Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: dD7ggs+5Z7agslHPoELEjBWHrSNOEs3o8DTxbSfKFl8=
Subject key identifier: FA:AE:66:D3:CD:84:B2:6E:E0:8F:6B:B2:6E:BC:28:4C:83:78:A2:09
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 01A15F9F7B52DD3A2D39CEB4B05503CAA091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 1AB8
Signing time: Wed 21 Oct 2026 18:00:49 +0000
Manifest this update: Wed 21 Oct 2026 18:00:49 +0000
Manifest next update: Thu 22 Oct 2026 18:00:49 +0000
Files and hashes: 1: H5XIBQIDLJQjSp39OuEv8vt1cZ4.roa (hash: xpiWSsWy5a1LyppV6vCGdX0tXvaYKw/9ibIsF5wlKgg=)
2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: wvoOEcqC7VAkP+/W+kgmqwB2Zus2rnyeS4il/oVZ6Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:9f:7b:52:dd:3a:2d:39:ce:b4:b0:55:03:ca:a0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Oct 21 18:00:49 2026 GMT
Not After : Oct 22 18:00:49 2026 GMT
Subject: CN=faae66d3cd84b26ee08f6bb26ebc284c8378a209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:9d:8c:7e:f6:04:c3:7c:1b:db:b8:7e:99:
bf:9d:82:fd:f8:48:4c:7e:46:51:d1:46:59:7f:f2:
d7:90:fe:e2:e3:4d:3b:3f:9f:8b:32:42:f2:ec:8c:
3c:b0:cd:d1:20:8f:3e:b0:87:ee:ed:27:15:49:ec:
a0:06:7f:d6:72:be:29:d2:8c:c6:d0:7b:bc:94:e2:
c0:4b:a0:69:ee:c4:aa:62:33:50:99:ed:c9:2b:66:
58:55:f5:fa:15:c8:a9:60:20:27:c4:5a:d3:22:46:
a6:8d:c7:09:82:ff:35:c5:09:0b:c0:d4:83:20:f5:
8c:fa:4d:8a:31:3b:30:14:d0:d4:da:54:87:e4:e0:
be:e2:cb:c3:4d:31:be:ea:dd:42:18:a0:0f:d7:13:
cf:70:5c:53:0c:e1:32:e9:8a:d8:f2:be:db:dc:6f:
b9:78:f4:24:85:c0:0c:c9:03:2c:3d:a6:bb:c5:a6:
5b:6d:57:40:1c:55:87:b9:3f:bd:7a:6d:05:44:cf:
23:9d:c6:b9:b6:5a:fc:87:c6:9d:e6:93:3d:5c:86:
67:a8:41:ec:9b:1d:ec:7d:bc:16:d2:a5:99:f4:79:
cb:01:b1:85:a8:be:29:d9:5c:44:5a:6c:dc:fd:8f:
1f:74:58:8f:23:1c:13:11:97:26:ec:0c:82:5f:fc:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:66:D3:CD:84:B2:6E:E0:8F:6B:B2:6E:BC:28:4C:83:78:A2:09
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cd:d2:01:69:cd:de:89:70:aa:aa:8c:53:52:a2:c5:45:24:
80:a5:bf:46:8e:d3:d0:9b:b4:b1:c8:8c:e6:79:4b:49:fb:ef:
72:be:97:0d:de:41:9e:a1:ac:9b:ce:ee:c9:d5:87:1d:43:7a:
ae:d0:95:80:ba:12:ba:be:25:f0:57:6c:7f:92:a0:20:91:22:
d0:90:28:e6:a9:7b:ed:47:80:83:81:da:11:45:bd:c2:e0:94:
f8:4e:38:56:fc:fe:47:20:7f:3e:6e:75:b9:92:48:a9:6b:e3:
ce:1b:6a:61:2e:ef:fa:7d:9d:5f:a0:6f:8e:26:5a:31:d9:a1:
ae:2b:7f:76:ad:47:d6:4c:4b:e5:bc:01:b5:58:f0:ab:2b:17:
69:e4:05:9b:53:06:07:90:64:ef:85:f7:82:0a:b7:b9:0e:ef:
f8:d6:7c:17:4c:e3:89:2d:f9:07:27:c1:df:5a:90:b6:93:67:
5c:02:77:b9:70:e9:1b:80:e1:a8:ac:37:c6:1d:ed:85:dc:1c:
a2:4f:06:55:cc:c1:78:dd:85:8f:6f:4a:49:e4:60:bd:c3:90:
41:f4:02:8c:83:3a:e8:58:1f:28:21:fa:df:b5:38:0f:93:51:
13:c4:54:60:e7:96:8f:49:a3:fa:f2:52:f2:f6:9c:c6:be:3f:
6e:b2:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:55:38 2026 by rpki-client