Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: kZN8/3m9Lg7KJUy9TcFiJZogvWfoJkjAAm+Y1IgA9YM=
Subject key identifier: E1:3F:DC:E4:F7:65:87:9C:63:81:EF:87:73:33:27:B6:8F:09:5F:38
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 01A11974ED05AFC49FAE7801B3F40422D1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 1A90
Signing time: Thu 08 Oct 2026 03:00:55 +0000
Manifest this update: Thu 08 Oct 2026 03:00:55 +0000
Manifest next update: Fri 09 Oct 2026 03:00:55 +0000
Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: a7iRLWQzuZG8n3wGHqto10HGDkolHWnDnqUO8dsEBd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:ed:05:af:c4:9f:ae:78:01:b3:f4:04:22:d1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Oct 8 03:00:55 2026 GMT
Not After : Oct 9 03:00:55 2026 GMT
Subject: CN=e13fdce4f765879c6381ef87733327b68f095f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:72:81:9a:53:6f:1c:4f:b0:10:e3:2b:23:
63:4d:59:ba:26:38:bb:f7:fd:1b:63:36:d7:96:0f:
d2:da:e7:90:3d:17:71:62:fb:8a:66:f1:aa:e0:d8:
2a:7e:fc:9c:51:63:2a:a5:3c:82:4d:ca:8a:29:42:
07:07:dc:10:9f:dc:bd:5e:3d:05:a0:45:5f:fe:bc:
36:f9:0b:94:a3:9a:0b:20:a9:6d:f6:40:8a:f8:71:
1d:97:b6:81:cb:fe:ac:90:d7:3d:3a:1c:4f:89:3c:
c2:53:ef:f0:71:3c:31:50:ca:46:40:ef:c3:b8:3e:
76:13:b9:8e:fa:b7:1c:4e:15:aa:4f:39:a8:1c:24:
bc:66:4a:c4:c9:f7:cb:97:9b:2a:56:b6:73:a3:a4:
00:f2:31:f6:b1:95:bd:a2:ce:b7:82:a3:82:4f:40:
1e:65:0c:d8:04:d7:5e:78:01:c0:45:15:0e:dd:d2:
0a:91:56:39:a9:cc:a2:b7:65:cd:eb:0e:40:85:b3:
e5:3a:22:91:9a:38:b6:89:86:85:bf:f3:a3:2f:8a:
b4:6f:fe:c9:94:ee:31:83:9a:6d:83:ab:ba:5b:04:
2b:3c:e0:44:2b:a2:50:c1:a1:9c:dd:75:f6:01:9b:
84:bb:be:64:fb:d4:f1:54:3e:c1:b6:96:fd:86:f9:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:DC:E4:F7:65:87:9C:63:81:EF:87:73:33:27:B6:8F:09:5F:38
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:38:4d:cd:d1:b6:20:49:a3:cf:39:6d:94:1a:14:38:29:97:
b3:23:17:d3:d3:3b:6c:b5:76:79:d4:85:b9:41:76:ae:e6:75:
0f:39:b3:a4:ce:8d:4a:78:59:c8:e4:e7:09:9c:da:db:25:cf:
1b:7f:26:90:5e:c6:46:55:c4:9d:8c:d2:3e:af:eb:cc:51:1f:
3d:8f:69:65:b4:ca:e5:91:ed:73:7b:68:5d:49:3d:ea:6e:d2:
c0:50:7f:da:d4:82:7d:d1:c3:d5:7c:80:cd:a8:45:15:c0:e3:
c5:8b:e2:33:0c:0f:7f:fe:b1:96:42:53:30:52:48:7d:55:c4:
b2:10:92:0e:6e:d1:2c:3e:79:ab:5d:8c:f0:7d:31:60:88:55:
22:47:ca:6b:84:29:94:57:81:74:70:ab:13:38:58:b9:41:fc:
46:0d:52:fa:d5:e5:13:9b:6a:5d:51:4a:23:64:ca:56:fb:16:
b9:bb:83:e1:a8:5f:77:1d:7b:5a:32:2b:f0:21:bb:ad:c6:bb:
66:8c:71:3a:bf:bb:a3:25:3f:71:19:1d:26:d3:5a:9b:c1:14:
77:48:69:9b:70:49:7e:a0:09:79:ec:39:19:6a:d6:63:e5:4e:
61:be:48:fe:33:84:f8:64:bb:7c:ec:7f:24:af:40:bb:2f:a0:
ff:3b:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:19:30 2026 by rpki-client