Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
File: vNEARPy4HlrmDz7NW9zf5tk0PJI.mft (raw, json)
Hash identifier: iY2Gt3FKIiaXhJS+vVETOkUxWefhNyzcSqmZd2JK8r8=
Subject key identifier: 3D:4B:8C:A8:5A:77:7E:6C:59:11:92:30:24:AE:63:CD:F4:CF:C3:01
Authority key identifier: BC:D1:00:44:FC:B8:1E:5A:E6:0F:3E:CD:5B:DC:DF:E6:D9:34:3C:92
Certificate issuer: /CN=bcd10044fcb81e5ae60f3ecd5bdcdfe6d9343c92
Certificate serial: 01A1721393D9B6F5563E9F3E4E2E02BC6EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
Manifest number: 024C
Signing time: Sun 25 Oct 2026 08:00:47 +0000
Manifest this update: Sun 25 Oct 2026 08:00:47 +0000
Manifest next update: Mon 26 Oct 2026 08:00:47 +0000
Files and hashes: 1: vNEARPy4HlrmDz7NW9zf5tk0PJI.crl (hash: DpCCNzUzDlODsLwmewcuX6PtyUIg4AlUPeDSzWP5s6Y=)
2: wd-GsSjA11cGHqEt72xSa1ygzuQ.roa (hash: WJGZJAHF4Jb+ZVAsXjgsRqPOhUgESLsq9HtVoR+KgWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:13:93:d9:b6:f5:56:3e:9f:3e:4e:2e:02:bc:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd10044fcb81e5ae60f3ecd5bdcdfe6d9343c92
Validity
Not Before: Oct 25 08:00:47 2026 GMT
Not After : Oct 26 08:00:47 2026 GMT
Subject: CN=3d4b8ca85a777e6c5911923024ae63cdf4cfc301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:4b:81:7a:e5:7f:50:f8:da:22:12:b5:02:
c5:c0:b4:be:70:84:5c:e0:a3:77:a0:62:f9:f5:43:
e1:12:00:1c:8f:58:7d:80:31:90:ca:12:ed:12:cd:
2e:f0:a9:2f:27:93:23:47:e9:7e:3a:92:8b:2e:0d:
57:6e:05:e4:a9:7d:d8:1a:4b:69:86:86:46:6d:f0:
6a:07:2e:b0:bc:a2:67:18:45:6e:75:73:1b:01:b6:
49:aa:9c:7f:62:1a:a2:4b:fc:03:d7:44:df:b4:3b:
34:52:6b:4e:de:66:20:df:a7:be:87:9e:d8:73:93:
af:98:01:fe:2d:1b:d5:83:27:50:30:c6:06:4e:43:
71:23:44:c8:a8:4c:71:c0:b6:9e:ad:be:b0:43:d7:
9c:bf:3c:1c:12:79:20:cb:d6:37:b1:16:41:aa:bc:
ca:bd:18:7d:58:88:c7:e0:8a:7b:e1:09:e3:05:16:
cf:96:5d:ea:75:35:4e:38:12:b0:a2:0c:8a:22:e5:
a6:1d:8b:51:58:52:a4:51:c9:bd:c0:36:04:ff:b1:
34:5d:8e:25:1b:ea:f3:ae:38:ed:56:07:b6:e1:58:
06:90:ed:7b:27:b9:f7:fa:25:e9:c1:24:0b:87:89:
83:e0:a9:48:96:1b:64:42:2c:bd:15:a9:a2:f7:a2:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:8C:A8:5A:77:7E:6C:59:11:92:30:24:AE:63:CD:F4:CF:C3:01
X509v3 Authority Key Identifier:
keyid:BC:D1:00:44:FC:B8:1E:5A:E6:0F:3E:CD:5B:DC:DF:E6:D9:34:3C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNEARPy4HlrmDz7NW9zf5tk0PJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bb19ae-edbb-46fa-86c6-7edb758cadcf/1/vNEARPy4HlrmDz7NW9zf5tk0PJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:70:bd:5d:88:bc:17:78:2f:54:67:84:90:0d:5f:d4:21:09:
1d:82:7a:26:20:50:0c:c8:bc:d4:15:1d:c2:87:d4:a2:53:bf:
18:5f:c0:fd:d4:5a:50:82:0e:54:c7:db:62:54:d4:14:8f:bc:
91:72:92:8a:f9:ff:81:51:6c:6d:e7:7e:74:b7:05:be:e3:42:
b9:0e:9b:dc:4a:f4:e9:72:d5:68:41:f7:c3:9d:22:de:d6:ba:
cb:28:c1:e3:c1:79:57:5a:00:39:4c:63:23:0d:c6:54:6f:ac:
98:ca:fc:13:a3:58:03:72:0e:b8:5c:ce:24:fc:d2:42:de:ee:
f0:17:8b:db:c0:74:58:54:51:9e:7f:d7:1d:4f:e5:5a:1b:c3:
85:69:e2:89:20:38:bc:f7:52:17:69:26:5c:ab:e0:88:8e:b0:
41:f7:e3:57:95:f1:5a:92:60:65:42:a3:fe:45:df:49:fd:09:
b0:44:cb:55:aa:0b:48:dc:44:88:eb:ef:b1:f7:e4:4a:ba:20:
00:8d:9e:c9:3f:c1:b9:1d:5a:db:8d:37:2e:dc:4c:0e:23:3e:
5d:52:92:28:dd:01:6c:73:6e:72:13:b9:e4:d7:48:4d:49:26:
2f:68:27:1e:50:af:37:a7:04:87:ca:15:24:c6:15:17:41:ac:
a1:62:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:41:41 2026 by rpki-client