Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: kTKxMqtFxj05DUCPE9hiiffg6YHE1JCJ3vm/OwZZ4ko=
Subject key identifier: 0F:38:48:9D:4A:82:9D:00:23:6A:91:6F:1A:E2:91:0D:97:37:56:D2
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01A171A606ADB4AFC6405141BFB21D69C9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 1AC1
Signing time: Sun 25 Oct 2026 06:01:08 +0000
Manifest this update: Sun 25 Oct 2026 06:01:08 +0000
Manifest next update: Mon 26 Oct 2026 06:01:08 +0000
Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=)
2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: +eP2tfe/WnfW9G4mKoi3CwYFbmaL6s1e+O/DPF8GFoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a6:06:ad:b4:af:c6:40:51:41:bf:b2:1d:69:c9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Oct 25 06:01:08 2026 GMT
Not After : Oct 26 06:01:08 2026 GMT
Subject: CN=0f38489d4a829d00236a916f1ae2910d973756d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:ee:3f:ac:88:22:09:f3:f7:a0:64:04:7e:
cf:59:c9:5c:5d:78:56:8d:67:2c:f3:26:f6:4d:1c:
90:36:e8:76:e8:fa:e6:91:14:c3:f9:96:c5:94:7f:
7f:ae:c9:9c:db:bf:38:e9:fb:88:10:81:ec:f6:e9:
fb:7d:74:50:d2:ee:e0:a9:f4:17:b9:64:df:2c:24:
98:1e:58:27:d7:eb:fe:df:62:5a:d4:b8:b1:52:28:
63:d8:f3:10:8f:02:c5:9f:ef:15:ae:2d:69:6e:7e:
06:79:61:72:fa:c0:d5:43:16:ea:d8:84:32:e2:2b:
3c:b5:89:2b:d4:04:00:3a:e8:5b:21:fa:c2:2b:55:
0d:56:c9:4a:55:74:5a:16:ca:6b:37:87:fe:f8:42:
52:28:ce:d5:95:35:42:7a:65:1c:40:a2:4a:12:e7:
f6:66:27:d9:5a:91:d8:4c:ec:2e:0a:8f:6c:3d:e8:
1a:cc:48:39:14:bc:7c:d6:9d:01:7a:64:2a:8e:78:
b7:dc:fc:1d:7c:34:2e:f5:45:7b:2a:cf:a9:d9:b9:
2a:b5:9d:fe:2b:67:07:b4:6c:d4:fb:d5:98:aa:32:
ae:24:e6:b0:e0:67:02:ed:08:ec:9f:9e:f6:1f:9b:
08:4c:f2:4e:a7:96:13:7d:21:95:7f:8f:83:06:8c:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:38:48:9D:4A:82:9D:00:23:6A:91:6F:1A:E2:91:0D:97:37:56:D2
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:78:94:a5:db:70:c2:56:6a:5f:d8:56:49:74:65:11:67:1f:
fe:8e:1d:7f:5f:9d:be:03:33:7e:c9:fb:4d:fb:9b:b5:fe:f9:
1a:b8:54:45:48:49:97:26:51:bb:3a:3d:e4:93:97:ea:f7:83:
0f:9c:be:71:6a:f8:c1:9f:95:e5:41:fd:07:16:bf:3d:ee:af:
2f:ef:60:ed:5b:fa:2b:33:a2:da:d3:66:7d:3a:d6:23:65:08:
6a:d7:e4:2f:08:74:f8:a3:7b:46:32:4d:0b:91:d7:6f:3b:58:
85:77:aa:2f:81:d7:6b:3f:02:bc:ca:93:e3:c4:c6:d5:d7:a3:
82:71:47:12:0c:4a:86:37:4f:20:ce:9e:cd:77:da:44:58:f2:
db:d7:78:c0:0a:c2:d5:13:c3:4d:ec:aa:8b:84:a9:27:15:8d:
21:8f:50:0e:b6:cd:48:da:ac:0a:0a:30:e0:28:28:0c:1c:3f:
89:e6:47:95:0b:12:e1:68:b5:ab:78:14:09:51:34:70:bc:63:
02:69:23:83:cc:a6:f7:2f:af:39:ff:3f:a6:93:af:d6:a1:ca:
13:56:88:ce:ec:8c:54:f0:c0:94:0c:38:cc:22:bd:ff:46:39:
38:92:d5:cb:8a:52:f6:1b:28:81:b1:4c:ed:af:11:dd:0f:88:
5d:45:6f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:37 2026 by rpki-client