Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: IZISFBHaJ5G/uxS38Sznv41TrGeZqoRRA1U9pgv4vws=
Subject key identifier: E9:41:76:55:6B:FE:04:97:D4:82:AD:54:4F:FC:8D:A5:E9:F8:B1:98
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 01A00438E8458C016F5BE8EEB77130C640E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 07:00:33 +0000
Manifest this update: Sat 15 Aug 2026 07:00:33 +0000
Manifest next update: Sun 16 Aug 2026 07:00:33 +0000
Files and hashes: 1: JgeUHeNo3nFoKbjY1AINP-ptMwI.roa (hash: CbuVPg9dHHICjEGGHB/goqF54ESCFCWeMJDnOxUnhB8=)
2: lmShAguKDpqteUFiiwxYcMXfQMA.roa (hash: mAIfdJGX8ltG4W72LHXtlpg9vxaFGwMn3DmPzW0FpIM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: 6lFGAkFD1eXSQoTZ9j8JTJpsznFpk75abQWa1mQQ8wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:38:e8:45:8c:01:6f:5b:e8:ee:b7:71:30:c6:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Aug 15 07:00:33 2026 GMT
Not After : Aug 16 07:00:33 2026 GMT
Subject: CN=e94176556bfe0497d482ad544ffc8da5e9f8b198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:67:4e:eb:c7:2a:dd:6f:a4:de:c1:f2:de:
64:16:7d:22:4a:85:06:f7:39:f7:8b:4a:69:36:c9:
63:9f:fe:63:b0:ac:34:bf:43:e6:0c:b8:ad:07:3c:
d6:d1:8b:91:e7:c0:4c:42:af:10:36:95:ce:a1:7a:
27:cd:d2:f1:f7:1a:84:90:7c:a5:1b:af:9a:59:7b:
14:26:00:7d:6b:87:0b:16:71:57:62:f4:8f:14:22:
3d:9c:ce:74:06:20:41:ab:77:36:ab:2f:47:7f:4d:
2c:26:01:e3:1f:cc:38:81:9a:cf:78:ab:44:d4:e5:
de:ed:aa:e5:f7:f7:7d:77:e0:a0:00:56:18:3b:68:
14:25:8f:db:aa:2d:17:51:9b:04:40:31:ef:de:4c:
7d:6f:29:78:6b:9b:4c:9a:6d:d2:ba:72:1f:17:f1:
7a:0d:7a:85:5a:a8:d0:07:8c:c4:80:1e:ee:f3:af:
7f:2d:64:89:7b:03:51:59:6f:2d:5c:b0:cc:28:28:
0a:ae:2e:5a:17:73:ab:d8:6e:3c:66:12:e1:cd:00:
a9:a8:b6:8f:43:12:6e:b4:c0:78:ae:f7:fa:3c:40:
90:db:52:42:0d:7d:2d:8d:fd:be:10:33:ca:b5:d8:
7e:d1:21:02:a7:44:0d:4b:98:41:4f:8f:f8:a1:fc:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:76:55:6B:FE:04:97:D4:82:AD:54:4F:FC:8D:A5:E9:F8:B1:98
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:11:2d:18:56:7b:19:04:55:c1:92:07:ee:7f:f2:27:4b:
50:70:f8:ae:2f:d8:5f:4e:10:41:ff:68:4b:21:1c:c2:f9:46:
b2:6c:85:40:29:11:c7:54:4a:b3:2f:91:3d:0d:3a:2d:19:a6:
b7:87:76:43:89:c6:2d:e0:d1:34:3e:70:7f:1f:45:a8:7f:4c:
73:69:19:cd:c8:b7:23:5c:1a:91:e4:ea:b8:c4:39:15:60:07:
4b:50:ac:30:b7:aa:0b:bb:12:74:83:79:f8:5d:ba:45:7c:3f:
d5:61:0e:db:1a:11:e2:9a:0c:e5:95:a3:e7:fc:63:8b:9d:ad:
36:08:3c:29:64:19:6b:11:0c:92:9a:1d:cf:8e:a9:d3:ea:5f:
bd:1f:14:8f:4a:0d:38:86:2b:db:a5:83:f7:81:96:fe:23:20:
6d:b1:59:d3:31:3d:d2:49:e7:c2:65:da:70:9d:45:4c:01:2f:
bb:ae:cf:c7:ab:c8:00:4e:a0:2a:87:8a:ae:f5:30:cb:2c:9b:
4c:63:b3:41:46:26:30:ac:03:5a:c3:78:00:3b:6a:47:a6:63:
9d:f1:e9:66:93:f5:3c:3e:2e:f5:c5:81:a8:58:bb:e3:c3:5d:
15:4c:cb:1a:56:f2:c4:45:da:d7:67:87:6c:82:b0:9a:16:a6:
a9:ec:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:45:55 2026 by rpki-client