Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: pJuk0XYP4T7mxS/30ZZzzDk8xtqHseo3H8oCSf0Z5yk=
Subject key identifier: 51:F7:85:0C:0F:0A:BF:39:A1:38:67:16:8F:6B:F8:37:98:26:E0:94
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 01A03A8344F4CB5D0CA5AAC0A2474598835E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 1A20
Signing time: Tue 25 Aug 2026 20:01:16 +0000
Manifest this update: Tue 25 Aug 2026 20:01:16 +0000
Manifest next update: Wed 26 Aug 2026 20:01:16 +0000
Files and hashes: 1: CzohGtSLcmDpSrKXCjf2wQpuklI.roa (hash: oSgq7hJ4clz8JZa9p9/cu2QQ6c0SU2FQe0lIPhhVo4k=)
2: MCBjLeIbX3O5HTvShautKhz-FtY.asa (hash: BCCcq5YxV8mIaSr5yq810yZ+7NbSDQZa8OD5V47sB80=)
3: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: RaS/mS2zzNgazxf0q2s70k7ELi7SVTDMagdvS8csIfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:83:44:f4:cb:5d:0c:a5:aa:c0:a2:47:45:98:83:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Aug 25 20:01:16 2026 GMT
Not After : Aug 26 20:01:16 2026 GMT
Subject: CN=51f7850c0f0abf39a13867168f6bf8379826e094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:fd:75:bb:6c:1f:cd:58:d4:b2:40:b4:ab:
b1:c1:d4:7d:e1:e7:4a:17:1c:a3:91:b2:b9:82:48:
d0:84:d2:c5:fc:7d:51:3f:bb:e5:2d:a6:0e:53:74:
2c:26:fd:73:6f:44:f6:2b:8c:27:1a:8c:f6:87:e1:
fa:e0:0a:4c:a4:a4:24:48:fc:07:df:34:1c:29:11:
7e:e2:1f:23:fe:ad:38:84:b0:d9:6a:1d:a3:d4:3c:
3c:c8:2e:a4:92:1d:69:61:84:47:f8:82:18:a5:fb:
04:e5:e1:30:29:5f:44:7b:62:ce:79:56:ac:c7:90:
e9:20:51:15:fc:cb:27:4e:61:a5:e5:95:c4:80:88:
46:99:46:e9:60:c5:2f:3a:8d:d8:cf:7b:be:59:bc:
32:4c:d7:84:36:89:56:18:00:8a:b9:12:9d:42:a0:
cb:d3:38:67:0a:2e:60:15:93:65:9a:31:d4:9e:0b:
0d:ce:4d:f0:29:3c:fe:56:85:04:d5:7e:ea:99:cd:
b7:ea:04:b2:f4:d6:58:88:11:10:8b:8d:11:34:d9:
dc:2e:bb:c7:0d:05:58:c6:5b:a3:96:d3:c5:ab:2b:
16:08:fc:57:f4:f5:70:7d:0e:17:88:fc:fe:2b:c3:
02:f0:72:9f:ec:9d:59:25:97:0c:53:57:e6:cf:dd:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F7:85:0C:0F:0A:BF:39:A1:38:67:16:8F:6B:F8:37:98:26:E0:94
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:07:53:e4:cf:5f:37:80:35:5e:13:d6:88:30:69:f8:0b:
41:b5:9a:b5:b5:5d:c1:2e:61:42:77:ee:6b:5a:c8:1a:4b:f4:
87:fb:1a:8a:4f:88:19:4a:a5:48:67:f5:b8:05:3f:28:7f:a5:
3f:39:80:bc:fa:31:ba:f8:7a:d2:b4:65:a1:83:5b:9c:cd:bb:
52:47:f4:34:da:0b:6c:41:72:a9:7d:b2:d3:8e:5f:e8:1a:9a:
06:88:7c:57:7f:e5:98:66:d7:0f:4c:c8:b2:6a:f2:e2:ac:13:
d7:03:fd:e6:b6:0a:c7:83:23:5f:88:4e:09:3e:e5:e2:9f:11:
1d:ec:ad:4d:a7:c0:86:39:a9:b6:24:30:57:07:83:a6:44:63:
d6:87:91:b7:1d:62:d5:cd:03:30:47:fb:11:30:83:e7:2c:a3:
f4:6a:46:37:99:cd:b9:a1:bf:a9:33:0b:3e:04:52:97:dc:85:
66:fd:b6:2d:46:2b:73:08:7d:92:ce:cc:5e:42:bd:9c:74:6c:
64:3c:4a:62:b3:7c:79:00:92:c2:68:34:aa:1a:d1:ad:78:0e:
58:0f:cb:04:1a:59:76:72:be:87:6f:e3:4b:cc:c3:a0:5c:37:
04:29:50:ca:2d:de:d3:39:81:6e:b7:4f:c9:9b:c4:c3:4f:63:
0b:c4:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:40:00 2026 by rpki-client