Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: 5q6XHpR2UCP2zNO2BZZnmSe6z2HsmFa8QtSkpwah7Jk=
Subject key identifier: CD:88:02:F2:DB:FB:57:46:26:5F:52:39:28:16:06:8E:AD:24:02:61
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 01A187F6525FD9217185BE43EBA1B5558C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 03A5
Signing time: Thu 29 Oct 2026 14:00:29 +0000
Manifest this update: Thu 29 Oct 2026 14:00:29 +0000
Manifest next update: Fri 30 Oct 2026 14:00:29 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: x/vdDjt2+/JSUE8vUBcFoEYmC9k2AtOtBXysdaZ0oa0=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:52:5f:d9:21:71:85:be:43:eb:a1:b5:55:8c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Oct 29 14:00:29 2026 GMT
Not After : Oct 30 14:00:29 2026 GMT
Subject: CN=cd8802f2dbfb5746265f52392816068ead240261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:67:fb:cf:49:ae:74:42:78:91:9a:51:8c:
39:ff:99:bf:ef:94:46:e2:1e:85:c9:09:68:f8:fa:
2c:3b:35:59:65:1f:c9:4c:a6:91:da:c7:28:b5:c8:
94:d1:45:c2:26:14:9f:c6:3f:44:2c:97:ce:11:20:
4a:78:82:59:34:b2:82:a3:28:1a:1c:14:9d:0e:df:
2f:34:f1:30:a4:e9:d0:ef:1a:f9:00:64:40:d2:02:
81:43:a5:26:12:79:d3:d3:ad:ce:b6:6c:26:ac:9d:
44:eb:ae:c8:ac:b9:bb:cf:cc:fc:a8:fb:8b:39:e5:
ed:08:5a:fa:39:2d:22:fa:5b:07:f2:d9:f9:49:b1:
45:63:5a:ff:41:c7:64:9a:7a:cf:7d:74:a9:db:a7:
c6:6d:f8:7a:a7:d9:70:0d:30:94:9c:f0:80:18:02:
72:54:6f:70:49:40:01:d2:4a:b4:61:77:4e:49:01:
9b:2b:62:77:aa:f2:0c:9b:59:76:6c:20:d0:c1:b0:
b5:2a:7b:4f:20:5e:57:ab:d8:05:72:4f:1c:93:21:
e5:86:f5:d6:07:b0:31:ee:b5:d8:aa:0b:bb:5d:28:
ab:2d:8e:8c:f4:7e:0e:ff:01:05:26:d3:15:92:4c:
7e:62:47:c9:7d:73:05:9a:07:39:df:54:98:f5:04:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:02:F2:DB:FB:57:46:26:5F:52:39:28:16:06:8E:AD:24:02:61
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:56:dc:04:2c:d3:c7:80:98:b6:93:cc:d7:ed:81:f1:0a:0a:
6d:b8:5a:d9:49:92:3b:45:a2:19:89:8f:38:71:8c:3c:ea:a1:
1a:3b:24:64:09:fa:2d:fc:ba:60:3a:42:5a:7a:66:e7:81:32:
4c:56:24:00:b4:b1:d7:2a:30:56:dc:c7:3b:15:ae:bb:3d:f8:
6a:e8:e3:62:4d:f7:ae:9a:0e:72:53:65:97:5b:20:60:b7:f0:
5f:9b:7c:a8:1d:27:f6:06:10:25:b7:2f:5d:d1:60:65:e0:02:
04:3f:e5:2d:7a:6a:13:ac:8f:e5:93:27:1e:68:32:66:b9:2a:
a7:70:50:ff:68:41:d6:9a:ae:b8:22:d6:55:b2:9c:4a:69:da:
5b:2d:91:c7:c9:63:53:6d:da:04:08:13:0a:4d:d8:f7:80:f1:
b7:c2:06:ea:e9:88:ad:48:aa:7d:96:d8:24:fd:25:42:47:9f:
cd:47:9e:75:16:4a:da:04:79:de:da:01:e9:7a:e9:58:03:2c:
a8:6c:d7:9a:a0:09:83:90:f9:50:46:a9:47:68:a3:7d:46:66:
17:7e:27:2b:d8:17:36:74:5a:4e:cd:c9:fc:e8:dc:63:94:7c:
b1:71:95:d4:b5:19:6b:16:15:a1:29:b2:54:4a:92:1c:1a:23:
2c:4c:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:09:48 2026 by rpki-client