Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: 9BAbyXDTyyaFnPbbwS40mDcmDSiXBslFJPjJOzGz9io=
Subject key identifier: BF:E2:EB:EE:0F:AA:B9:73:59:FE:9C:E6:34:72:6C:BE:83:97:FF:8B
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 01A1618E0F77F5F03C7AF2E5A5C0F3528E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 1AB9
Signing time: Thu 22 Oct 2026 03:01:02 +0000
Manifest this update: Thu 22 Oct 2026 03:01:02 +0000
Manifest next update: Fri 23 Oct 2026 03:01:02 +0000
Files and hashes: 1: H5XIBQIDLJQjSp39OuEv8vt1cZ4.roa (hash: xpiWSsWy5a1LyppV6vCGdX0tXvaYKw/9ibIsF5wlKgg=)
2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: +jiIgjIfUSUgeOmOQkcTR3KrL/yX3O3v2E+6BguqBCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:8e:0f:77:f5:f0:3c:7a:f2:e5:a5:c0:f3:52:8e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Oct 22 03:01:02 2026 GMT
Not After : Oct 23 03:01:02 2026 GMT
Subject: CN=bfe2ebee0faab97359fe9ce634726cbe8397ff8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:51:d4:d7:9e:c2:fd:0f:4a:3e:8c:d3:a5:
17:82:79:fc:d7:20:cd:96:45:5d:4d:a8:3d:af:a3:
cb:de:88:26:21:e4:ac:78:f7:6d:88:c3:a4:e5:b2:
bf:35:83:b3:49:0b:a6:db:fa:58:be:bd:00:08:bc:
17:54:08:46:96:a0:a6:a3:40:5b:63:da:82:a5:aa:
67:19:47:65:ab:e8:b7:1e:f3:f8:dc:2a:fa:7b:6b:
19:83:df:b0:0a:63:a3:0c:92:3f:c5:c8:a9:af:1e:
15:ec:72:a9:21:5f:a5:ef:cc:94:15:3d:d3:a8:ea:
8a:fb:ab:26:d9:46:0f:ec:08:9b:19:fa:39:3d:56:
af:d6:60:e8:2a:79:2c:5a:0f:29:1e:22:d2:00:f6:
6d:b4:2d:46:d2:bc:18:a8:21:46:7c:f7:51:0a:5e:
7c:53:41:84:42:96:ee:95:67:a3:a2:be:85:e5:19:
d7:a8:51:78:6f:6b:ce:b6:ea:f8:5d:22:51:5a:0b:
f4:89:9c:46:84:f7:b3:ae:86:89:25:ae:18:3f:52:
b0:12:10:4e:fb:4c:37:e6:66:99:7c:07:f6:92:db:
1c:cd:62:22:bd:05:e1:2c:e0:b4:7d:0a:81:64:b3:
87:2d:cb:83:9b:50:c3:d4:85:1d:88:33:05:9c:cd:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:EB:EE:0F:AA:B9:73:59:FE:9C:E6:34:72:6C:BE:83:97:FF:8B
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f0:20:c7:15:c9:64:2b:0c:a1:c3:4b:ea:bf:39:02:c9:25:
6b:9a:04:16:ad:ef:16:f4:91:74:86:95:f1:96:aa:a7:ca:8d:
ed:ee:38:62:ca:60:84:cc:00:cf:af:79:15:35:f4:1a:c3:f7:
a3:c5:b4:35:13:77:5d:a2:ad:ff:6a:61:19:5d:f8:d6:f1:c1:
a8:58:fc:5c:cd:2a:49:55:64:14:e0:c7:3c:13:93:bc:62:1d:
d4:c1:3e:2f:1b:a4:bd:80:2b:e7:56:d4:10:fd:b5:96:87:87:
6d:c3:2a:4e:11:fd:da:9e:c2:3a:f9:d5:f7:17:d9:bd:7f:39:
8e:65:f4:bb:87:03:83:34:c1:81:29:25:37:ed:61:44:af:16:
6d:55:aa:43:8e:1b:cb:c2:e6:94:9e:7e:14:d1:16:65:a3:6f:
a0:b3:4f:80:c2:80:af:3f:b1:b3:99:74:5c:e1:48:9c:39:57:
a2:88:03:cf:4d:90:cc:da:7d:78:9c:b3:03:81:23:00:31:81:
be:3e:95:c0:57:76:a6:8c:8b:23:22:36:29:75:84:eb:4f:a8:
6c:4f:48:fd:c0:6f:aa:4f:a2:47:be:e5:84:e6:ca:d6:20:bb:
16:15:0b:4d:ea:8c:08:7e:a3:eb:d7:bb:c8:f3:f2:66:2a:fc:
2d:78:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 07:41:00 2026 by rpki-client