:
38:bb:02:da:9a:1f:25:d8:c4:86:63:14:f4:68:95:
ed:43:fb:65:a6:41:52:3f:dc:48:d7:32:a9:4c:22:
58:92:da:7b:25:0b:40:6a:11:92:e9:61:f1:51:f0:
30:c5:5a:de:45:14:29:ec:54:05:85:6e:68:cc:b6:
b3:93:7e:a7:60:43:ef:c4:a3:c9:87:55:57:91:f1:
2d:93:c8:8d:d1:5f:67:14:d2:76:53:f4:9b:9c:bd:
13:68:c9:16:2c:48:25:5b:5a:9a:9a:15:15:94:c8:
98:74:99:a9:47:89:44:39:c9:7b:22:24:4e:69:16:
d7:31:46:12:b7:da:4a:02:ea:6b:e6:73:05:0e:fd:
1b:93:d7:19:a3:57:e5:4b:eb:df:bf:04:b0:ef:6f:
80:fe:b7:1f:ae:f2:f0:9f:87:3d:c0:3d:1e:60:0d:
1d:08:e8:8b:9e:3b:b3:c4:91:e4:94:69:f1:74:0b:
d8:f7:22:d8:9e:9e:87:74:9b:39:7b:17:66:87:1e:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:63:E1:FF:C3:2D:38:EB:30:13:02:2A:20:54:BD:36:C2:06:68
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6d:83:1d:a1:77:47:71:0d:a5:ea:f2:fc:df:c2:26:b6:5f:
1c:50:f9:1d:28:e9:c7:93:04:4f:a3:ff:8b:6a:88:c7:f5:65:
fa:bd:4e:a8:6a:c8:fc:86:ac:85:f3:3b:bb:65:ef:88:e8:69:
13:b1:d3:3d:3d:d8:13:d3:fe:25:47:49:32:30:8b:9b:f9:cf:
cf:c3:e9:c3:83:96:ef:22:89:79:19:f4:04:33:b1:99:14:50:
d3:80:43:be:5a:63:84:cd:fc:30:17:f1:28:e7:0c:64:82:53:
38:a9:6c:c8:e7:52:6b:00:9c:a7:c2:63:d6:2c:07:58:fa:66:
f4:9b:16:f3:33:4f:58:83:a3:b7:ca:96:64:2c:b0:8c:60:30:
fa:23:17:14:48:93:2a:57:20:1f:37:d1:97:32:89:c3:d1:1c:
69:d5:af:fe:d1:b9:13:db:2a:1d:95:2c:9f:c0:60:2b:f9:ad:
05:69:4a:33:f6:91:57:dd:fe:74:18:cc:5c:df:9a:93:b3:ba:
60:62:e6:48:d0:b4:28:8c:13:d1:23:00:21:dd:78:78:43:3a:
96:d8:38:ca:61:78:79:78:e2:ef:2e:74:54:3f:38:bd:4b:23:
c4:93:af:a3:c4:13:fe:9d:0e:c7:ed:90:26:ae:3a:b0:d4:ca:
93:f8:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:29 2026 by rpki-client