Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: tbFtfQwnih7GOXNyix2HhFxktAUWaJjhhLXlyJ3J2Do=
Subject key identifier: D0:C3:84:77:00:A9:68:5E:2A:FB:AC:4C:1A:FB:D4:31:0C:40:9E:A4
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 01A133D9DCCD86ABC4B429FB837C007C886D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 1AA6
Signing time: Tue 13 Oct 2026 06:01:18 +0000
Manifest this update: Tue 13 Oct 2026 06:01:18 +0000
Manifest next update: Wed 14 Oct 2026 06:01:18 +0000
Files and hashes: 1: j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa (hash: TldycA22tY7EvqsLvcs1YaipegGydJ+DMucdg1RkrFY=)
2: m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (hash: 0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=)
3: sq38IYtkwvLbxoqDW_7wpbQZMOY.roa (hash: 9FNCpi3tI2psX/axIbavUXntYIPjv5HbB/DRF/Sxvrg=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: evoGOL9vfj4Km50262U5KrLomVs5DBhKKsjlpZ1WFeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:dc:cd:86:ab:c4:b4:29:fb:83:7c:00:7c:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Oct 13 06:01:18 2026 GMT
Not After : Oct 14 06:01:18 2026 GMT
Subject: CN=d0c3847700a9685e2afbac4c1afbd4310c409ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:cd:ff:86:0f:7d:0a:3b:7f:e5:7b:ce:b5:
bf:d7:74:1a:67:a6:bc:af:c0:9d:2b:5b:8c:3e:da:
14:fd:39:e2:f3:93:29:2f:3e:45:4f:ff:1a:97:f3:
e7:c0:fc:c9:3c:eb:0a:dc:d4:a8:1b:33:1d:ea:ff:
94:6f:5f:7f:ac:b4:7e:2f:97:8d:2f:5a:78:f1:18:
d0:6b:4d:79:f0:04:fc:c3:d8:19:4b:64:83:6a:1f:
67:4b:49:9b:e1:51:de:c1:b1:19:e6:e1:8f:56:b7:
c7:6f:b2:9d:5f:50:5d:ac:27:86:af:a7:bf:e4:2f:
96:39:ce:ca:94:35:63:9d:51:f5:2b:32:4c:b3:76:
74:c2:14:ce:bd:ba:71:eb:c5:b8:d3:14:87:c0:87:
71:bd:99:7d:14:eb:5d:90:cb:1d:9e:43:e7:2c:e7:
5b:7b:61:9d:9d:c9:07:3b:aa:ff:35:85:a7:52:5b:
03:cd:87:4a:02:13:56:1e:ba:fc:18:f2:b2:8b:13:
02:f1:04:73:01:94:a9:8a:18:ed:63:15:00:c9:fe:
8b:1a:25:d5:34:b9:d4:78:91:0a:e3:c0:21:ef:b1:
b9:3a:bb:68:4c:13:db:ca:5f:13:f7:fe:86:5c:92:
4e:c3:0c:97:bc:00:3c:ba:dd:c1:32:4c:21:a3:20:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C3:84:77:00:A9:68:5E:2A:FB:AC:4C:1A:FB:D4:31:0C:40:9E:A4
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cd:7e:da:42:15:3b:24:85:93:40:b7:f5:aa:86:94:b6:da:
7e:3d:57:72:1d:d2:aa:b1:ac:83:53:d4:b5:10:71:7a:b4:ef:
5d:3a:8c:53:fa:5e:f2:ac:01:fc:af:3a:c9:91:69:fb:e0:5c:
67:c1:d3:0d:ad:03:77:ee:e3:df:8a:43:24:74:91:94:d4:20:
45:c5:92:2c:03:0f:ca:fc:c3:04:8d:28:76:1d:e3:b8:14:3e:
96:f0:2c:08:1e:f4:6b:a1:c2:e3:9a:5d:f4:b5:a1:a5:37:21:
4b:5a:5b:e6:00:21:8d:09:c1:f2:00:c9:b3:f0:98:f0:b0:02:
df:dc:f6:bd:06:83:2e:bc:38:85:bf:db:fb:9d:8f:2f:84:5b:
c7:6e:13:e9:a6:42:13:d7:d7:0b:83:01:64:10:15:5c:21:06:
40:af:88:38:53:07:8b:6f:63:41:cc:ea:69:e7:e6:fa:0e:08:
9d:db:70:96:43:d5:a7:87:ff:25:8f:6a:60:6c:73:39:1a:32:
8f:62:a1:d4:1c:e4:af:8f:94:23:1d:d0:3b:64:15:90:cc:ca:
47:8c:82:fe:f3:d0:ff:51:01:ac:6e:73:e4:10:ed:dc:8b:72:
85:c9:e2:25:09:bb:b9:26:5e:1b:bc:0e:0d:f3:a7:ae:52:a3:
03:2c:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:04:22 2026 by rpki-client