Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: 2S8atE/tcs2146boQ/KKlLBc5kkJEFrMvIHQtr+q+HU=
Subject key identifier: 23:D7:92:18:AC:D3:A9:50:33:1F:39:25:A4:85:10:9E:48:90:55:CD
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 01A16C489F0BBAA2535E29987125FC89BF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 0B39
Signing time: Sat 24 Oct 2026 05:01:00 +0000
Manifest this update: Sat 24 Oct 2026 05:01:00 +0000
Manifest next update: Sun 25 Oct 2026 05:01:00 +0000
Files and hashes: 1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
2: lCay49jNA6hN-ql5UdLPpmY0qyA.roa (hash: wJB8n42rVcnEySyiUs5rmdGl27xFBWQxOkbBGoicUQM=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: hYivMyRGylVtdxrayhbrff0nDqpib61yjPJ8oXjJwbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:9f:0b:ba:a2:53:5e:29:98:71:25:fc:89:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Oct 24 05:01:00 2026 GMT
Not After : Oct 25 05:01:00 2026 GMT
Subject: CN=23d79218acd3a950331f3925a485109e489055cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:f9:c2:8f:3a:90:b2:cd:2b:aa:97:79:3e:
b5:73:b3:45:0f:da:a9:40:95:ee:be:e9:f0:cc:27:
af:bb:c8:c1:7f:47:58:4b:88:e1:30:6a:f5:c0:cd:
65:aa:10:2d:8d:a3:a2:aa:41:1e:64:15:4f:ea:f6:
db:af:76:55:44:bd:1c:00:5b:7b:9b:b3:fa:48:0e:
e4:6e:b0:e0:06:02:42:bc:a7:71:75:d2:23:e3:31:
a9:a1:2f:eb:9e:02:87:b6:43:02:09:08:8a:61:08:
20:2b:06:a4:b7:77:b7:14:19:45:1a:f3:49:5f:9b:
82:1d:a7:1a:34:98:6e:37:ff:d3:c2:dc:e0:61:f2:
1e:c7:7d:b6:85:4e:1f:e9:4a:c9:f3:16:d4:d7:75:
3c:2f:27:8e:d1:7b:fe:6e:e7:72:a5:62:1f:43:88:
2a:ec:90:f7:15:ff:d6:c5:35:f4:25:ec:f9:f9:51:
b5:d9:6c:ea:4e:16:7f:b9:3e:9f:98:f1:c7:3c:a2:
d8:8f:7e:f0:31:77:56:ed:a0:36:58:90:20:72:98:
39:ca:f4:af:3c:4d:08:05:6a:01:4d:fc:b0:a5:7f:
8f:f5:9b:ee:28:fc:3d:10:7a:62:4f:3a:ad:95:81:
eb:83:7c:72:51:0a:3b:7c:98:38:fc:5c:70:b3:6f:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D7:92:18:AC:D3:A9:50:33:1F:39:25:A4:85:10:9E:48:90:55:CD
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:97:af:9e:ba:ca:ea:77:df:ad:ec:d9:8c:55:38:1f:7c:82:
2d:00:cd:2e:2a:0f:be:25:76:d6:a5:9d:e0:44:e6:5e:8b:d7:
a9:5d:d2:28:00:61:ba:04:f1:57:bb:be:4f:f8:8d:19:da:35:
f9:7c:04:62:91:2c:81:45:4b:c4:71:ce:c7:57:bf:cf:60:3e:
ba:c5:8a:42:12:ca:25:80:5e:a7:1f:9c:94:88:26:71:31:46:
ec:cb:9d:eb:13:e4:a8:a6:f7:80:44:f2:32:25:66:b6:fa:51:
4a:c0:50:78:57:16:77:e2:34:7d:a3:ca:e8:5f:ad:e1:c2:36:
f2:3d:dd:9d:b8:0b:26:1b:3b:1d:85:31:ce:63:88:83:42:c4:
25:78:99:f8:dd:72:3f:ba:b8:c0:ee:7d:59:60:5a:b2:0b:c8:
12:87:1d:30:64:c4:c5:9c:bd:d6:2f:be:67:6d:72:20:db:fb:
3c:77:46:e9:e5:41:63:ce:4d:75:1c:9d:06:ea:0e:fd:95:1f:
dc:78:9a:55:e6:bf:69:c1:2e:3e:69:79:71:83:e7:65:f6:d8:
f8:57:fb:fc:ab:85:a4:40:a0:00:3e:b0:58:87:b3:dd:c2:4b:
4a:a7:c1:c0:fa:4c:e2:66:1c:5b:fe:fd:f9:b6:c1:68:e8:98:
c6:64:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:22:57 2026 by rpki-client