Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File: vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier: 8Q5gZTG2BN361H73xbVr345CPCpfv7btwbPwVgx2m9U=
Subject key identifier: BC:5C:B5:A3:0A:5D:6F:C8:C8:E1:33:62:9C:7A:02:5F:EB:B6:17:55
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer: /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial: 01A16E36EEE8A0ECDD2EA3F6AD5517FCCB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number: 1AC5
Signing time: Sat 24 Oct 2026 14:00:56 +0000
Manifest this update: Sat 24 Oct 2026 14:00:56 +0000
Manifest next update: Sun 25 Oct 2026 14:00:56 +0000
Files and hashes: 1: mLE7VosmydhVCMguYH3rQgmTc-M.roa (hash: mTYzchMKEO4uZTushftKzw0+5nZsPeA/JGcP5k+QnQM=)
2: peCptJnBjS01Jffe9zNkUarZyKY.roa (hash: NdN6bmU/0xsnoYufljMuvL8XIU6jhRkxeQ2tCu90AyY=)
3: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: yvlRya+5JUr2w9zNuvF3U/ngC7Y+XKvjFnBpOIohex0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:36:ee:e8:a0:ec:dd:2e:a3:f6:ad:55:17:fc:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Validity
Not Before: Oct 24 14:00:56 2026 GMT
Not After : Oct 25 14:00:56 2026 GMT
Subject: CN=bc5cb5a30a5d6fc8c8e133629c7a025febb61755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:17:f1:c8:48:67:9f:d2:84:e5:86:62:87:
9d:be:89:a4:84:61:7a:4a:92:4e:84:ed:62:99:bb:
e4:fd:88:67:50:2b:78:3c:24:22:44:bf:e6:79:10:
9f:56:0d:eb:0e:9a:b4:34:69:a6:65:14:c6:dd:74:
fa:38:5b:a9:40:f4:0d:33:5a:86:15:48:fd:dc:6a:
83:8f:97:9b:2c:1d:a7:5d:3d:15:df:b0:67:08:6d:
09:e1:a9:a5:b2:85:f7:be:15:67:36:f4:52:ef:ec:
1a:ad:1b:e2:d9:76:78:f2:d5:0c:bf:09:1c:7b:e5:
31:16:c9:8f:bb:9a:ff:d8:75:f4:21:b4:89:93:69:
bb:16:4b:08:a7:cb:fb:d2:b5:f5:9c:42:28:a5:50:
8d:a7:ec:bd:45:4e:57:4e:9b:f5:b5:7f:6b:5e:a1:
26:d9:4b:dd:16:03:b1:79:7c:a0:77:4e:f9:59:bf:
57:36:6c:93:6c:e3:be:de:87:12:56:51:ac:33:f4:
4d:11:29:05:be:f8:e1:5f:12:9b:ce:d8:fb:5f:ea:
19:23:b2:c3:55:27:b3:3b:5a:1d:80:d1:0e:85:15:
8a:89:b5:de:ff:48:51:9e:31:77:22:f8:01:67:6a:
52:f7:0f:da:d4:2e:b7:fd:2e:40:33:05:62:7e:9b:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:B5:A3:0A:5D:6F:C8:C8:E1:33:62:9C:7A:02:5F:EB:B6:17:55
X509v3 Authority Key Identifier:
keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:53:24:44:57:36:cf:b1:f3:50:71:4c:35:a3:0a:50:ab:94:
c9:57:4d:67:2e:32:23:9d:b4:53:2b:6c:57:04:25:03:93:d0:
eb:4d:7b:ce:20:e4:3f:4e:f6:66:c9:eb:50:3f:ca:63:45:d2:
56:c5:9a:97:26:e9:96:4f:02:c5:eb:d0:cd:d1:d0:d3:59:ea:
60:d7:0e:80:df:86:9b:61:e7:e7:e4:7e:02:77:77:0a:f7:30:
71:e9:88:a6:31:5e:93:96:eb:23:d2:4e:7e:f1:0a:5c:e4:d7:
31:01:23:f9:b4:b1:14:01:71:73:7a:c7:13:55:24:a8:1e:2e:
f1:f1:ec:0c:e6:3b:90:9f:4d:60:79:8d:53:29:0c:b9:45:e5:
24:2f:31:ff:fc:fb:8a:4e:5c:53:e7:54:48:75:04:68:52:bf:
dd:07:1a:d0:c2:6f:90:ef:14:a1:3d:c4:84:73:2c:1d:e0:95:
e2:a4:0c:b4:f9:60:81:a0:46:e1:7a:c9:c9:84:fa:0f:9a:34:
e0:7e:43:9b:7a:1a:15:e9:66:f2:c3:2e:fd:28:53:de:cf:e0:
61:99:f1:af:02:cf:d1:77:78:55:10:a0:e7:6d:1d:f2:a6:41:
32:bc:2f:b2:6e:e9:85:7f:4c:7b:83:cc:34:f5:59:83:a4:a5:
4d:11:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:56:11 2026 by rpki-client