Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: cGeaFb3mS87WHpmseFdbdVWCeLpieI6DVS8+e76um4M=
Subject key identifier: B9:B6:41:D7:5D:1A:84:17:86:0F:4F:A9:72:D0:F8:2A:9E:89:D3:B8
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 01A17E862C1FFBCFDAA6A376A8A69A2CF648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 0429
Signing time: Tue 27 Oct 2026 18:01:24 +0000
Manifest this update: Tue 27 Oct 2026 18:01:24 +0000
Manifest next update: Wed 28 Oct 2026 18:01:24 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: kTiqkbcYrp3nabxUXDnP5q6s5AncWWpdqW6FP7UjQL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:2c:1f:fb:cf:da:a6:a3:76:a8:a6:9a:2c:f6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Oct 27 18:01:24 2026 GMT
Not After : Oct 28 18:01:24 2026 GMT
Subject: CN=b9b641d75d1a8417860f4fa972d0f82a9e89d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:3f:f1:46:1f:c6:0b:97:dc:92:6d:72:b0:
1b:e1:ff:3f:54:e8:5f:a0:8d:3c:a7:ad:d6:84:87:
6c:1e:df:2b:1d:84:3f:75:1c:40:9d:2a:fc:c0:ff:
3d:bc:df:c1:1a:96:9e:70:9f:32:9c:3e:46:bf:de:
0d:24:76:6e:09:56:11:02:44:e5:5a:86:53:1b:f1:
e4:d8:3a:c0:da:f1:bb:d1:5e:e0:94:8b:56:7c:b7:
61:2c:99:f8:97:80:7e:77:dc:d8:5b:45:95:6d:a9:
d4:ce:f5:40:1b:26:84:70:e2:c7:08:63:18:db:a4:
f8:9a:99:d0:4b:c6:78:dc:89:39:d3:35:af:32:1e:
13:ee:09:75:71:04:b2:71:8b:e2:ee:ca:e7:9d:9e:
3b:f6:47:f4:e4:31:0e:cd:97:04:1b:af:fe:e7:7d:
b0:e6:cf:8a:0f:ec:8f:42:4e:1e:37:17:6c:8a:5b:
5b:db:15:73:23:38:1d:6f:61:92:7e:b0:1c:d4:b7:
da:36:a1:65:42:2a:a3:bd:20:ab:62:41:a0:b1:43:
60:0e:cf:a9:c3:64:25:51:ac:fb:3f:02:ab:b6:6f:
fc:1c:54:20:cf:c6:65:6b:f3:0f:b7:d4:84:eb:8e:
5a:bf:5a:40:98:42:5e:28:22:df:32:8b:84:bb:14:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:41:D7:5D:1A:84:17:86:0F:4F:A9:72:D0:F8:2A:9E:89:D3:B8
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6f:d4:30:51:ca:9f:2e:18:d9:8d:b1:ba:9a:27:df:8f:6b:
d1:e1:24:f0:17:d6:f6:c2:59:51:a2:07:38:c3:8a:ea:22:db:
70:dd:5f:33:b9:2c:35:82:ce:3f:5f:4f:c5:5a:eb:15:c8:2d:
fa:e8:a3:86:7f:b5:ef:11:38:ba:3e:9e:c1:47:0f:bb:32:fc:
99:b0:ab:af:24:d8:5e:0d:7a:cf:90:ef:65:93:e1:e4:f2:36:
90:8b:90:c9:0c:09:a5:7b:9d:88:83:1c:c8:07:12:5b:03:6f:
92:50:00:f3:ce:7a:9c:2e:04:e1:03:8e:7f:0d:85:dd:af:c7:
05:58:78:9b:6c:00:b3:3b:85:3e:cb:5c:15:83:b3:56:f2:ca:
82:99:58:28:47:44:e4:03:18:af:f3:35:e1:ae:39:5d:61:52:
2f:0f:65:06:73:42:cf:7b:59:bb:ca:c7:8e:7d:8c:f2:46:c6:
0b:ce:f6:96:65:22:1a:88:de:5b:39:60:56:b3:0f:b4:7e:50:
be:e8:5c:b8:1a:1b:be:2d:b4:ad:9c:94:dd:12:12:a8:e6:de:
47:84:e4:ed:bb:f1:ae:b3:62:39:bc:31:8f:cf:0b:9a:b6:92:
d5:4c:bb:9a:81:86:e8:4f:ca:ce:db:cb:4b:89:d3:c2:23:09:
7c:ba:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:13 2026 by rpki-client