Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: yT6AH1Wr2/HiNxUAzIkKJdWdfO67cBbXt3CmVQbkqGQ=
Subject key identifier: BF:78:F7:DB:F1:E8:D6:B1:68:4A:CE:B2:25:11:43:70:9F:B5:EA:C2
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 01A17C5FD9D80560DB6499FAFF9D72E514AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 080E
Signing time: Tue 27 Oct 2026 08:00:18 +0000
Manifest this update: Tue 27 Oct 2026 08:00:18 +0000
Manifest next update: Wed 28 Oct 2026 08:00:18 +0000
Files and hashes: 1: J3APbr50rVneV9H1qg-HNNc-3lc.roa (hash: NXCP1NiFTqdVA1tneuQk89jFvEWiunEfCtSHBOd2xMY=)
2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: N8EYN3sih9KIMWMQ98Vj0Tx0zVp5TIC3JpnawFdkz7k=)
3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:d9:d8:05:60:db:64:99:fa:ff:9d:72:e5:14:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Oct 27 08:00:18 2026 GMT
Not After : Oct 28 08:00:18 2026 GMT
Subject: CN=bf78f7dbf1e8d6b1684aceb2251143709fb5eac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:23:d5:34:9a:59:36:ae:94:f2:dd:80:b5:
8b:5e:50:5b:b5:d2:3d:9e:63:f0:eb:cc:c7:75:d7:
45:7b:82:8c:32:93:7b:5f:93:f7:2a:23:f9:d1:92:
4d:33:ed:34:04:78:3e:b1:25:19:ed:0c:ab:42:f5:
82:61:a9:02:46:20:84:9a:cd:a7:3b:d2:4a:3c:d9:
3d:97:52:e7:17:61:91:10:3d:a4:87:36:8d:1b:8e:
91:7a:ef:e9:20:36:59:bd:5c:2e:1e:41:e1:89:95:
21:6c:b3:69:18:d9:fa:27:18:3d:94:b2:72:97:93:
c2:ed:cb:d0:f7:f7:e7:a1:96:ae:e9:6e:32:58:83:
13:c9:bd:94:52:1f:8a:fe:fb:44:cf:96:d9:fb:12:
dc:fc:4b:b7:78:8a:b5:7c:25:9a:cd:31:7e:80:17:
c2:5f:71:69:a4:7f:4d:f1:8e:93:27:9c:34:62:83:
2d:30:2c:87:73:32:23:23:18:c1:c7:12:79:b0:f5:
b7:de:1b:b1:a3:0c:22:dd:96:5e:67:ac:5e:dd:e4:
e0:b9:37:3c:d2:2f:51:74:c0:bc:32:52:36:dd:32:
10:b8:ec:37:31:bd:bd:12:93:9a:29:f7:be:27:ee:
15:e5:9e:7f:11:1c:df:ac:bf:aa:c1:07:d6:66:1c:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:F7:DB:F1:E8:D6:B1:68:4A:CE:B2:25:11:43:70:9F:B5:EA:C2
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3e:aa:55:36:7f:fc:bb:ed:77:91:5d:20:84:6e:5d:82:d4:
62:8f:f7:7d:79:f7:c3:6b:ad:c3:0c:26:1c:55:1a:9e:a4:e8:
17:b0:6b:d2:84:2e:33:c1:e7:04:66:b2:66:bb:ff:0f:4c:a9:
07:a1:28:6f:aa:de:f5:3c:b9:05:0a:af:6a:da:59:39:02:72:
42:55:a9:9d:dc:75:94:6b:5e:f8:5b:e4:e2:23:f6:c6:90:a5:
eb:55:d3:53:75:47:ce:15:da:44:36:57:9e:02:c9:c6:9a:91:
c7:e3:44:23:0c:f3:32:52:b9:0c:6b:be:9a:82:ee:ce:b4:91:
b1:fc:7f:67:64:d1:8a:ac:20:7a:a7:1f:a1:99:e8:dc:81:5e:
9d:af:4a:88:3e:bd:41:55:8e:2d:a9:c5:4a:05:a9:e5:fc:2d:
c5:29:4f:39:df:8f:67:ad:4d:8e:c5:95:d8:7c:ce:69:3c:5c:
44:20:9b:87:23:c4:05:05:bd:08:94:ce:b1:e9:5e:a0:f2:68:
53:05:18:24:53:4f:c4:e5:54:d9:99:4d:7d:64:42:28:53:74:
0d:02:64:71:82:c1:cc:8c:7f:d8:5a:f5:bf:87:97:f7:64:e2:
0e:81:4c:06:eb:8b:4f:45:6f:0c:71:d4:09:84:d2:04:83:8e:
bb:bc:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:14 2026 by rpki-client