Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: NcKwQpu1xskEcDzXq6ZQufOiRtH1sXMbnFCpvZjVo/c=
Subject key identifier: 65:A5:C5:D2:43:87:C1:F7:85:4B:4A:C4:47:C8:2B:A1:D3:9C:67:75
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 01A1822B6BE80190AF6AAD90E681F34453B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0DF2
Signing time: Wed 28 Oct 2026 11:00:46 +0000
Manifest this update: Wed 28 Oct 2026 11:00:46 +0000
Manifest next update: Thu 29 Oct 2026 11:00:46 +0000
Files and hashes: 1: 5TQ-JqFgF-IFdipnnBO-T6tTIiI.roa (hash: jvG5fPveO3vEmUkVM2g5EIXNmfe8tIUO+ydnKHanIQ8=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: 0bWmOFbfMViuu6avziMCcIEWfZejBSDi+zfUFT5EiSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:6b:e8:01:90:af:6a:ad:90:e6:81:f3:44:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Oct 28 11:00:46 2026 GMT
Not After : Oct 29 11:00:46 2026 GMT
Subject: CN=65a5c5d24387c1f7854b4ac447c82ba1d39c6775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:29:1f:e7:45:37:4d:38:f6:7d:23:d7:fe:
ba:21:15:e4:7f:d7:81:2c:31:ec:18:65:1c:a0:04:
f7:f1:f4:6f:0f:5b:4d:1d:10:88:b3:37:23:30:f4:
31:16:3b:74:62:e3:b3:66:a9:5d:06:cd:55:a0:f6:
bf:3f:ca:95:51:ae:b5:09:a4:e1:df:08:17:07:61:
6c:a1:09:a7:7f:34:82:4f:45:71:0c:c4:66:83:c4:
8a:5c:b1:b4:dc:76:86:b2:63:bf:9e:58:6d:30:bd:
37:b6:6d:13:17:4b:bf:63:77:aa:96:94:ee:dd:45:
18:7a:03:18:b6:09:1d:2f:32:16:ac:32:df:7c:5d:
82:06:80:ed:3b:b9:a5:15:5a:56:e4:d1:1a:9e:da:
66:ef:6c:8a:c2:fb:fc:a9:9c:b1:93:6f:23:30:7f:
e2:eb:df:20:ae:f9:c8:67:45:a8:db:64:f0:48:4a:
97:e6:da:dc:f5:b5:0b:94:45:9e:19:2d:a0:37:1c:
ba:60:1c:1e:bf:f8:8c:66:88:9b:28:5b:2e:af:29:
fd:09:b6:4f:52:40:4f:6e:50:69:cd:2f:9a:bc:b5:
a3:89:53:f1:57:cb:5a:c6:33:d0:df:4a:a0:cf:74:
a2:7d:9c:cb:5f:0e:7b:b3:b7:2f:d1:34:b2:4a:0f:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:C5:D2:43:87:C1:F7:85:4B:4A:C4:47:C8:2B:A1:D3:9C:67:75
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a5:e6:c5:48:f7:96:56:e8:50:16:e4:8c:12:7b:e0:1a:37:
a1:6e:19:1e:a5:ff:35:44:1e:fb:0a:e2:36:82:91:b4:0f:96:
23:b3:99:12:d8:d0:6e:75:fb:f4:89:d5:2e:e9:bd:86:12:f9:
f8:22:c3:b9:3d:6a:4e:6e:f0:91:a0:bc:43:45:77:76:ff:12:
5d:fb:41:47:2f:5d:0d:1b:43:6a:23:dc:7e:a3:ab:17:95:be:
4c:1b:a8:17:bc:d2:17:22:1c:bc:f7:75:29:d9:15:36:6b:96:
29:15:13:98:de:34:d4:6e:dc:cb:81:2b:86:32:06:10:21:77:
ee:31:37:9d:38:fd:58:0e:c7:fa:a1:66:c9:d8:23:ba:a1:1d:
ef:77:61:ce:5b:2e:c9:4b:6a:02:c8:08:6d:c7:b7:83:f3:92:
f9:8f:24:27:fd:55:08:f4:b7:c2:be:63:ec:1a:75:f2:da:26:
94:5b:60:55:80:f6:b7:ce:42:fb:b7:5d:02:66:18:04:35:6d:
4f:9d:f8:3d:8c:3f:2b:87:0b:d5:26:ba:4d:a8:1f:53:e5:fb:
bc:d7:bb:8d:4e:0e:bc:e4:b2:05:07:a2:cc:89:f8:46:89:3d:
a6:91:fb:1e:fc:48:1d:64:c8:18:7b:89:44:09:a9:76:5b:fc:
e2:77:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:17 2026 by rpki-client