Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: ovZn8i/e60n283IzDNGt34AtmmtcETzdxSCyYD8zxoQ=
Subject key identifier: A9:BA:2C:1B:1F:0F:0F:B5:E2:03:A4:4B:63:71:CA:0A:15:28:CE:91
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019FF8A3AD70E721033DCC0A3F31CF7F6F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 0A2D
Signing time: Thu 13 Aug 2026 01:01:44 +0000
Manifest this update: Thu 13 Aug 2026 01:01:44 +0000
Manifest next update: Fri 14 Aug 2026 01:01:44 +0000
Files and hashes: 1: KDOdwgBqi-iHp_hkC0hknI6LVs8.asa (hash: ilwYTc5BPsKaRnhBm7QEeGk9PPVst3mIY43gbDs4iVg=)
2: MZeI3fx7Rs6vgWADfZ3b9x-IPrw.roa (hash: 88TFwnxWocrDYKNiW9RVsE1t/Ul4aE3DSPX0lbd55Bc=)
3: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: KtYUrqVcHo2S7c7LHlcl/dMEVSrzdxkBGTBOugI59kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:ad:70:e7:21:03:3d:cc:0a:3f:31:cf:7f:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Aug 13 01:01:44 2026 GMT
Not After : Aug 14 01:01:44 2026 GMT
Subject: CN=a9ba2c1b1f0f0fb5e203a44b6371ca0a1528ce91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:8e:b1:7e:2d:8d:a2:3c:13:2a:66:e8:de:
77:84:3b:5d:6a:a4:58:b2:0f:5a:60:19:77:64:92:
be:52:c5:bc:de:d3:fa:a0:51:d9:5f:73:12:98:11:
fa:df:fc:07:ae:04:20:d4:3c:aa:b0:e4:78:f5:fc:
49:c1:32:6e:f9:8c:04:5c:81:83:7c:0f:cc:a4:17:
60:85:53:f0:53:06:0f:d1:9b:e5:9b:cd:d5:02:50:
7a:1e:22:8e:d1:ed:3b:1f:db:6d:51:73:40:1a:75:
11:77:4d:5b:a3:fb:77:8d:23:b0:5f:cd:3e:92:9c:
75:28:a9:64:09:a0:4a:7a:3b:00:bb:c5:1a:3d:16:
e9:8b:8a:27:dc:dc:8c:db:2e:1d:0b:68:b6:5e:27:
60:a4:1d:12:2e:ae:22:c9:0b:c3:7c:06:90:98:e9:
9d:a5:2c:88:eb:7e:89:d0:11:94:1c:be:a1:68:0c:
db:4c:53:c9:ba:cf:54:a1:06:82:5e:7a:6e:9f:d5:
b1:33:04:b3:28:b5:60:10:33:2f:ed:74:c4:15:7d:
1c:34:ab:15:20:cf:19:19:5e:c8:e3:07:a2:89:df:
90:c2:c4:74:a8:da:71:91:df:f4:a2:f6:42:06:de:
fa:01:fd:35:93:b5:de:92:eb:81:43:e3:79:ac:8c:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:2C:1B:1F:0F:0F:B5:E2:03:A4:4B:63:71:CA:0A:15:28:CE:91
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4f:23:53:7d:d2:78:3a:71:e9:eb:dd:6a:61:66:04:2b:05:
50:74:7f:87:fb:fa:f3:32:b5:aa:28:fb:92:1e:82:bd:70:88:
8b:38:65:32:07:73:bf:9a:70:48:7d:18:ca:3e:3b:34:b2:95:
a3:a2:af:e4:91:e6:ad:7d:08:f6:a6:5f:71:bc:96:7c:0a:47:
0c:0c:dc:b3:54:6f:fd:77:2f:14:0c:c6:5f:29:46:76:4c:7e:
95:99:e8:fa:70:fe:81:97:ba:79:4f:4d:72:3b:2a:b1:08:cd:
23:da:cd:90:26:1a:a3:99:d3:b7:d9:47:0f:1c:7a:37:d9:1f:
45:62:7c:09:b8:3d:7a:ea:1f:cd:8a:55:af:87:c9:0e:84:44:
ec:57:6f:6d:7a:cf:4f:62:66:6d:17:1e:8c:3e:86:ed:b0:7b:
a9:c8:a0:20:8d:ab:ce:74:29:6a:b0:f3:72:b9:c5:9f:b7:f5:
02:2d:19:bd:02:5c:9b:93:1a:46:9a:fb:dd:80:02:39:e5:df:
47:7b:46:f4:c6:c8:fd:82:7a:d9:63:8e:11:9a:a4:94:cb:b1:
29:9a:0b:35:a6:0e:49:58:55:dd:ea:8e:c7:f0:8d:77:c2:08:
d1:0c:1a:c9:e7:96:bf:40:de:1e:58:cb:c4:47:7b:60:eb:95:
63:3d:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:30 2026 by rpki-client