Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
File: vnApzozJt4fZQyPgyg0U3R4AQ-w.mft (raw, json)
Hash identifier: xbQs48tx1l9duKnm/5LUP4an/kKbkU6hgAG1RlUAyz8=
Subject key identifier: E4:1A:68:8C:C9:09:21:A9:99:2B:CD:9A:CE:D6:70:C6:D2:20:5E:62
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 01A0DEE0A016EE5317BAF10D29EE5771C688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
Manifest number: 013C
Signing time: Sat 26 Sep 2026 18:00:58 +0000
Manifest this update: Sat 26 Sep 2026 18:00:58 +0000
Manifest next update: Sun 27 Sep 2026 18:00:58 +0000
Files and hashes: 1: PREiP0WtH9ua_lz3N4aim-V6AL8.roa (hash: 1d1XtFoMmk8IeE22KgiEf8/gZMUj3LiFZydzZU53viM=)
2: Rse8KVJ-qnRoFq6yUvasvPGC72s.roa (hash: 5L9ESppL3oc4AteITAQXY4+3w1JEM9PNJuyAgfgBzq4=)
3: vnApzozJt4fZQyPgyg0U3R4AQ-w.crl (hash: QZAOs1gsUnE+iWysqDeqaQqDHzmrh1vaGCpkQInxmFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:a0:16:ee:53:17:ba:f1:0d:29:ee:57:71:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Sep 26 18:00:58 2026 GMT
Not After : Sep 27 18:00:58 2026 GMT
Subject: CN=e41a688cc90921a9992bcd9aced670c6d2205e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:3e:9f:b7:18:60:c7:aa:b3:27:c9:92:73:
9c:df:68:41:41:23:77:3f:42:fc:2b:2b:88:d5:4b:
cf:9c:93:de:64:9a:ee:6f:bb:c8:f5:8d:bc:6b:ec:
63:42:7a:28:ce:9a:d8:79:85:a5:7d:57:60:95:f4:
39:f4:8f:66:95:18:d4:a6:cb:4b:5d:c1:55:6d:60:
19:25:b5:7c:91:28:92:f1:38:d4:9e:c8:61:8e:6b:
e2:36:38:29:c5:3c:96:91:70:45:09:cb:c1:21:61:
c8:11:f0:c7:0f:25:90:f1:2b:96:58:5f:fc:3f:27:
08:bf:b6:c9:d5:bf:3a:3c:bb:4e:4e:82:95:8b:dc:
12:5c:56:d7:ff:c2:11:a0:06:4f:5a:42:6f:67:db:
ca:54:32:44:1a:e4:c7:de:5e:9f:9e:75:24:5a:3f:
66:f4:94:d7:72:18:70:d8:a8:13:90:97:51:6b:35:
a8:96:13:a0:23:d4:c7:f1:1f:58:5d:35:a5:88:67:
9d:70:ea:4e:04:cc:be:62:b1:b0:f5:2a:2b:89:c5:
87:11:20:7a:fc:1a:72:6b:7c:ec:06:24:54:dd:f3:
e3:64:fc:7c:03:50:8b:5b:32:fa:a4:9c:bf:f4:bb:
ba:ef:98:e7:0e:55:09:6e:71:29:23:e7:e2:5e:50:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:68:8C:C9:09:21:A9:99:2B:CD:9A:CE:D6:70:C6:D2:20:5E:62
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2e:2f:e0:9c:2e:03:56:e4:01:39:31:f3:91:dd:7e:fd:07:
23:e9:27:a6:d0:d7:e7:bd:e4:d6:7d:22:da:bd:a4:e5:3f:9e:
b3:92:f3:d1:e1:6f:dd:e9:9d:02:3f:fc:ba:18:4f:74:15:f9:
2d:0f:0f:b3:e2:94:b2:3c:3c:14:a6:57:08:59:15:85:33:65:
7f:dd:d2:af:7c:05:16:70:6b:45:94:0a:cb:be:f4:1a:32:22:
d6:cf:b7:c1:9d:a7:d3:33:95:f3:91:b4:18:99:65:42:8f:15:
68:3a:44:d5:98:06:5c:0f:eb:11:3a:ea:b7:f9:81:76:f6:91:
2d:9b:f3:49:66:73:0c:1a:5a:fc:ca:76:1e:39:16:d3:d9:0b:
86:e3:bb:c5:0a:40:66:16:4e:47:1d:23:3c:5f:4d:95:0a:cd:
70:4e:8c:a4:44:7d:9b:8b:44:65:ad:2b:9c:96:32:b1:61:cc:
7b:4c:d0:b7:0a:37:b6:03:f6:9a:75:5c:29:f1:49:45:60:50:
1e:2d:da:ae:52:4c:f1:2f:15:18:ea:ba:30:ea:f8:3d:6d:35:
b4:96:b8:a1:e2:13:b6:3e:ee:57:b4:fa:72:c8:eb:f9:4c:f4:
a2:96:9d:57:68:2a:a4:e6:c1:89:01:da:55:2a:c1:3d:ee:a4:
19:99:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:03:21 2026 by rpki-client