Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier: Hd4AORxVi3Vuek0o2CGh7muY/9FVJwA1psd2Y1AYeE8=
Subject key identifier: CF:FF:F4:8F:2E:E6:BA:7D:1D:11:6A:A4:3D:00:D1:77:F7:28:59:CB
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 01A1287AD9C4B9E8ACF20872654A80C4E753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number: 1AA1
Signing time: Sun 11 Oct 2026 01:01:42 +0000
Manifest this update: Sun 11 Oct 2026 01:01:42 +0000
Manifest next update: Mon 12 Oct 2026 01:01:42 +0000
Files and hashes: 1: 2Vs8KUJ3ARsfzl5aenkyGCSy_lo.roa (hash: 8dxvcB3TSqVgvjogy5IQYglbYDvwwLxpsQ+qsiWMSlQ=)
2: 8YICkcy5MxdkFP4Ulv27x-Ip2YA.roa (hash: FjVwt2RS+W3bJxzVk95vARiv6Ttn05j7+22iJ3Ku7Y8=)
3: rGOh0aBSaJUcTjStlHDAvBi9GYw.roa (hash: 8mVUWl2qPU5MUsEWDFtGCEbrM6SO1p6D449zgLNKtAU=)
4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: bJVLRGNghYj9EXXC0u+cPKMGgixi6Qhco1yg7MXYOJo=)
5: wC3BpEB8qdaKpa6CpGZXp4T9slk.roa (hash: IXG8fhcHEZ3Xyts0Msy3p2RYoLeCdjHeJU1oF2Pw3VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:d9:c4:b9:e8:ac:f2:08:72:65:4a:80:c4:e7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Oct 11 01:01:42 2026 GMT
Not After : Oct 12 01:01:42 2026 GMT
Subject: CN=cffff48f2ee6ba7d1d116aa43d00d177f72859cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:35:95:eb:45:22:b1:71:b7:5c:cb:d2:70:
dc:8b:a1:ca:7f:96:08:df:0b:93:e2:04:a9:0d:41:
35:32:34:02:96:88:70:91:79:0e:17:b2:0d:02:77:
b1:b3:76:12:7d:e1:0c:2c:84:59:14:cf:61:c1:20:
88:d6:63:d6:2f:e6:a4:b1:1b:e0:79:36:25:e7:f6:
c9:db:e1:8f:8e:28:b0:45:7e:f5:a4:3b:9a:0c:d0:
ea:48:f5:0c:bb:a6:95:0f:21:d8:f0:04:07:6d:26:
11:4e:23:a0:ba:f7:6f:06:f0:40:c0:3b:e0:fa:fd:
f0:4e:8b:d2:a1:c3:ff:f9:9b:9f:1e:4e:26:a7:a2:
94:90:07:d3:39:bd:ba:1c:12:06:04:3a:49:d3:79:
5a:36:bb:b1:00:3a:e7:5a:cf:66:e8:47:6e:c4:93:
6e:56:8b:c8:d7:7d:52:5a:19:86:d3:88:24:05:0f:
e2:db:ae:98:16:2d:40:2e:20:68:96:2e:71:a3:11:
9a:74:81:8e:cd:1e:c5:4f:ec:ec:12:29:3f:ef:21:
cc:20:cd:7f:24:41:af:68:0c:a0:3d:63:fc:30:b9:
65:f5:8b:5d:91:53:b1:c8:df:b9:7b:09:be:cd:f2:
03:c8:84:96:19:a9:3e:49:02:41:ef:9a:b8:fc:ab:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FF:F4:8F:2E:E6:BA:7D:1D:11:6A:A4:3D:00:D1:77:F7:28:59:CB
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ad:8a:f2:4c:d1:9d:14:8b:1c:b4:f1:ee:f1:4d:29:ce:c0:
e9:7d:89:41:1d:9e:ef:37:ed:d4:e2:89:b9:b2:82:d0:78:ae:
2a:9a:37:a7:87:4a:7f:27:61:ea:ec:81:aa:a7:8b:0d:ad:c5:
74:f5:3b:2c:55:14:82:e6:49:18:22:f5:d7:b8:3d:96:3f:04:
15:40:2e:4d:c1:2e:62:f3:df:8c:17:fe:37:f7:66:d1:b8:b3:
b5:9a:d2:c7:7f:d5:f0:0a:d2:a4:31:32:b5:66:83:ab:a5:e7:
27:ef:dc:df:7d:b6:aa:cd:9b:fb:6a:c6:67:8d:66:69:41:d9:
88:a6:7b:e5:dd:ca:67:da:74:dc:94:9c:60:e7:43:f3:06:de:
d3:5c:da:03:70:72:b5:84:02:bd:8a:e6:dc:91:35:79:27:64:
64:a2:73:a5:f7:2d:c7:bf:cb:4e:ef:bd:a1:ee:b0:bc:5d:30:
36:66:f8:d6:e6:b0:44:b5:92:e1:7e:80:f2:b8:7c:36:67:d2:
52:2f:24:e8:9a:b5:4e:a8:4f:f3:e6:b4:52:b6:f8:29:9f:78:
55:b7:85:05:27:b7:da:fc:30:0b:9d:e2:4a:5c:46:db:66:f1:
7f:e8:57:83:94:62:9f:ec:ef:f2:5c:ac:34:cd:c3:6c:13:f6:
91:84:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:21:03 2026 by rpki-client