Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File: vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier: /1oVHr8OSCkE7Pw2xCzgd7V60clb5ttqVrcQ+FYKzOc=
Subject key identifier: 82:03:52:D7:98:B7:9F:D4:C5:73:5D:99:2C:6A:E9:8C:02:DE:9B:98
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer: /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial: 01A07028150FE61E595165BA4ED64CAFFD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number: 039D
Signing time: Sat 05 Sep 2026 06:01:10 +0000
Manifest this update: Sat 05 Sep 2026 06:01:10 +0000
Manifest next update: Sun 06 Sep 2026 06:01:10 +0000
Files and hashes: 1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: 4GhKpHm4vlkfKqaPa8Vr0guE4lcpWL86svXWrufh9yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:28:15:0f:e6:1e:59:51:65:ba:4e:d6:4c:af:fd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Validity
Not Before: Sep 5 06:01:10 2026 GMT
Not After : Sep 6 06:01:10 2026 GMT
Subject: CN=820352d798b79fd4c5735d992c6ae98c02de9b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:77:ad:0e:16:fe:e1:39:48:7d:c8:c5:b9:
04:54:9a:59:83:0c:ca:22:87:77:db:52:07:7a:68:
dc:66:f5:c9:8b:c2:58:4f:b2:e3:14:fc:ca:63:7f:
ab:fe:36:99:d3:7a:24:23:7a:89:27:7c:d9:d0:71:
5b:9b:d4:26:1f:e3:4f:e7:bc:5d:e7:2e:90:8a:48:
2d:0b:c4:2c:b2:e1:eb:f3:61:1a:15:33:3c:ca:55:
dc:f7:c5:f5:ba:c5:e3:3f:4d:33:b2:c2:82:67:b7:
a5:d3:ca:63:24:dc:26:43:99:29:2c:77:5f:2e:bb:
4c:82:8c:34:6d:f0:d7:5e:b0:e5:51:a1:bf:c9:fb:
32:bf:6d:29:73:1b:9b:04:f8:44:8e:1f:ba:d4:41:
b0:fb:7a:4c:66:ea:dc:04:c7:db:71:a5:35:cb:6e:
ae:8a:34:56:fd:82:1f:bf:5e:34:19:f9:16:3f:1c:
cb:75:63:08:93:38:ea:d9:22:29:c4:48:85:4e:b0:
b6:a6:61:a9:b8:20:96:b3:1f:a9:06:dc:64:ea:2c:
b9:b1:58:70:16:31:63:f4:6f:ca:f7:61:aa:fa:80:
87:b6:ea:20:f1:20:c9:38:d8:cb:27:b7:dc:5c:d8:
99:41:9d:6e:93:66:bd:b1:54:e5:d0:28:86:09:9a:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:52:D7:98:B7:9F:D4:C5:73:5D:99:2C:6A:E9:8C:02:DE:9B:98
X509v3 Authority Key Identifier:
keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c9:23:4f:7c:9a:47:84:bd:6a:40:45:41:42:1c:2c:3b:47:
5a:e7:d2:ba:6e:00:b0:32:1a:8e:65:0b:0d:1a:7f:b5:bd:b2:
bf:a4:ce:76:be:ff:9e:98:89:0e:62:73:87:b4:0c:ac:ac:6c:
73:63:c6:9e:6c:2e:a5:df:fa:20:6b:9f:0b:a9:12:27:d4:07:
1a:bf:16:31:8a:c7:0e:a0:d5:70:9f:a1:96:9b:21:c5:81:00:
e4:39:ba:7f:05:cf:dc:47:db:3d:82:0d:f8:59:45:12:6b:d3:
5b:f5:e3:95:a2:51:00:50:b9:ad:59:b1:ef:9d:5d:be:7f:28:
d7:75:12:e1:c7:91:7e:14:9b:34:8b:57:c0:1b:50:6a:e8:9d:
f2:18:d4:f3:91:30:db:c0:c7:0e:b2:56:59:bb:9d:e6:4c:2c:
d3:b0:ba:77:03:30:fb:4e:ca:03:47:79:4d:45:64:08:b6:14:
3a:f3:e7:30:dd:cd:a5:5f:41:ed:c8:22:53:55:2f:ef:39:61:
04:6c:a3:40:d1:00:ab:02:72:63:86:ca:1d:25:10:d2:5d:14:
ca:55:dd:ab:88:d7:aa:dc:a5:5e:39:32:41:8f:f1:61:e0:53:
b7:82:fe:9b:bc:18:60:28:34:2e:51:1b:ca:1b:a7:6c:40:a9:
92:83:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:39:40 2026 by rpki-client