Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: 3TxXCwElA7+JDUK/2iGVwqGX08QkZURyVsacNuwmq3s=
Subject key identifier: D7:E5:7E:AF:1B:2D:1F:B2:39:0F:76:EB:29:70:7E:C4:84:F0:4A:E3
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01A0257BFAC6C1998D6A59E574DF7DE7340B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 1A15
Signing time: Fri 21 Aug 2026 18:01:17 +0000
Manifest this update: Fri 21 Aug 2026 18:01:17 +0000
Manifest next update: Sat 22 Aug 2026 18:01:17 +0000
Files and hashes: 1: QOx2LcItYAde8Bu7yyYezAd_b5U.roa (hash: recLbl2iES5/0aXRvjtkzbHI5bXaE/LjpnXC8P4lC98=)
2: QcKzyCOMPTjAzdtEHWSZIQPXWTY.roa (hash: q6REhdk2/z8f63MlyAEiLr/0oQ0zIK2tSS3WmI/QIxA=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: 4LkFbTZpPj1py8ibetUdWf06qml0PleQf/JGtIrjvBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:7b:fa:c6:c1:99:8d:6a:59:e5:74:df:7d:e7:34:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Aug 21 18:01:17 2026 GMT
Not After : Aug 22 18:01:17 2026 GMT
Subject: CN=d7e57eaf1b2d1fb2390f76eb29707ec484f04ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:24:c0:6f:9a:29:94:e1:58:55:fe:4c:a5:
ee:ae:cd:89:25:a6:e4:35:1d:f0:9e:ec:ea:ba:ca:
65:22:67:39:1e:1e:6f:00:64:34:b3:91:b4:b3:9d:
71:22:2d:25:2b:09:9e:16:74:50:85:18:20:10:4b:
07:b7:d2:cc:13:de:68:e3:b0:4c:3b:ab:3a:71:fc:
65:bf:92:c6:ed:e8:c1:f7:fe:1a:a7:87:05:84:ac:
5d:2a:12:a0:5e:ca:a9:11:dc:33:43:16:6d:80:58:
0e:c2:46:82:c3:98:5b:f4:49:9c:26:f5:54:ca:b5:
53:8c:58:ff:64:c8:9b:d0:7e:31:ae:c8:ea:2b:60:
c6:60:74:00:cc:8a:ab:10:0b:ee:92:cc:3f:d8:8b:
90:38:ca:e2:5e:42:5b:f4:c5:84:2d:3c:51:ef:71:
5b:fe:73:49:7b:44:cf:ed:54:4f:40:35:34:d7:cf:
d7:4f:99:81:57:74:73:21:26:ed:02:38:4d:f9:8b:
56:e9:89:73:b1:5c:e9:0b:1c:a1:64:84:03:ed:cb:
44:da:8d:4b:e5:15:6c:3e:36:3e:c8:6a:f7:34:99:
de:01:49:cb:5b:2c:8d:1f:62:f9:58:67:d2:4a:99:
81:a6:b3:16:45:64:58:f8:d9:66:98:0f:11:f4:8d:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:7E:AF:1B:2D:1F:B2:39:0F:76:EB:29:70:7E:C4:84:F0:4A:E3
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:85:6c:c4:3a:3e:e5:d8:c5:14:a8:fe:59:c2:bd:2d:7d:2e:
91:a1:82:e7:9b:f7:42:32:3c:74:ac:70:b0:52:76:8e:84:0a:
44:01:04:38:bc:06:ea:a9:3e:07:25:a5:c5:5d:96:9f:df:66:
d6:91:51:c1:4a:30:fd:01:83:be:34:c1:73:47:b4:02:7c:94:
c4:4b:4f:8b:e3:1b:06:c0:a3:81:27:0f:a9:e1:f0:88:a8:93:
d2:d8:35:85:24:ce:f8:26:84:1c:f3:aa:35:12:49:7d:52:49:
72:02:1e:98:fb:0a:82:36:c0:09:a5:33:9b:35:c8:cb:d9:e9:
b3:83:49:c0:b8:c4:cb:5d:e6:11:c3:ed:1b:30:f7:04:e2:ac:
b4:67:36:6a:80:30:25:3c:b4:07:9e:2e:b9:77:c0:8e:d2:a1:
71:2e:df:20:90:20:56:e7:3e:ce:2a:82:fa:62:63:7f:43:f4:
80:5f:62:53:6e:60:90:3b:f3:f6:ed:24:f7:59:b9:a3:dd:74:
c0:23:b1:9b:6e:6b:21:1f:d1:06:d8:f7:4d:3f:3c:eb:df:c5:
51:7b:b2:32:11:63:90:05:5a:d6:7e:f9:14:29:a2:f4:d2:7e:
69:73:03:30:95:a7:0b:81:ba:9c:3e:30:7f:48:0b:3e:8e:19:
65:6e:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:33:59 2026 by rpki-client