Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: N9E91RoNUDkuNi+Gh4ZLBLkVz/v2ZB6ibfmJq1tLxNo=
Subject key identifier: 3F:D7:75:7C:B4:FA:C3:0F:BC:26:AF:23:A4:C6:AE:09:AD:6D:02:86
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 01A06E39E1C950D7ECE69CA4687B7B6F4C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 21:01:22 +0000
Manifest this update: Fri 04 Sep 2026 21:01:22 +0000
Manifest next update: Sat 05 Sep 2026 21:01:22 +0000
Files and hashes: 1: H5XIBQIDLJQjSp39OuEv8vt1cZ4.roa (hash: xpiWSsWy5a1LyppV6vCGdX0tXvaYKw/9ibIsF5wlKgg=)
2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: /aj+T5wK1Rl8Wd9RuOglsDtU1iWavB4Yeb6PgR0DmLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:e1:c9:50:d7:ec:e6:9c:a4:68:7b:7b:6f:4c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Sep 4 21:01:22 2026 GMT
Not After : Sep 5 21:01:22 2026 GMT
Subject: CN=3fd7757cb4fac30fbc26af23a4c6ae09ad6d0286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:10:67:e6:eb:23:e2:34:cd:ac:9c:66:2e:
a1:6b:7f:69:95:fc:38:82:e9:32:19:50:c3:3a:eb:
58:b9:5c:18:49:87:ab:90:05:c0:2f:79:a9:58:3f:
df:2e:28:b4:6f:0a:d2:70:7c:06:d1:59:50:3f:80:
b2:3d:3b:29:a1:f1:49:93:04:a8:00:88:e5:e3:bb:
79:6e:53:62:d8:71:03:78:d5:ee:0a:f8:d2:8b:21:
92:a9:a7:b9:92:a3:9c:8f:cd:0d:f5:04:84:92:26:
80:4f:bd:6e:a7:29:40:86:b7:a4:15:0e:47:ce:2f:
0b:0c:5c:65:2a:5c:94:80:b1:72:57:96:42:85:9c:
cf:94:67:7e:8a:58:91:81:3e:d3:eb:b2:a0:a7:e7:
b0:da:07:2b:70:6f:74:ec:a4:16:ae:87:4a:97:81:
24:94:e2:b2:00:b8:8d:a9:e2:8c:a2:6f:b1:49:63:
29:65:fe:17:1b:52:d9:36:f5:0b:fc:7a:ac:54:92:
a8:dc:c5:58:67:0a:6c:6f:b3:27:23:38:49:89:08:
5a:0b:68:1f:87:ee:b7:f2:62:8f:17:9b:fb:91:f4:
2a:9c:be:d8:0a:2a:38:e1:c7:c6:97:fb:8d:73:4d:
74:a5:f0:56:b1:da:66:b6:e8:35:97:ac:42:bc:f2:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D7:75:7C:B4:FA:C3:0F:BC:26:AF:23:A4:C6:AE:09:AD:6D:02:86
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:91:5e:78:34:a8:ad:5f:d1:6a:8b:22:04:dc:61:13:01:bf:
09:41:34:df:b8:52:89:36:0d:0b:7f:0c:5c:5d:a3:cd:b9:ff:
00:f7:12:c5:45:b7:fe:41:2d:d1:13:5f:89:cc:2b:0e:ef:2c:
32:18:90:5c:29:a8:d2:20:c3:9d:e6:72:a4:fd:74:4f:66:de:
e0:06:1c:0d:43:d4:c1:43:c1:c0:6f:6b:05:07:bc:1e:0e:70:
f5:af:cd:ee:1a:e3:60:7e:21:87:ea:01:d3:34:0e:2a:c8:be:
da:9e:03:a2:97:a6:82:50:3d:55:1b:de:e8:00:c8:c2:c0:6a:
52:7b:11:45:ac:27:5b:8a:2f:26:53:a5:68:09:06:6d:bf:ad:
99:c4:06:ff:86:30:8e:4d:28:33:9a:63:0f:47:bb:dc:b6:28:
5f:49:84:1e:0d:2e:07:7e:97:a4:e8:be:a0:2a:98:f6:26:6a:
8d:2a:3c:4a:df:23:d1:19:f7:3a:ab:be:ac:a1:76:d3:88:17:
0b:cc:e6:83:b6:26:d4:2a:b4:39:25:66:aa:db:48:bb:31:6f:
1b:5e:d2:6f:e0:7a:97:10:c6:92:32:3c:81:c4:5d:2b:f1:78:
9d:4d:4d:43:b8:29:27:f0:e8:25:88:b1:e5:5c:b3:d3:12:a8:
56:25:bb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:20:03 2026 by rpki-client