Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: 4whanUnqMcAEBUf8Kw6W19p4hp9kbPdn947HGKAOU8w=
Subject key identifier: 31:C8:ED:FF:76:05:DA:FE:49:5C:94:1B:45:CC:44:1B:89:F7:31:80
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 01A0D382CC6A326E92CA622FA1F91664FC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 13:02:39 +0000
Manifest this update: Thu 24 Sep 2026 13:02:39 +0000
Manifest next update: Fri 25 Sep 2026 13:02:39 +0000
Files and hashes: 1: GD5N1e3Ei3ORndrSHYwwOCJ1-ck.roa (hash: snYjDxWHMkR6zUe+lhv2/FAqfemlL5lVnJY940jUknk=)
2: gX94KHujeqBgf1OQw3kvDwZSXYw.roa (hash: iWZ0LIZisJBiwchMv/ZPll0lS2mW3PKbeX5QIpLootw=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: AvzcuW+P4tKuohCNA3vlehas147TnO2/fYVN7bfJoc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:cc:6a:32:6e:92:ca:62:2f:a1:f9:16:64:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Sep 24 13:02:39 2026 GMT
Not After : Sep 25 13:02:39 2026 GMT
Subject: CN=31c8edff7605dafe495c941b45cc441b89f73180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:cf:27:9e:80:c2:51:14:d5:e0:71:8b:98:
e0:c6:c4:c9:d5:3a:35:cb:96:ea:50:4b:42:8d:c6:
a0:2f:ac:85:d4:62:0c:5a:d2:61:b5:1f:7e:7b:2c:
ae:c7:09:7b:9b:3a:cf:47:98:31:37:d4:8d:70:ce:
85:f7:75:f2:3c:68:50:d4:34:d2:c6:e5:c9:c3:0d:
a4:14:91:b0:fc:0f:5b:e8:3a:8b:8b:a1:f5:98:b4:
62:7a:bd:36:72:31:28:5f:1f:69:7d:b6:14:82:f0:
84:6a:5b:89:8b:a8:aa:c4:5c:0f:4c:ff:b8:cc:d4:
b1:9c:5b:da:2f:b9:0e:7f:d0:89:db:bb:b4:9a:7a:
3b:9b:44:60:4e:cf:04:ed:bf:58:28:4f:5c:73:69:
92:05:2d:1b:8c:1e:ad:73:44:ae:8b:32:f5:fb:12:
e4:15:0a:2f:20:67:61:52:e2:21:b6:d9:a0:6c:5f:
4f:12:07:52:f9:00:e2:a6:e2:74:42:6e:cd:cc:0a:
09:f8:28:c4:68:ab:be:6c:37:36:43:53:89:53:99:
40:ed:15:5d:fa:0d:6a:12:21:df:74:09:38:ee:32:
cc:ec:7a:e7:cb:54:fe:39:00:6b:35:81:7f:e3:9c:
1c:ed:0f:36:38:a0:72:2f:85:f4:e8:e7:8c:2c:ee:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:ED:FF:76:05:DA:FE:49:5C:94:1B:45:CC:44:1B:89:F7:31:80
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:36:dd:5c:88:94:75:89:36:3f:a8:9f:4d:b5:f8:cd:87:65:
84:e8:04:eb:a2:d8:2d:1b:a3:0c:3f:4c:e0:c5:d2:6c:cb:eb:
1a:08:6a:d6:29:5c:f0:57:54:b4:4b:66:08:68:0e:5b:75:73:
a1:e3:06:41:62:10:0e:dd:03:fa:a7:72:7e:5d:4a:06:f8:51:
0a:3a:b7:d7:60:01:f9:58:09:fb:16:3d:21:80:bd:b1:19:c1:
e3:14:ef:cf:87:d7:b0:02:b1:94:cd:e8:d8:27:20:ed:ec:73:
a6:86:2e:21:51:90:92:c3:54:d6:22:84:bf:3e:6e:7e:74:96:
19:7b:5b:c2:45:a8:cf:7c:09:db:ac:4a:d5:59:94:10:2b:95:
b9:a5:0b:41:72:80:b0:bf:d7:fa:ba:06:0e:4b:2d:74:25:d7:
da:b3:47:f0:94:ea:4c:f0:d5:c9:b8:74:2f:87:42:c0:53:9c:
91:06:1e:7d:76:2e:96:2d:d9:8d:ad:08:6d:a7:98:54:e8:05:
db:ea:22:f3:87:c3:32:ce:7f:59:74:25:c4:0a:0b:c6:89:af:
f9:39:ba:c0:16:3c:01:54:a1:59:af:32:a5:a4:1b:c1:a5:06:
bb:af:bc:c7:d4:dc:8b:6c:f1:2d:77:e9:0f:6e:e1:6b:25:a6:
d1:95:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:10:08 2026 by rpki-client