Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: JlN+YXrtSP2A9gt4ixj+HulpKbFNebkGE60eVk6gBFw=
Subject key identifier: 2F:B2:7E:4B:3D:B4:5E:BB:40:F7:A5:A9:23:47:30:49:F3:0D:98:F1
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 01A17EBD42FE647F998A3F021A235E5EFC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0EC7
Signing time: Tue 27 Oct 2026 19:01:34 +0000
Manifest this update: Tue 27 Oct 2026 19:01:34 +0000
Manifest next update: Wed 28 Oct 2026 19:01:34 +0000
Files and hashes: 1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: miMiuP2ehktGoOyd9B6bk7oNp/em95yNZsvvZZKQdL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:42:fe:64:7f:99:8a:3f:02:1a:23:5e:5e:fc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Oct 27 19:01:34 2026 GMT
Not After : Oct 28 19:01:34 2026 GMT
Subject: CN=2fb27e4b3db45ebb40f7a5a923473049f30d98f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:de:ae:87:a7:ca:49:32:72:95:01:92:ea:
d4:4b:fc:16:98:cd:ba:76:c7:44:fd:34:f6:6b:f3:
44:66:7e:e1:fd:b8:39:0a:4b:38:2d:bd:43:c1:7b:
7c:cb:52:cb:9c:61:17:7b:ac:ed:54:74:f3:88:2f:
8d:c2:83:59:e2:43:85:6b:93:7f:a0:f1:ae:15:94:
5f:91:63:9e:f5:b3:77:57:6c:53:e4:d7:4d:16:a9:
1e:91:f5:d5:e1:b9:3d:50:f5:9f:84:b8:72:9d:cf:
09:1f:f2:ed:7a:c7:a1:12:02:11:4d:2a:c4:a5:d0:
62:96:e6:af:de:5d:fb:7e:1b:09:88:7a:96:f5:dd:
a7:4c:35:1b:40:02:38:2c:fa:87:8b:37:45:49:b3:
86:6d:51:85:11:a9:2e:4f:38:ad:d3:da:c8:5c:34:
63:d3:58:fb:31:ad:c9:0c:f8:e5:eb:2b:d2:19:85:
16:6f:c8:77:d2:a2:3e:e2:81:9e:bb:6c:bb:36:92:
67:fd:01:16:01:5b:61:d6:68:d3:a3:a4:ad:23:49:
9c:ea:f1:40:d2:c4:5d:f7:de:4e:30:c5:a1:28:62:
42:94:b8:72:ba:ef:90:3f:3d:fa:4d:4e:73:2f:b9:
63:13:81:05:5a:83:1c:65:e3:01:10:9b:2a:af:cd:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B2:7E:4B:3D:B4:5E:BB:40:F7:A5:A9:23:47:30:49:F3:0D:98:F1
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6a:be:72:b4:af:dc:71:1f:44:f6:30:61:cb:df:86:ed:f3:
75:a7:e6:c9:5f:16:3d:95:7b:11:d6:3c:91:93:21:6c:eb:b5:
03:ef:93:31:3c:8e:08:c4:9f:33:a7:c5:ce:5f:72:de:86:cf:
79:ac:81:e0:15:de:6b:8d:0f:61:99:fe:85:ce:1f:c9:77:3c:
53:ea:a5:98:7a:4b:d5:d5:e6:59:e3:77:00:f0:d6:04:d4:5c:
cc:d6:78:2e:0f:5f:93:f0:b9:ec:2a:c9:c9:69:0b:68:5c:28:
84:9b:12:2b:fa:85:3b:8b:12:dd:e1:ed:7d:0a:3d:47:48:4f:
8f:fa:d6:84:a1:da:a1:a4:a4:89:4b:ef:31:ee:b8:89:74:f2:
14:fd:c0:5a:ff:b0:63:68:d7:65:65:7a:3a:70:c5:1c:45:09:
8f:ba:c5:4b:b1:d7:f7:6d:6d:2f:a4:40:14:a0:28:f5:16:57:
ed:1d:4e:7b:0c:72:eb:d1:7f:bf:e6:1a:96:aa:88:71:b6:95:
6c:de:e8:38:e6:8c:e4:69:3f:85:dc:73:86:ac:2d:2d:0f:6a:
f5:4c:6a:af:54:e2:ee:10:b2:6d:60:53:32:b8:35:1f:9f:d7:
e0:05:d3:06:5d:08:3e:ee:fd:64:35:cf:8c:04:72:5e:7c:08:
b6:2e:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:34:13 2026 by rpki-client