Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: 9jN5TZ130COQt5JQrey+UvEn8BnblNJyUcCNQkhX8IU=
Subject key identifier: 59:BD:4E:85:2D:63:E7:EE:BE:5E:5D:F1:C2:09:B6:76:93:1F:CB:B0
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 01A181BDB52D3FF69FDF20AD345A58C0D009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 09:00:55 +0000
Manifest this update: Wed 28 Oct 2026 09:00:55 +0000
Manifest next update: Thu 29 Oct 2026 09:00:55 +0000
Files and hashes: 1: jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa (hash: AEoYWv6ZL0b6nATDt55iE0kgXS9whL4s6zBc29DhB/I=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: /az7L9PbE+v6sjHWidUVyJ0oB0vIveKAIfoPoaycEnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:b5:2d:3f:f6:9f:df:20:ad:34:5a:58:c0:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Oct 28 09:00:55 2026 GMT
Not After : Oct 29 09:00:55 2026 GMT
Subject: CN=59bd4e852d63e7eebe5e5df1c209b676931fcbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:d0:e1:17:75:3e:11:07:39:61:fe:43:59:
c3:dd:74:c8:9f:45:bc:08:c5:7f:9c:9f:09:20:58:
aa:c2:c3:7d:a8:10:48:f7:d8:62:56:c2:6c:4d:00:
a7:93:e1:95:80:5f:bc:92:62:30:dd:35:61:d4:ac:
79:48:61:83:76:3b:1a:ae:1d:5c:4c:28:a9:71:5b:
ab:b2:e2:74:50:e4:a9:e2:30:12:f9:ce:69:ba:e8:
5f:57:52:55:24:28:e6:07:a9:2a:fc:7b:fb:91:d1:
42:15:d1:a2:35:f6:f7:ad:2f:20:24:64:69:80:28:
a9:96:25:a0:73:79:09:8a:22:d4:84:80:73:f1:9b:
4b:4a:55:73:72:82:e1:bc:2d:e7:de:89:f6:06:54:
78:b7:3d:58:cd:51:a4:38:a8:82:bf:df:18:c9:d5:
28:72:5a:9d:0f:6d:ed:e2:55:b3:8c:81:b7:ca:1d:
90:20:1d:50:f9:dd:7f:d5:11:1d:00:85:1f:db:22:
f8:cb:ec:07:e8:3f:3e:aa:2e:f0:63:ef:c6:b1:f2:
d8:43:df:90:61:fb:7a:e4:9d:d0:d0:62:af:b5:c2:
56:19:73:5d:f4:a2:b6:43:46:f8:e1:88:ec:9d:7e:
2e:ee:0b:f2:28:44:ec:fd:48:67:ae:87:66:29:ba:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:4E:85:2D:63:E7:EE:BE:5E:5D:F1:C2:09:B6:76:93:1F:CB:B0
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:50:ca:6d:1a:de:01:d1:d6:17:88:4f:8e:a6:a0:b6:f0:d1:
8d:68:2b:22:e0:8d:9c:f0:d7:2b:70:b7:e2:96:1e:4e:a1:cf:
84:41:9f:2f:02:72:10:d5:1a:b7:50:64:4a:87:c7:92:f0:a8:
41:a0:f2:13:c6:ad:a9:29:97:1f:00:68:7e:b0:b9:4f:08:35:
ce:77:f3:5b:ab:bf:a3:af:ad:cf:53:2c:dc:bb:1d:cb:e5:5e:
2d:9a:c2:fe:50:5d:09:49:1c:8a:d1:79:7f:1c:4e:d9:4e:a3:
81:99:23:a2:c0:b0:38:f3:f6:b3:79:b8:18:50:ac:c1:02:9b:
00:e3:d9:50:45:ed:80:f2:c0:d7:ff:05:dd:07:d0:e6:41:6a:
e8:52:6a:e5:16:b5:9e:27:90:df:fd:34:61:eb:cc:25:e3:59:
de:88:e2:84:66:8b:83:20:ae:a8:df:4d:c7:3f:69:da:c5:7f:
22:c5:58:f9:84:71:6a:01:75:73:82:a5:13:c7:55:9e:ee:28:
27:df:5e:4f:dd:b1:76:f2:64:5e:77:aa:9c:10:28:20:a1:e2:
c6:09:d2:69:a6:26:b5:fb:64:a0:be:78:0f:40:3d:a9:36:e6:
dc:c8:03:a1:da:14:5f:80:49:aa:44:a5:de:ab:a3:8e:59:14:
9e:ac:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:11:31 2026 by rpki-client