Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: b+SB6hhyE5xLtcTi8ML/B/whv2w5oLYQtEHb3uHeqYM=
Subject key identifier: 3E:EF:BE:18:AC:DE:D1:4A:2A:C2:B2:A7:A0:62:B1:47:50:B8:01:0D
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 01A18676B4FBA529A0C496973A7DE4EDD87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0ECB
Signing time: Thu 29 Oct 2026 07:01:28 +0000
Manifest this update: Thu 29 Oct 2026 07:01:28 +0000
Manifest next update: Fri 30 Oct 2026 07:01:28 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: W/3aphFA52JhGU9xJUAi5nG6koW2lwIIJYOjKes0Qeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:b4:fb:a5:29:a0:c4:96:97:3a:7d:e4:ed:d8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Oct 29 07:01:28 2026 GMT
Not After : Oct 30 07:01:28 2026 GMT
Subject: CN=3eefbe18acded14a2ac2b2a7a062b14750b8010d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:db:87:00:e0:c1:58:df:1c:c0:e9:a8:75:
d4:ae:17:f2:c5:26:a7:3f:26:50:3e:42:88:31:bc:
36:1b:3a:4e:79:1c:3d:21:62:b3:7e:0f:34:0e:b8:
93:db:b1:1c:fe:e8:76:b0:cd:61:f0:52:9f:d4:46:
ba:0b:2a:2f:cc:28:61:b8:66:c3:a0:58:8f:33:d7:
1e:14:ca:fe:b0:57:a1:07:b0:02:89:27:2d:b7:ee:
98:13:3b:73:0d:8c:76:6b:eb:44:2e:ce:9b:05:1c:
6f:a1:43:49:09:f1:7a:7a:dc:22:4d:b6:80:36:df:
9f:97:88:fd:85:14:22:38:b0:0f:bd:92:12:31:a2:
c0:7f:4f:00:29:51:ec:f6:ec:fa:fd:88:f9:96:28:
9c:e0:fc:25:b6:9d:a3:d4:fc:2d:3a:5e:5d:fc:05:
a9:10:1b:de:ec:82:35:b6:65:49:eb:26:e1:6a:2d:
0c:c1:74:19:23:25:f8:f5:98:c5:e0:60:93:05:c2:
20:80:a8:49:bf:26:c4:f6:a1:0d:24:ef:e4:9c:59:
48:d4:93:91:3e:7b:2e:09:3c:5f:c3:20:6f:28:b0:
48:7b:4e:b6:d7:8b:df:19:43:fe:87:74:ca:73:8c:
0d:f1:b8:9f:3b:57:52:4d:f3:9e:a7:49:f3:f6:60:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:BE:18:AC:DE:D1:4A:2A:C2:B2:A7:A0:62:B1:47:50:B8:01:0D
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f4:d4:4c:9f:b6:4c:b3:63:df:ca:03:d0:d6:63:89:d1:09:
46:54:5b:4e:35:9b:7b:33:7b:1a:5e:ff:87:e0:e2:95:e1:b6:
16:7b:99:d8:70:2b:9e:11:28:1e:86:04:46:2b:a8:3e:30:cb:
54:5a:d8:32:8f:8e:39:7c:a0:78:05:62:07:eb:0a:f7:40:50:
96:62:bb:95:e7:f5:e7:80:ff:90:0c:37:a3:52:80:f9:13:71:
81:37:a1:3c:da:7d:7d:2f:a9:71:bf:3b:b1:c0:0b:54:5a:28:
68:58:33:d9:c9:2e:ba:4c:51:ee:24:4c:c4:fd:b0:28:f0:89:
7c:0c:1e:f6:30:ff:8c:14:51:d2:27:ce:ef:24:5a:e2:75:79:
8e:c2:41:65:06:27:0f:35:7e:86:25:33:b0:f4:6d:62:08:c1:
c5:60:10:95:07:d4:b5:18:92:13:aa:e6:06:29:0e:9c:89:64:
15:25:bc:11:8c:d6:b8:f9:18:ec:f4:2b:68:52:82:5d:60:45:
bd:fa:8d:6d:b6:a4:6c:c6:ba:7d:7a:2a:15:49:3e:79:08:24:
ae:ff:71:fa:8c:a9:a8:f4:62:6a:08:32:84:f4:29:e9:66:31:
96:e5:84:f8:fe:76:cc:6f:c2:ff:7c:93:7c:1d:a5:fc:9a:d3:
f3:2b:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:07:59 2026 by rpki-client