Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.mft
File: vcBFPNOWYmT1s6L8To0xdKwR39g.mft (raw, json)
Hash identifier: WlFq6q63JVUvy8m4LKZgwC1+v5K0d6PsvZ4wPIaWSL0=
Subject key identifier: 76:D0:79:A1:DA:01:34:D8:3B:26:66:55:40:B1:37:6F:E8:23:72:1C
Authority key identifier: BD:C0:45:3C:D3:96:62:64:F5:B3:A2:FC:4E:8D:31:74:AC:11:DF:D8
Certificate issuer: /CN=bdc0453cd3966264f5b3a2fc4e8d3174ac11dfd8
Certificate serial: 01A190C2A7ECD56CB127FA47D382A58826B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcBFPNOWYmT1s6L8To0xdKwR39g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.mft
Manifest number: 35
Signing time: Sat 31 Oct 2026 07:00:38 +0000
Manifest this update: Sat 31 Oct 2026 07:00:38 +0000
Manifest next update: Sun 01 Nov 2026 07:00:38 +0000
Files and hashes: 1: V8848orWoNZ861bWFiiKE5uLR7A.roa (hash: aNdgzSdWI8rxikXWOQLnhOQhv1LiTm79AXNaaikPcp8=)
2: vcBFPNOWYmT1s6L8To0xdKwR39g.crl (hash: HPlUiuvZIp8PDU5paJ9N229Fpo6Bk3yE0d+t6fHE7AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vcBFPNOWYmT1s6L8To0xdKwR39g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:c2:a7:ec:d5:6c:b1:27:fa:47:d3:82:a5:88:26:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc0453cd3966264f5b3a2fc4e8d3174ac11dfd8
Validity
Not Before: Oct 31 07:00:38 2026 GMT
Not After : Nov 1 07:00:38 2026 GMT
Subject: CN=76d079a1da0134d83b26665540b1376fe823721c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:35:ad:e0:90:7a:19:73:b1:e0:dd:55:51:
af:09:62:6d:7a:cd:87:87:99:de:ad:34:cb:81:56:
cb:f8:ad:a1:ed:24:00:ff:01:17:ad:4d:fa:04:cb:
b2:8b:43:0b:a7:3d:15:e6:55:4b:0d:6a:8f:46:1c:
de:1c:d0:4d:4b:f8:77:c3:86:95:37:2f:d3:e7:fa:
35:2a:2b:c4:c1:26:af:ac:9f:8c:64:27:64:56:9c:
54:14:f4:91:9b:b6:d6:47:3f:76:b0:b4:0c:95:17:
3e:c4:7f:04:4f:62:47:25:ac:57:3a:6f:29:b7:d9:
c8:8c:ac:43:c9:83:5f:36:a4:60:ea:22:68:af:f4:
78:1d:b9:ef:ec:0f:c8:59:65:f5:70:91:5e:d4:d4:
f7:24:2c:04:8a:89:bd:cc:46:9a:fb:2a:9c:06:53:
47:53:70:a6:c6:5a:cd:58:47:2c:c2:e9:04:47:37:
d2:be:ba:53:8c:cf:62:53:9f:bf:9c:3c:d1:2e:82:
57:2d:a2:ae:57:76:e6:5b:0f:22:a9:68:7d:67:77:
7f:87:bc:94:e7:a2:d6:64:33:24:40:b3:81:77:53:
95:82:b9:e4:68:75:7b:2e:79:5d:08:48:3b:a8:eb:
7e:d4:6f:a6:87:d8:85:1f:0e:63:22:a9:a8:30:c6:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D0:79:A1:DA:01:34:D8:3B:26:66:55:40:B1:37:6F:E8:23:72:1C
X509v3 Authority Key Identifier:
keyid:BD:C0:45:3C:D3:96:62:64:F5:B3:A2:FC:4E:8D:31:74:AC:11:DF:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcBFPNOWYmT1s6L8To0xdKwR39g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:26:8d:8a:40:cf:9a:97:9b:2e:7e:b9:33:eb:66:1f:5e:cb:
a6:78:35:c3:90:8b:d6:e2:d8:3d:67:fd:d0:72:e5:78:01:2c:
74:fc:8d:e4:33:49:8a:f7:93:1e:50:28:6b:18:a0:df:84:35:
eb:29:7b:77:23:b9:bd:02:70:b2:b5:96:6c:ee:c4:e1:5b:f8:
12:54:86:a9:d5:a8:fb:51:4a:28:36:68:7f:58:00:58:52:76:
6d:20:06:de:6a:56:39:d8:1e:64:c9:a0:ae:bb:11:f7:18:5b:
39:a8:91:fa:e6:2a:13:ae:09:9c:1c:d3:c5:ce:61:74:4f:b7:
b9:35:ea:55:8c:6e:ef:04:e2:e7:bc:2c:69:61:0f:5e:13:01:
e3:7c:eb:55:67:63:a7:93:b6:ce:5b:08:43:1a:01:44:fb:f3:
71:85:54:2a:72:05:f5:7e:f1:3e:c6:35:b6:72:d8:ad:0b:a3:
99:c9:a5:5f:28:70:f5:d8:f1:0d:5d:ff:75:6a:d5:6d:32:02:
72:66:56:10:25:bf:c1:59:d8:50:f7:ea:18:78:6b:d5:c7:68:
09:31:49:93:fd:73:8e:1b:ef:08:9a:d7:f7:3e:a7:a3:c9:0e:
f7:89:23:4e:d7:bf:f5:bd:97:00:99:da:25:a9:39:27:c2:80:
1b:39:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:03 2026 by rpki-client