Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: MwCE3zcaJNKVhoQWbXqAF3twOSE6F6QWJBpF+hum4Qg=
Subject key identifier: 1F:94:80:50:43:9D:DE:23:4C:05:99:EC:D6:E8:05:93:A8:1D:2C:47
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01A0889EB56A9B8863447DD6AE42576E3BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0ED3
Signing time: Thu 10 Sep 2026 00:01:37 +0000
Manifest this update: Thu 10 Sep 2026 00:01:37 +0000
Manifest next update: Fri 11 Sep 2026 00:01:37 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: Qd6scddd47E5yhB60VX9KMbLIUmBGi15DuYedNnyEAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:b5:6a:9b:88:63:44:7d:d6:ae:42:57:6e:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Sep 10 00:01:37 2026 GMT
Not After : Sep 11 00:01:37 2026 GMT
Subject: CN=1f948050439dde234c0599ecd6e80593a81d2c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:30:62:09:4f:b6:1e:60:2f:2d:26:b5:db:
e3:35:78:09:ad:d4:1a:e0:65:ce:4d:58:3e:94:f3:
75:a4:bc:97:bb:23:f2:2c:f2:2d:70:b5:c9:89:b4:
3c:fb:dd:ce:51:74:5c:3a:49:20:62:c5:02:f1:51:
a1:51:27:e4:f8:9f:62:9d:f2:12:23:57:fc:c9:36:
b0:a6:5f:d1:c8:bb:ce:50:d0:27:05:81:6a:68:35:
d4:a4:ec:a7:86:49:44:8c:45:c0:40:b4:7c:b9:dd:
73:62:dc:3e:92:02:52:1f:bd:e0:3e:80:40:64:64:
c8:f2:c6:56:a3:f0:a8:fc:42:82:57:b1:cf:32:5d:
60:79:06:5b:de:d0:54:54:ca:6d:80:cf:7d:0a:7f:
2c:83:93:30:88:06:2c:3c:3a:91:3d:41:2d:46:f3:
91:98:07:d2:90:37:f6:16:a7:e4:0a:50:01:86:c2:
92:c4:09:c2:19:ee:92:e7:fb:ba:3d:e0:95:fd:49:
3c:17:d1:ef:9e:38:e3:e8:52:88:24:a2:6c:af:64:
75:a3:4a:cb:6f:ae:6f:46:7a:b3:f7:6c:16:c1:dc:
13:ad:dd:3a:00:5e:a5:26:00:7a:93:1f:91:61:b0:
31:d3:a3:f2:86:38:ee:18:00:d5:f4:ec:ab:36:7c:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:80:50:43:9D:DE:23:4C:05:99:EC:D6:E8:05:93:A8:1D:2C:47
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c8:24:15:36:26:61:aa:b8:49:30:f1:d7:e3:5e:14:df:4a:
da:20:65:56:0c:c1:fc:f3:8d:81:4e:87:57:e3:48:3b:0b:f6:
57:84:f3:e8:77:4f:dd:08:42:71:32:86:59:c1:93:ba:fb:b3:
cb:9b:d3:7e:f5:08:f7:d9:9f:5d:62:0d:08:b8:91:df:09:83:
22:9b:17:7e:55:3f:a9:eb:29:b6:8e:65:d5:48:c2:bd:f5:ec:
44:3e:aa:d5:f1:eb:f3:7a:3a:c6:0a:66:d3:ca:56:16:13:7b:
a2:af:a9:7f:4b:56:40:39:d0:27:be:80:ba:cb:c9:51:59:3a:
95:85:49:20:6c:3e:f8:db:57:c2:b2:13:17:0e:aa:c8:eb:9b:
8a:7c:ef:17:8f:db:c4:6e:23:9f:7a:38:9e:a7:be:d0:14:c8:
56:f0:3a:79:bc:9b:87:57:e5:f0:ef:0c:c7:d8:24:54:bf:02:
f1:5a:01:e8:35:33:71:bc:df:bb:1f:1d:88:a4:ee:1a:e7:89:
e0:cf:50:79:c8:3f:7f:40:eb:59:37:ca:51:a5:4c:db:57:ee:
ce:c8:6f:99:e0:50:8d:5b:40:8e:47:88:77:17:13:83:49:41:
2e:ba:96:9e:ee:95:17:6e:55:e2:a3:c1:55:48:3d:d9:b8:32:
44:bf:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:18:24 2026 by rpki-client