Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: ZzBvtq0TwTNOdAgMIzxk7LgPRevs+bI/Hy8cP5iBrPk=
Subject key identifier: 50:42:1C:3B:EC:00:5A:76:74:8F:12:D0:14:74:53:A4:7A:63:4B:B2
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01A1569D26AA82D7D96797CF16EB962494A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 00:01:41 +0000
Manifest this update: Tue 20 Oct 2026 00:01:41 +0000
Manifest next update: Wed 21 Oct 2026 00:01:41 +0000
Files and hashes: 1: QOx2LcItYAde8Bu7yyYezAd_b5U.roa (hash: recLbl2iES5/0aXRvjtkzbHI5bXaE/LjpnXC8P4lC98=)
2: QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa (hash: q6REhdk2/z8f63MlyAEiLr/0oQ0zIK2tSS3WmI/QIxA=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: AwWnxNqfIK20Z3O1TDybp4hptEVDpNi1PM5NOXty+9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9d:26:aa:82:d7:d9:67:97:cf:16:eb:96:24:94:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Oct 20 00:01:41 2026 GMT
Not After : Oct 21 00:01:41 2026 GMT
Subject: CN=50421c3bec005a76748f12d0147453a47a634bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:24:77:3d:f2:11:f9:16:f1:87:dc:c3:3f:
a4:5d:a4:93:2a:ce:ec:20:dd:cc:19:30:11:0d:04:
cd:e0:54:61:78:99:63:3b:6d:83:a2:c4:8f:33:6c:
00:13:7d:84:d8:d0:95:d6:66:80:28:25:10:1d:00:
70:f0:7e:21:7c:f0:0e:e3:e2:78:d4:95:2a:49:cf:
bf:12:8c:9a:da:2b:d0:89:8c:41:e3:b2:36:4b:a0:
1e:86:8d:fc:db:20:89:cf:05:e9:ca:8b:31:ac:5e:
33:91:f8:50:a9:44:3d:28:3b:b2:22:6e:6c:29:41:
03:44:66:73:ff:f3:2c:62:d2:73:4f:89:0c:d3:e4:
bf:f4:e9:12:ed:40:1e:47:a7:c7:46:97:75:89:3d:
21:ce:7f:4d:7d:ac:5d:2e:da:f8:c9:ca:32:21:41:
2a:46:85:8e:1f:e1:6f:93:22:db:02:8a:1f:ef:b7:
06:79:90:75:ea:d2:de:84:b6:fd:07:86:c0:3a:f4:
80:b5:10:76:54:04:df:17:98:9f:47:4c:f4:01:85:
e0:22:41:6b:a3:24:3f:49:45:0c:46:ff:c8:db:74:
db:ba:6a:95:57:2c:9c:65:df:08:7b:02:40:f9:0b:
8b:ff:ec:c6:53:d1:c8:72:4f:26:93:3a:b1:78:4b:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:42:1C:3B:EC:00:5A:76:74:8F:12:D0:14:74:53:A4:7A:63:4B:B2
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4b:f4:9c:b5:26:7e:44:89:fb:9b:6e:48:b2:f9:33:bb:d6:
8a:4e:31:4f:cc:84:c7:1f:94:29:32:f2:af:aa:15:84:1c:81:
2c:b7:86:91:e1:71:5f:b7:19:cf:e4:92:0c:d5:e7:47:f7:3b:
07:80:f4:d3:b1:7b:5a:9d:61:73:7d:4a:8c:f4:0c:c3:bd:ea:
76:cf:65:87:c8:42:f2:8e:6f:4f:f2:eb:88:2e:c4:d1:6b:50:
33:a0:95:23:14:09:98:e3:5d:65:bb:f0:74:e3:23:58:c6:bb:
8a:83:89:35:b1:3e:af:53:02:a2:7f:8c:8d:97:0a:21:3a:72:
77:ca:7d:e6:6b:f3:ba:0c:6d:ff:4c:ac:a3:31:1d:f9:bc:c8:
8d:a0:a5:2a:70:f9:71:76:dd:e4:98:a6:4f:a4:ac:78:c5:69:
34:1b:20:8a:44:f2:43:df:2a:11:31:74:a8:4e:19:2d:0a:ff:
a7:62:54:04:29:bd:45:ca:52:94:f0:54:60:f8:c9:4b:cb:0b:
a0:77:1f:b3:a3:2b:7d:6b:50:08:ae:04:18:40:8b:06:f3:57:
6c:b0:72:3d:35:39:71:68:d7:73:db:e4:dd:a1:c2:5a:a8:e8:
c5:38:0f:69:aa:be:e9:03:01:75:7c:f3:eb:53:9a:28:a4:de:
fe:8b:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:42:56 2026 by rpki-client