Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier: lXFCFrsWgBTU02Bji6eyDUZ0WrlAxMywtBXeTZMwusA=
Subject key identifier: 11:8F:BF:F0:BE:04:03:3D:14:42:1C:A9:82:61:AC:4D:CF:D2:45:DD
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial: 01A0F00B50BC25D6EEBC8B6FDE38BCF23D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 02:01:08 +0000
Manifest this update: Wed 30 Sep 2026 02:01:08 +0000
Manifest next update: Thu 01 Oct 2026 02:01:08 +0000
Files and hashes: 1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: 3ckTfVA4IPhS+BZHFkE6I1FcvEaDOV5UL+XhAA5ugtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:50:bc:25:d6:ee:bc:8b:6f:de:38:bc:f2:3d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Validity
Not Before: Sep 30 02:01:08 2026 GMT
Not After : Oct 1 02:01:08 2026 GMT
Subject: CN=118fbff0be04033d14421ca98261ac4dcfd245dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:59:0f:a2:9c:63:b1:30:dc:db:cc:3c:b3:
ba:e7:55:13:db:3c:84:41:68:5e:d8:5b:9d:a7:47:
a8:29:a1:a0:f3:73:b0:dc:e9:e7:ae:06:fe:c3:ba:
dd:79:78:4c:64:88:3a:e4:f2:23:85:6a:8c:df:10:
18:65:0a:26:1f:79:fd:95:71:c5:a9:e1:b1:26:7b:
8e:52:f0:5d:e9:69:20:46:82:6c:13:4f:6f:7d:b8:
a2:45:7f:9e:c8:57:c3:7f:f1:3f:c0:5e:48:5a:73:
36:28:52:ef:54:75:b5:6c:45:d3:a6:f3:b1:24:a1:
bf:e1:49:90:fa:fe:01:05:65:72:5a:1b:0a:a5:f8:
bf:1f:1a:ea:9a:4c:84:52:82:be:2b:04:be:a9:37:
c1:58:19:21:1d:50:19:be:c6:d2:67:88:3f:ee:ee:
e5:be:20:92:cd:93:17:5c:5a:be:fa:76:72:d4:9c:
f7:cd:aa:65:aa:7a:53:29:73:4f:47:5c:1b:e7:82:
4c:8b:50:91:d4:5d:b3:e8:46:91:9d:95:7d:0b:4c:
4a:f0:b2:3d:35:f7:32:80:b8:03:15:8c:28:5a:c0:
ee:5d:5b:69:e2:39:fc:59:76:61:46:4e:7d:2c:3d:
a1:7f:6c:6d:a9:eb:bd:ce:7c:f8:6e:47:df:c1:e2:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:BF:F0:BE:04:03:3D:14:42:1C:A9:82:61:AC:4D:CF:D2:45:DD
X509v3 Authority Key Identifier:
keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ff:83:8d:ee:d4:1c:64:8b:0f:27:9a:bd:7c:bc:64:11:a5:
26:03:0c:7b:b0:26:00:ea:7b:c6:82:bc:ac:ba:c3:b4:95:88:
0e:ea:7b:c9:00:57:c3:47:73:2d:89:46:ad:9a:f3:6e:d8:67:
28:f6:47:ff:82:6a:36:73:30:d5:94:66:d1:81:dc:b8:34:0d:
2c:e6:ed:f2:4a:0a:e4:96:c9:f8:f2:78:b9:66:ea:c9:67:03:
c9:1d:c1:e2:d3:1a:d3:7a:10:e3:a1:4b:33:96:4c:8a:b5:0b:
fd:69:ae:aa:ce:87:5e:f4:23:18:94:aa:f5:2e:69:32:d7:6a:
48:49:d5:20:a0:7b:e3:d9:3c:46:49:eb:1b:b4:e3:e8:c3:5b:
9e:6f:b6:55:f5:e7:0e:2e:32:82:b8:c2:37:05:65:af:a6:3e:
84:22:1c:a0:95:3b:88:f7:9a:83:2b:f8:5e:9b:75:1e:e0:0f:
92:7c:13:37:e2:8c:57:a2:92:44:f1:9b:7e:0c:9e:b6:23:e5:
1a:c1:32:5f:36:28:c9:ef:e5:31:bb:8d:a0:b5:e3:f5:a6:01:
f1:1f:2a:1b:94:48:99:8f:8c:f4:4e:58:0e:c7:45:60:de:ca:
60:8f:cc:8c:2e:b5:bc:35:75:25:e8:9a:e4:1f:a4:43:69:bd:
61:8a:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:02:49 2026 by rpki-client