Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: G8iiNmSxTuCOBYPRZPKfj7bnyFR5NbMOKim850Sul80=
Subject key identifier: 57:ED:D4:97:85:A1:96:1E:86:DF:93:EA:D0:61:D6:16:E8:0C:81:DD
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 01A10CCBB3BFD912738EE7C1E905303C94C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 16:00:38 +0000
Manifest this update: Mon 05 Oct 2026 16:00:38 +0000
Manifest next update: Tue 06 Oct 2026 16:00:38 +0000
Files and hashes: 1: 1-cSechBeG_43VlV3W2mEZPKzYGE.roa (hash: 9e/rHvRg0gRAUAYkVXIF5QXnGheb2t+lp0PsH5x3v20=)
2: M8hdjmtzd8hrW3Y8l4qmpPKkDK0.roa (hash: J/z8EzYcLAwxjC5JuidTonZF1YMKXrRg2Bt2mDC3F7U=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: 7wWAJMgab1g0figjkasuBLrsQUPKAe8mc6rh8It9obQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:cb:b3:bf:d9:12:73:8e:e7:c1:e9:05:30:3c:94:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Oct 5 16:00:38 2026 GMT
Not After : Oct 6 16:00:38 2026 GMT
Subject: CN=57edd49785a1961e86df93ead061d616e80c81dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:48:8f:92:81:21:93:a8:0c:15:bd:57:e4:
68:b8:1b:00:a6:40:f6:7d:d1:08:a3:2a:ce:d3:76:
0b:2f:65:fb:b6:28:e7:e5:88:27:31:76:ed:08:48:
30:a6:c2:78:4b:5a:8a:ba:3b:0b:55:2e:c0:27:de:
a6:67:13:c6:20:50:e5:1f:13:22:09:3d:7e:ad:e9:
14:d6:58:31:86:bf:85:3a:d9:88:5c:f2:81:a9:9a:
d6:7d:78:a7:97:24:0c:20:4c:96:5e:75:fa:34:83:
84:8d:dd:7c:41:e1:46:1e:6c:85:44:1b:d5:c2:b5:
a3:fc:ed:35:08:3d:7b:e3:7e:cb:1c:45:6f:03:10:
ee:a3:e1:41:06:c6:3e:b7:a3:05:08:d5:40:2a:e8:
8f:6a:d5:5f:81:f5:37:c7:35:63:6a:3f:6a:ae:a6:
23:bd:91:b1:2c:95:69:17:06:54:ba:be:19:81:d0:
43:a0:f7:12:18:37:17:5e:df:f1:4e:46:b1:cd:cb:
1c:14:56:cb:b5:82:e3:f6:6d:77:1d:17:b9:86:e9:
46:18:0d:67:61:4d:78:40:93:b6:98:a9:5d:c7:82:
85:ba:d4:74:25:08:02:4f:f1:25:ed:b3:8c:32:8b:
c6:c6:20:bb:2b:78:fc:0d:03:c4:1e:1e:23:5c:52:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:D4:97:85:A1:96:1E:86:DF:93:EA:D0:61:D6:16:E8:0C:81:DD
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8a:9e:7c:12:bb:3d:eb:e7:ce:51:7b:56:e5:4c:24:24:94:
7a:b5:a5:2c:b5:00:b5:0d:17:ac:07:fb:7f:c1:f8:cd:b8:7d:
bc:3d:47:85:68:1a:0a:54:51:7a:e2:90:9a:a5:e2:3e:07:aa:
ba:4c:ea:ee:ba:9a:ab:86:b5:51:ca:86:62:be:77:e4:04:8c:
fb:d3:a2:2d:11:76:a4:c0:93:a2:e4:e5:54:a0:51:f0:cb:55:
f3:d0:6b:71:4c:fc:4c:8c:4c:ab:bd:42:63:c1:ae:4f:7a:bc:
fc:8e:0e:18:43:2b:19:74:a9:a2:3e:3e:56:df:8f:1d:70:85:
0b:af:5e:c5:59:2f:c4:6e:47:34:5c:72:0a:d8:e7:19:67:ae:
32:16:bf:0a:35:ac:38:7f:94:84:b2:e6:e2:d2:48:7d:21:21:
14:29:62:7c:ee:38:39:6c:15:b8:98:1e:69:77:8f:1e:8b:23:
3c:f3:55:e1:1c:32:63:c0:1d:ce:35:ae:99:cb:47:34:be:68:
69:f5:2e:7f:a2:db:06:7f:47:86:2d:a8:5d:7b:b3:55:a2:56:
f4:05:d4:84:77:aa:9e:2f:f0:fb:d7:9f:78:b9:16:94:2f:d6:
3d:50:1f:9e:8d:58:b8:68:9f:44:6b:4f:91:f6:96:a8:fc:ff:
ef:1d:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:10:32 2026 by rpki-client