Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: 07fIWPIwrayUQ5iGr4UtZFKTfRnoV4tzu+8GwZGr4c8=
Subject key identifier: 43:76:01:10:C3:21:03:D1:8A:A0:1D:3D:23:AB:0A:0E:DB:09:DD:74
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 01A11C3EE0126A29283885EE02DFC9F232BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1A94
Signing time: Thu 08 Oct 2026 16:00:44 +0000
Manifest this update: Thu 08 Oct 2026 16:00:44 +0000
Manifest next update: Fri 09 Oct 2026 16:00:44 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: m3UF82MuFnK3zVPZ/UsLcL18beC4M1+ibOpoHIfgMDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:e0:12:6a:29:28:38:85:ee:02:df:c9:f2:32:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Oct 8 16:00:44 2026 GMT
Not After : Oct 9 16:00:44 2026 GMT
Subject: CN=43760110c32103d18aa01d3d23ab0a0edb09dd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:65:b8:05:e7:2a:b6:ee:e0:44:60:c3:66:51:
41:27:fb:dc:fa:53:8f:2d:81:66:6e:4c:a6:79:7d:
c5:14:a4:88:ef:24:76:7e:83:c3:c2:04:d9:06:2a:
27:65:73:af:d0:a8:dd:3e:5b:6b:5a:bc:2e:27:72:
e5:ba:81:f5:81:40:5a:40:c2:20:b5:01:da:6f:7e:
08:51:26:e6:ef:fb:ea:a7:11:a0:6a:43:a9:e6:67:
37:71:59:74:73:11:63:f2:72:41:a6:92:7c:05:5a:
67:08:22:86:47:67:35:82:c0:75:58:e4:64:29:15:
f0:1d:ab:07:10:b4:b7:ff:16:cb:d7:86:04:08:79:
6d:54:43:45:15:3e:29:1c:b0:7c:35:b1:22:3a:ab:
2f:73:b7:75:47:6e:65:22:5c:b8:32:0f:66:3e:03:
72:84:e1:64:41:c7:5e:5d:85:fb:9c:a2:0e:89:6e:
90:28:c9:dd:59:1c:54:6f:13:dd:6e:f9:a7:af:e6:
7c:7d:83:d6:10:e2:c0:47:8b:1c:f4:2f:9e:aa:4a:
9c:b9:54:49:f5:54:06:f6:d6:ec:60:05:7b:29:85:
1c:b5:6a:80:98:34:89:6b:e0:e9:58:eb:a5:7f:f0:
a6:bc:f9:f9:cb:7d:96:c9:7b:09:23:52:1b:5c:32:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:01:10:C3:21:03:D1:8A:A0:1D:3D:23:AB:0A:0E:DB:09:DD:74
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f3:d0:26:3b:0e:7d:1a:f3:5e:86:74:a1:13:b5:62:b9:bb:
30:65:37:68:40:35:c8:40:84:b1:33:d6:2e:01:d9:e5:0c:ab:
41:4a:b4:85:91:06:30:e7:47:90:0a:ab:b0:22:91:8e:96:0f:
9c:5d:a1:da:a2:58:53:24:28:8b:0e:e2:74:07:f7:a1:ac:d2:
13:0a:91:45:62:dc:2a:1c:ac:06:c1:97:ea:59:e1:0f:ad:22:
68:1d:e4:ff:3a:a9:ab:e5:bf:c8:d3:f4:5f:da:40:ec:d7:da:
0c:0b:0e:c2:f2:c5:d0:52:c5:46:14:86:14:f6:6e:f8:51:14:
60:89:47:63:b1:3e:5e:29:01:43:3d:a9:e5:7f:7e:ed:7a:cc:
82:53:c5:d3:74:c2:7e:5b:7f:1b:78:84:db:26:1d:55:b9:75:
6d:6a:2d:ba:60:97:6a:8a:15:3b:a0:4a:36:94:aa:8d:29:69:
39:39:0f:8a:54:0c:cd:51:8d:dc:b9:a1:d9:67:39:e7:7e:f0:
7a:b6:6c:f8:45:7e:2f:f6:d9:19:81:a5:3f:50:96:4d:6f:07:
87:ad:35:d7:db:a5:80:85:61:fc:f8:ae:57:6d:4f:5d:94:75:
35:ee:c2:a3:45:88:c3:bb:78:b8:cc:2c:90:99:9e:5d:77:86:
4f:46:29:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcPuASaikoOIXuAt/J8jK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTBhOTQ5OTc2NzJhOTIwYTI5MGNjYmZkMDQ5MTI2Zjcw
NzVjOTkwHhcNMjYxMDA4MTYwMDQ0WhcNMjYxMDA5MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg0Mzc2MDExMGMzMjEwM2QxOGFhMDFkM2QyM2FiMGEwZWRiMDlkZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWW4Becqtu7gRGDDZlFBJ/vc+lOP
LYFmbkymeX3FFKSI7yR2foPDwgTZBionZXOv0KjdPltrWrwuJ3LluoH1gUBaQMIg
tQHab34IUSbm7/vqpxGgakOp5mc3cVl0cxFj8nJBppJ8BVpnCCKGR2c1gsB1WORk
KRXwHasHELS3/xbL14YECHltVENFFT4pHLB8NbEiOqsvc7d1R25lIly4Mg9mPgNy
hOFkQcdeXYX7nKIOiW6QKMndWRxUbxPdbvmnr+Z8fYPWEOLAR4sc9C+eqkqcuVRJ
9VQG9tbsYAV7KYUctWqAmDSJa+DpWOulf/CmvPn5y32WyXsJI1IbXDII9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN2ARDDIQPRiqAdPSOrCg7bCd10MB8GA1UdIwQY
MBaAFL7gqUmXZyqSCikMy/0EkSb3B1yZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTIt
M2E2MDYzY2ZlYTk1LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTItM2E2MDYzY2ZlYTk1
LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPPQJjsO
fRrzXoZ0oRO1Yrm7MGU3aEA1yECEsTPWLgHZ5QyrQUq0hZEGMOdHkAqrsCKRjpYP
nF2h2qJYUyQoiw7idAf3oazSEwqRRWLcKhysBsGX6lnhD60iaB3k/zqpq+W/yNP0
X9pA7NfaDAsOwvLF0FLFRhSGFPZu+FEUYIlHY7E+XikBQz2p5X9+7XrMglPF03TC
flt/G3iE2yYdVbl1bWotumCXaooVO6BKNpSqjSlpOTkPilQMzVGN3Lmh2Wc5537w
erZs+EV+L/bZGYGlP1CWTW8Hh60119ulgIVh/PiuV21PXZR1Ne7Co0WIw7t4uMws
kJmeXXeGT0YpWg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:33:36 2026 by rpki-client