Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
File: bVhePZVIlPD5w42RWoYnGlJ8eE0.mft (raw, json)
Hash identifier: 9QajushtbgXe3AMa6w5gSJ21X6eshhuT/qxmziYuFcI=
Subject key identifier: BA:9F:63:AA:D2:FE:A7:3E:87:2E:D8:D5:94:4C:46:29:E2:8A:03:AD
Authority key identifier: 6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
Certificate issuer: /CN=6d585e3d954894f0f9c38d915a86271a527c784d
Certificate serial: 01A1250BD8A95649004A14ED83F3B46B0BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:01:35 +0000
Manifest this update: Sat 10 Oct 2026 09:01:35 +0000
Manifest next update: Sun 11 Oct 2026 09:01:35 +0000
Files and hashes: 1: bD6xx0TpgrnIB9ZvoVqPvC8PyRc.roa (hash: QaBar+n/MedavkTYqGBlNpBfEOyuab6hMYyoPnfKNHc=)
2: bVhePZVIlPD5w42RWoYnGlJ8eE0.crl (hash: WLcw9bf4TcWneQGFUumIrgGeve87I057dB5OF6pRC6Q=)
3: dLMRQr4uK0MnxRDLYTdzEz1CvR8.roa (hash: fblIO6CiiR4a6/6Bya7xSY9w9n4FH+8mcCxhUe8CHEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:d8:a9:56:49:00:4a:14:ed:83:f3:b4:6b:0b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d585e3d954894f0f9c38d915a86271a527c784d
Validity
Not Before: Oct 10 09:01:35 2026 GMT
Not After : Oct 11 09:01:35 2026 GMT
Subject: CN=ba9f63aad2fea73e872ed8d5944c4629e28a03ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:9f:3a:69:28:8c:99:ec:4e:0d:7e:e4:d1:
86:66:f8:e9:a0:d7:74:05:39:dd:24:da:ce:3e:1d:
01:41:63:ba:32:3a:97:5e:83:dd:d7:85:67:f3:be:
3b:7a:db:36:28:00:47:9d:0d:07:1b:7d:4f:91:3a:
e7:0e:8c:4b:b5:3f:bd:18:f3:59:0c:b9:04:9e:57:
6a:a4:00:e8:12:6f:76:73:0d:2e:65:4c:68:e1:b2:
fc:9e:5d:d8:3e:fb:78:c5:27:dc:43:05:d1:a2:a0:
89:9b:9f:29:17:a5:b4:38:b9:23:b4:ef:4d:01:e1:
7c:b2:de:35:5d:1b:1f:1d:94:eb:19:50:c0:de:b9:
28:db:7d:65:c3:e4:e8:88:ca:7c:51:4e:03:d6:9b:
dc:03:38:46:68:27:dc:ae:8f:3d:a2:ed:fc:02:49:
5e:cc:ed:0a:6b:17:37:cc:ef:4e:de:1a:fb:01:3a:
b7:f3:57:7f:8b:ca:37:d9:f5:63:1d:38:e2:47:27:
86:6f:18:0f:d2:bf:6f:18:09:34:84:a2:24:73:f1:
82:a1:0a:7a:d3:48:d2:18:a7:5a:54:06:0f:62:a9:
0d:f7:89:fc:6f:db:90:6c:b8:39:14:cd:22:1f:74:
7f:4b:9a:18:1b:5c:6b:5a:59:94:58:ba:23:12:b5:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:63:AA:D2:FE:A7:3E:87:2E:D8:D5:94:4C:46:29:E2:8A:03:AD
X509v3 Authority Key Identifier:
keyid:6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:24:2e:25:dc:ac:6e:9c:b5:27:71:2f:d1:1d:d7:7b:cf:
1d:55:c3:14:94:14:7d:67:4e:19:61:21:86:32:58:e1:51:39:
0b:12:51:3c:29:03:4f:95:05:42:70:2c:33:5b:4e:31:fb:07:
1e:64:af:62:2c:4e:ea:b9:63:ad:55:bf:d9:25:d7:ef:87:1e:
0e:75:30:14:14:ea:69:7c:24:c6:2a:05:f1:45:ca:2c:6d:f7:
33:31:6b:e4:25:8b:e4:2f:60:dc:2d:60:59:3f:c5:0f:d2:83:
a4:e2:12:29:25:30:49:a8:3f:f8:a8:0c:1a:6a:d3:46:16:5f:
f4:d5:71:91:a9:a9:f4:3c:17:70:1d:77:b0:e9:7c:3f:1c:6f:
4a:a4:8c:29:20:f2:a4:df:9c:6a:dd:da:fc:ce:6b:1f:a0:34:
16:5d:ce:68:98:c2:2e:a8:eb:52:96:cb:02:26:51:10:3a:52:
bd:d1:d6:c3:95:7c:30:0f:21:4a:01:39:43:d2:83:8b:bd:08:
a1:2b:2d:e6:ec:87:c3:78:51:ca:35:69:64:13:06:65:41:fd:
f7:2f:24:fd:fc:5a:dd:dd:0b:ca:2d:5d:42:2a:25:a1:1c:4b:
33:3b:bd:f3:0d:a8:9b:36:26:44:7d:56:d5:fc:e9:83:80:5b:
bb:41:79:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:59 2026 by rpki-client