Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: 5i6FI+38qpT1qwWxZTDQaSknSvUtnvBEjQAk+sImDYs=
Subject key identifier: 30:DE:DD:62:0C:25:B2:B1:16:DD:E1:2E:D6:8D:D0:DE:DC:8F:13:17
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 01A0E7AE99E890B771F215FCFB8221163980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0B96
Signing time: Mon 28 Sep 2026 11:02:54 +0000
Manifest this update: Mon 28 Sep 2026 11:02:54 +0000
Manifest next update: Tue 29 Sep 2026 11:02:54 +0000
Files and hashes: 1: 2BE8OL8UUysTCY2ZZS0Z-hyf26U.roa (hash: FNDNGh9+uGviPmZxVI3wwzrMpVPUZPSayc/06tScadg=)
2: RUhDge75ZRg2jm6GkiDeW_q_9R4.roa (hash: 1Rm1MMHk+9+hgPs8tOVkUq4dP1nGXvpDaYqmiRr/RDc=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: kPRjfzioCml/61zIocHP41g0p8LcUUxwciwJ6J5AWfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:99:e8:90:b7:71:f2:15:fc:fb:82:21:16:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Sep 28 11:02:54 2026 GMT
Not After : Sep 29 11:02:54 2026 GMT
Subject: CN=30dedd620c25b2b116dde12ed68dd0dedc8f1317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:3f:c7:4b:e8:05:2d:b1:25:af:ad:e2:b4:
23:ac:f0:95:0d:1e:fb:d0:c3:f4:00:63:85:2f:9c:
3c:35:c4:26:07:5f:65:a1:3d:29:13:77:b6:a6:8e:
fe:75:6d:d9:54:49:c6:71:a7:12:2d:4c:07:61:1d:
dc:37:de:c3:8b:70:f7:4e:89:20:79:df:3a:e0:42:
e5:e2:da:48:ba:40:f0:f3:16:0d:d8:2e:c3:0b:c4:
8b:c3:18:39:09:3b:bf:20:29:0c:27:0c:95:ad:3c:
5d:7d:1d:7f:92:ec:f8:25:81:8a:aa:0a:3b:20:30:
e3:78:8d:73:44:28:60:1e:a7:84:7f:23:fe:99:6b:
00:86:bb:16:d4:5e:79:ae:89:f2:7d:06:fe:40:f6:
a5:03:89:5f:81:0b:3e:3c:ab:76:be:44:23:e8:54:
6c:4a:d3:32:3e:77:86:0c:a8:21:ed:b6:4b:d8:7c:
9f:e7:d3:0d:8d:d9:55:90:c5:4f:ef:3c:ec:33:9b:
eb:9b:ec:61:7f:c5:e2:5b:5d:25:fa:e0:88:e4:fd:
8a:28:24:08:36:51:28:12:41:a6:93:5b:5a:3f:d4:
ea:0b:7d:03:a0:c2:12:e3:20:8e:d0:4b:dc:dd:6a:
f3:72:76:94:10:97:ec:a1:c2:a2:e0:9a:1d:53:d9:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:DD:62:0C:25:B2:B1:16:DD:E1:2E:D6:8D:D0:DE:DC:8F:13:17
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b7:10:56:5e:0c:d4:98:e3:66:b6:55:fa:46:08:7c:68:c8:
71:ed:b9:22:13:0f:94:6c:0b:5d:79:a8:e9:04:b6:0b:60:65:
95:58:f4:e2:7f:90:d7:3b:dd:ec:a1:4a:4a:77:01:9e:6d:40:
a7:71:bc:2f:e4:72:65:00:85:df:95:1e:7a:c3:6c:56:b4:b9:
82:50:72:6d:77:07:ee:37:ee:7d:8d:39:54:06:a0:c4:2c:30:
7a:27:e1:a2:9c:66:56:01:c6:66:c5:7f:22:c8:c5:15:b6:91:
3d:06:e3:4f:b1:16:a2:36:17:21:71:73:f0:c3:76:2b:d2:2d:
6a:9d:80:0b:da:be:0b:0c:e1:72:05:b7:8f:da:7c:28:60:77:
81:00:5c:31:b6:b7:9f:7f:78:2b:70:ac:b3:72:bb:d3:37:b1:
ef:89:cc:3c:29:4a:0a:7c:00:27:53:53:fc:fc:bb:6e:04:97:
ae:0f:79:35:31:6c:56:61:80:43:03:87:3d:93:c2:2b:bc:e1:
26:ef:49:f1:7f:5b:49:f7:8d:1b:a5:e6:66:f0:ad:2f:d0:24:
e8:bc:91:38:cb:8f:8c:65:ce:39:b2:0e:98:58:4e:73:4f:f9:
10:e8:8f:c3:fa:54:f3:35:40:a4:83:b6:fd:1d:45:02:db:32:
34:80:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:16:30 2026 by rpki-client