Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: O1rUGk6jwtAvzKJxZ9SEdB75+83I7kiOlu3bLJE3v8M=
Subject key identifier: 06:76:6E:55:D6:8D:0B:F3:ED:0D:9D:92:31:C3:B7:21:51:65:46:2E
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01A181BE9CCDB9FC87506D2F60D9252BB92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0F54
Signing time: Wed 28 Oct 2026 09:01:55 +0000
Manifest this update: Wed 28 Oct 2026 09:01:55 +0000
Manifest next update: Thu 29 Oct 2026 09:01:55 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: nkpI7Z3hTpGFSzRk4yZZMkNGIOuTpbf+rTbjMq4KqDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:9c:cd:b9:fc:87:50:6d:2f:60:d9:25:2b:b9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Oct 28 09:01:55 2026 GMT
Not After : Oct 29 09:01:55 2026 GMT
Subject: CN=06766e55d68d0bf3ed0d9d9231c3b7215165462e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:28:4c:11:05:b1:9e:9d:30:b0:96:81:37:d5:
21:b7:f2:48:9e:2e:cc:28:e3:ce:cb:c5:1d:eb:26:
9d:b1:ed:61:b2:bf:a5:2b:97:de:4d:f6:c1:2d:ed:
89:f8:17:06:54:53:b8:f5:33:ad:22:53:55:8f:28:
62:b2:7a:1b:5c:13:b9:31:1d:ac:4d:1d:14:73:b5:
9b:6c:00:66:2c:c4:9b:bb:f1:1f:c7:ad:ac:28:29:
0a:39:0a:1e:88:49:e7:4e:db:d3:12:aa:ff:4c:f3:
fa:68:b1:d9:46:af:dd:db:57:71:63:2c:05:73:ae:
da:d0:50:af:f8:a2:c5:8e:bf:79:8b:93:3e:15:83:
30:89:60:34:23:70:97:77:c6:dd:38:78:c2:fc:8d:
e9:31:3b:c0:ae:98:d8:fb:bf:2b:29:b2:37:cf:97:
ff:a0:34:f3:95:4b:23:f1:32:de:2b:3e:56:dc:90:
7b:d0:4c:19:c5:b1:2f:87:6a:8b:5a:12:68:ff:30:
e7:81:a9:83:79:4e:35:a9:6c:94:a1:13:e8:29:ee:
58:da:c2:4c:91:65:4b:0b:50:ec:b8:0e:fc:35:38:
8e:2f:21:09:4e:84:ba:4f:ce:70:e3:9d:45:8e:55:
6c:b1:04:97:14:17:c0:5d:d9:42:2e:42:8f:3a:b1:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:6E:55:D6:8D:0B:F3:ED:0D:9D:92:31:C3:B7:21:51:65:46:2E
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2f:71:70:f7:55:44:de:9e:31:e1:00:b1:d4:60:38:fd:ff:
60:3a:16:7f:68:dc:31:e6:ae:99:f9:b3:fc:3f:3f:7d:41:b4:
a7:7e:0f:df:26:7a:09:e5:61:17:3e:ee:13:c3:4c:a4:8d:08:
4c:d4:88:fc:74:eb:d3:0f:56:d8:91:9b:47:59:d2:1f:ae:73:
8d:43:82:05:71:a6:19:78:00:dd:23:1d:af:98:90:27:71:cc:
dc:04:82:06:59:f2:4c:db:68:26:05:ff:a9:94:1e:7f:1c:14:
e4:bd:ed:d1:52:12:2f:2a:8f:d4:0b:bb:6d:de:71:1e:43:2d:
e0:86:da:d5:56:83:93:ff:e9:5c:f4:51:58:7e:71:2b:e8:7c:
ba:7f:09:e3:ba:fc:0c:15:49:2e:ad:ab:57:8c:35:c7:b2:3e:
89:c0:ac:2e:aa:67:d5:7e:5d:36:f3:fe:3e:69:76:c0:04:46:
bb:f7:12:29:b2:6d:a0:20:11:95:6c:49:30:2f:fc:85:24:89:
57:a3:3d:b6:44:6e:51:ca:96:9a:49:8b:a7:f0:28:7e:2c:02:
84:d5:4d:6a:d0:98:89:e3:95:02:50:95:52:00:60:e1:65:96:
b6:60:4d:8d:87:5e:ba:f3:7e:8a:20:72:63:a9:ef:be:ec:3e:
2b:69:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:59:07 2026 by rpki-client