Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.mft
File: vCidlIWYSdzkILHYOyk4rhqOrww.mft (raw, json)
Hash identifier: yiU0g72i6/oy9HAJH+IZ5wKrTdyUG1/qtlXo5bu+iKQ=
Subject key identifier: A3:7D:8F:94:06:40:A2:21:9F:08:0D:E3:AA:33:33:2B:CF:06:1A:86
Authority key identifier: BC:28:9D:94:85:98:49:DC:E4:20:B1:D8:3B:29:38:AE:1A:8E:AF:0C
Certificate issuer: /CN=bc289d94859849dce420b1d83b2938ae1a8eaf0c
Certificate serial: 01A1401605D5FD7493E48F0875C8B5DE3019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCidlIWYSdzkILHYOyk4rhqOrww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.mft
Manifest number: 0B
Signing time: Thu 15 Oct 2026 15:02:27 +0000
Manifest this update: Thu 15 Oct 2026 15:02:27 +0000
Manifest next update: Fri 16 Oct 2026 15:02:27 +0000
Files and hashes: 1: MuytAvGWNi9csM1_efeOZzWcb7Q.roa (hash: h9qgjUGSCiHfaRG++Cer2xZE/EflnDPwe5zeLdCtZBY=)
2: vCidlIWYSdzkILHYOyk4rhqOrww.crl (hash: sGFZQTvP8e9+IZqDUIHHw2/Pn1juKO8c/Hje+ludDKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCidlIWYSdzkILHYOyk4rhqOrww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:16:05:d5:fd:74:93:e4:8f:08:75:c8:b5:de:30:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc289d94859849dce420b1d83b2938ae1a8eaf0c
Validity
Not Before: Oct 15 15:02:27 2026 GMT
Not After : Oct 16 15:02:27 2026 GMT
Subject: CN=a37d8f940640a2219f080de3aa33332bcf061a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:4f:0b:9e:d8:67:85:b0:c7:bb:f5:c2:c8:
03:55:ba:e6:06:b0:4c:5e:ca:d1:58:81:6e:7a:f4:
35:a3:24:5d:8c:ff:88:cd:74:02:6a:8c:7e:05:dc:
db:b8:da:2a:28:87:71:64:f7:46:a9:d8:c0:59:0d:
05:43:ac:5e:32:70:32:29:d0:91:60:c0:04:a5:6d:
de:0e:12:9b:c9:55:f2:56:68:59:51:3f:18:9e:4b:
28:3e:3e:05:2c:3e:87:3e:34:f6:d4:8d:38:0c:a1:
ba:0e:68:a3:f4:c4:6f:4f:fe:90:6e:66:f0:ee:f8:
08:f8:ff:06:64:2a:3f:ac:92:a0:fb:e1:8c:ae:9a:
a7:17:51:48:03:7c:69:f1:1b:65:dd:41:97:6c:34:
4b:0e:60:35:7e:33:b3:ae:8d:e8:7b:15:96:eb:b7:
9a:8a:3d:e0:c3:fd:7f:74:7b:bb:eb:68:30:b8:a7:
d0:ba:5b:46:57:7e:ad:44:cd:40:00:0d:39:30:7b:
f8:a8:04:76:54:5a:b6:4b:ef:82:bc:56:8d:61:ee:
1a:4b:62:d5:fb:33:64:fb:42:48:4f:ec:8e:ab:da:
e7:80:d3:6d:6a:dc:10:65:69:13:65:fb:e7:86:f9:
a9:ea:ca:fd:31:04:30:3c:63:bb:88:07:ba:e1:19:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7D:8F:94:06:40:A2:21:9F:08:0D:E3:AA:33:33:2B:CF:06:1A:86
X509v3 Authority Key Identifier:
keyid:BC:28:9D:94:85:98:49:DC:E4:20:B1:D8:3B:29:38:AE:1A:8E:AF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCidlIWYSdzkILHYOyk4rhqOrww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cd2c8-34c3-4752-b629-94205f670c95/1/vCidlIWYSdzkILHYOyk4rhqOrww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:81:37:46:0c:3f:7f:97:88:dc:93:d5:0d:26:06:02:ef:
e6:ca:d6:9f:20:c1:b7:0e:4a:80:87:b0:33:b5:89:b8:b1:74:
d8:2c:31:76:4d:d7:9f:22:ef:30:7b:d8:8a:63:15:e9:6a:f7:
b9:7b:b2:8e:95:64:b9:92:ab:c0:dc:70:96:f1:bc:ab:7f:0f:
e8:b7:73:92:74:b3:cf:ed:8b:74:80:23:b3:e9:c2:8c:88:74:
ee:ca:93:e0:e7:cb:ee:e0:54:d9:30:47:97:17:00:f3:ad:f1:
98:92:6c:40:c5:9d:e4:53:5d:5d:04:02:e8:05:42:ca:32:6d:
1f:8e:5b:bb:b1:6d:e4:55:ca:13:58:b2:2e:ee:cc:6d:bb:07:
fa:33:50:cf:ef:52:09:f2:37:00:85:52:c8:bf:90:48:48:d1:
50:c7:00:1c:a8:3d:c1:8d:f1:2e:9f:e6:b8:42:94:64:fe:0f:
01:72:53:fe:18:54:f0:1c:b5:a0:e9:46:7a:91:e8:49:0e:f2:
76:b9:fe:93:d0:5a:a8:ba:7c:15:24:67:ac:06:d9:37:32:11:
a4:7a:4d:f7:ba:67:42:7e:e0:af:68:23:46:fa:67:2e:74:e7:
4b:38:48:81:fa:ea:d2:60:f0:30:73:eb:3c:13:92:a5:5b:ad:
dc:10:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:00 2026 by rpki-client