Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: Vz4yV/gOzbs2GvcYJD9IZJQdQizjcNBeFYTX71TmtUw=
Subject key identifier: 5D:BF:92:FE:AA:39:7E:70:D3:3F:B9:DC:6A:D7:42:92:E4:03:85:57
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 01A15FD6D80CDBF8789272E33E7C4955A09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 1ABE
Signing time: Wed 21 Oct 2026 19:01:17 +0000
Manifest this update: Wed 21 Oct 2026 19:01:17 +0000
Manifest next update: Thu 22 Oct 2026 19:01:17 +0000
Files and hashes: 1: GJIEMFvCXOGxwMSx43guQFRPh8M.roa (hash: oeNhpu1q2YVhaNJfdDI1KC0StxYU+WfFhgtlfHrXwlM=)
2: N7xp5A4irg8DKzqXWFOFM39t3u8.roa (hash: qInCZHWCOK/PbCu1c+rmFecdDUSwXaQ9cyfT/I5HPdo=)
3: hTMMYpMuqGPoG2J1CKhmES38yHA.roa (hash: rvTmRXH6/6D95X7iHQWTgs6oiDZA0aQ3QNoQMnR5ayw=)
4: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: mVUNwVpTTGuK6JFDo+glgDA4dx9KKY2QfnzRxDIxdHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:d6:d8:0c:db:f8:78:92:72:e3:3e:7c:49:55:a0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Oct 21 19:01:17 2026 GMT
Not After : Oct 22 19:01:17 2026 GMT
Subject: CN=5dbf92feaa397e70d33fb9dc6ad74292e4038557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:e5:6e:de:36:f4:2a:34:90:26:65:29:7d:
01:08:f1:82:65:5c:68:18:f2:bc:06:dd:4b:de:3f:
86:e8:c3:7b:2f:dd:71:94:ce:28:cc:72:60:93:46:
15:fc:9d:fc:40:00:83:eb:cd:80:12:ce:51:cb:19:
76:40:6e:dd:4a:e1:2f:ea:99:b6:08:cd:f2:ea:e9:
4b:a8:fb:fb:a5:0b:5e:f6:7b:60:05:a5:4c:99:34:
2c:4f:38:4f:2c:d2:91:93:6e:94:65:61:50:6f:12:
09:8c:e3:48:ad:d2:c5:ca:ed:b3:e5:0f:5b:fb:23:
37:45:f4:4a:98:d8:54:bc:42:76:48:c1:40:3a:cb:
14:45:2a:75:7f:87:43:88:f5:6e:b8:1f:9f:3d:f4:
1f:8d:69:ff:fe:29:92:68:8f:cd:4f:76:b6:96:76:
56:1e:3c:46:77:ca:d7:0d:19:ba:84:15:5e:13:08:
8e:bf:1a:6e:92:69:0d:8c:ee:d4:23:5b:59:a7:9b:
76:fa:35:dd:be:36:c7:3f:c8:90:e6:17:65:29:4e:
28:db:7f:b0:73:78:b2:58:7a:6b:cd:ea:01:3b:69:
5e:0a:f5:1f:fa:72:59:bb:37:27:64:88:45:08:bb:
7b:34:c5:34:53:1d:60:97:d3:54:ea:9f:47:ee:f5:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:92:FE:AA:39:7E:70:D3:3F:B9:DC:6A:D7:42:92:E4:03:85:57
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:0c:a6:70:67:ea:25:50:33:84:85:37:99:91:b2:04:0a:
bc:57:b5:26:ce:85:1b:fe:7f:2a:11:41:ba:97:f6:49:91:29:
73:a8:c6:0e:19:be:8f:34:fc:d9:cd:5e:57:a6:8a:c0:74:a1:
c3:18:77:9c:f1:e3:39:aa:e1:53:50:99:bc:1e:2a:31:7a:89:
a6:a3:43:9c:8d:0c:a7:cd:38:ec:7b:4d:39:54:e0:cb:4d:41:
54:ce:6a:87:ee:fc:3c:58:8a:b5:74:88:94:0f:dd:c2:26:e5:
16:77:ea:4b:54:09:9a:6c:52:35:61:2b:df:a1:0b:16:d6:c1:
7f:2f:e2:c8:1c:b1:a4:0d:e7:83:23:fd:93:37:21:48:42:f7:
b9:93:fb:aa:0a:23:4d:52:b4:16:e1:05:08:fb:f1:3c:20:a5:
29:ac:a5:b5:72:d8:9f:e6:df:a5:2c:90:49:0e:78:44:4a:14:
58:92:4e:7a:f9:53:c1:6f:ad:60:8f:38:61:e6:a7:bb:b5:59:
43:78:8f:c0:d5:4e:ba:82:e4:f4:40:23:e7:8a:61:79:5f:8b:
4a:f2:a9:58:79:02:ec:fe:86:e1:91:0b:80:18:f1:64:a0:69:
9d:0e:4b:fb:21:59:cd:79:bc:e9:1c:e1:60:c2:37:fc:4c:d1:
79:39:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:31 2026 by rpki-client