Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: nAZjaDIhvz1S61ymmDBStasfXkzbji/VpJW8uWPMJtU=
Subject key identifier: 5C:FB:55:48:94:50:89:26:31:AA:57:1B:82:F6:B7:38:48:04:2F:DD
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 01A1871AF49F039FED71AE1E30B02BF55C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0D18
Signing time: Thu 29 Oct 2026 10:00:52 +0000
Manifest this update: Thu 29 Oct 2026 10:00:52 +0000
Manifest next update: Fri 30 Oct 2026 10:00:52 +0000
Files and hashes: 1: BqP8JpSkO9zmFzKOVwQO5quzGwc.roa (hash: mL1va32nLh3K1Fn2SjIGSxBOV9vU7EKGw0UkMzUCNeA=)
2: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
3: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
4: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
5: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: w3PIV4HnqBnctFLPe/JATYDwS2dhaNEaJSIrjayB+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:f4:9f:03:9f:ed:71:ae:1e:30:b0:2b:f5:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Oct 29 10:00:52 2026 GMT
Not After : Oct 30 10:00:52 2026 GMT
Subject: CN=5cfb55489450892631aa571b82f6b73848042fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:cd:5d:ca:1c:3b:cb:6d:6a:61:e1:2d:3f:
59:1f:b5:45:49:4e:c1:6f:ce:8a:d4:10:39:e4:e2:
c6:db:8f:aa:6a:1c:f2:4e:30:f5:fc:a7:80:31:5e:
32:d2:4b:08:04:40:50:16:4c:14:5c:dc:ec:b7:4c:
b5:f8:3a:ae:db:bb:de:96:b0:ad:c0:b7:22:c4:47:
57:f9:ba:1c:b5:c1:91:d1:9e:46:90:14:aa:7b:3c:
54:a9:36:60:38:22:87:0d:af:5b:b7:59:79:74:37:
99:c5:04:f3:41:ff:9a:54:d0:47:92:25:c2:c2:42:
05:5b:0f:75:f4:d2:8e:8e:5c:f0:00:f2:0c:87:12:
66:70:f3:07:dc:a2:46:83:e8:58:2f:ca:d4:70:55:
bb:e0:19:ea:80:d9:62:7b:0d:50:af:78:a0:bb:e9:
bb:ad:6a:25:8c:ac:c0:54:65:9f:0f:f4:e8:ca:45:
15:b9:c1:99:13:c9:c3:e1:57:b7:ed:5a:7d:b5:c6:
77:37:ce:49:2b:d6:4c:71:dc:b0:a1:80:1b:3a:1e:
69:b2:dc:e1:f2:48:f8:58:fa:af:8a:f8:9c:c9:94:
5f:30:c0:ad:8a:6c:8b:9b:63:5b:39:d0:4d:62:0a:
d0:ab:08:14:9a:50:22:4f:da:55:11:3e:6d:5f:9e:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FB:55:48:94:50:89:26:31:AA:57:1B:82:F6:B7:38:48:04:2F:DD
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cc:4c:29:23:27:23:34:be:f6:05:b4:83:81:1e:d9:0a:d1:
7d:9e:12:60:fb:af:a3:2f:88:00:05:35:86:49:a1:d6:45:ae:
dc:11:26:22:ad:8a:03:40:a4:8a:01:f5:d0:f1:4a:90:44:35:
6b:0e:5e:16:01:14:c2:8f:b7:5a:88:c8:09:b1:dc:14:f5:4f:
c7:64:7e:5a:5b:82:c7:c2:62:1b:d8:e3:1b:27:5b:ab:27:e4:
ef:4b:d3:e1:9d:72:0b:ba:dc:0f:43:dc:87:8f:48:7a:1e:60:
1b:65:2b:41:41:68:2e:46:af:3c:00:ce:51:c6:48:ad:75:8c:
c6:8c:94:16:c7:37:a6:cf:ca:d6:ca:11:f0:46:04:9c:dd:34:
cb:4b:e9:9a:85:be:5d:f1:05:0e:5d:72:1b:93:db:9f:bc:15:
c6:48:2a:85:1c:17:f9:34:e4:a5:14:2b:34:54:bb:54:de:45:
89:3c:ca:51:7c:e5:f9:0c:b6:84:7b:5f:c0:5c:a1:08:e0:8c:
36:2e:13:46:b3:fd:ad:45:50:f7:a4:f7:ea:42:4e:84:cb:d2:
19:d5:92:5f:9b:a1:5c:d1:fd:d5:4b:5c:27:12:c6:39:6b:65:
ca:63:a9:f7:2f:51:be:ca:e8:3d:75:de:db:7f:61:14:6a:b8:
af:e5:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:49:38 2026 by rpki-client