Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: mHXdwBca8SvBd451283VjyIKEWo7DdngS2FgcIrJkvE=
Subject key identifier: 22:BE:19:57:03:80:07:A0:DD:72:DC:E2:79:D6:C2:72:27:66:5F:8C
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 01A0D2DED0B91F82E91D3515E1F6DCB6B1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 10:03:32 +0000
Manifest this update: Thu 24 Sep 2026 10:03:32 +0000
Manifest next update: Fri 25 Sep 2026 10:03:32 +0000
Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: xGzRn1tCRemMzShIJb64gX7EkKzcHUzkQefAuxUFS+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:d0:b9:1f:82:e9:1d:35:15:e1:f6:dc:b6:b1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Sep 24 10:03:32 2026 GMT
Not After : Sep 25 10:03:32 2026 GMT
Subject: CN=22be1957038007a0dd72dce279d6c27227665f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:f2:45:fc:45:76:2e:77:8e:73:8d:dc:55:
ed:d7:74:8e:7c:89:41:52:d5:16:76:f8:3e:c3:5c:
e3:17:7c:41:41:9c:cb:2c:b4:5f:b4:5b:58:ea:ce:
5d:be:2f:96:d0:15:9f:5f:a4:fc:f8:02:57:6a:7b:
0c:89:ec:df:e1:ce:ba:8e:ef:3f:bd:a2:7b:41:06:
06:15:76:ad:21:4e:d6:fd:7e:73:9b:ce:c8:4c:fa:
fe:a2:60:51:a3:af:de:08:91:a5:8e:e7:1c:32:e9:
8f:c8:db:d4:ff:6a:d2:dd:f7:cd:dc:c3:ab:18:86:
e3:8c:25:08:40:21:1e:63:5c:f6:a1:86:b9:fb:77:
95:d4:56:70:54:38:31:bb:23:9e:cc:d0:a9:d3:2b:
e5:3e:d3:6b:fc:35:ac:61:6f:ac:78:86:bf:dd:17:
ec:0c:59:bb:7c:04:ec:47:ed:3c:63:e1:ad:f5:2f:
b3:b8:90:e7:c8:d6:19:42:35:44:eb:f9:5f:5c:d2:
eb:f5:c9:b2:1c:21:48:cc:d7:ac:a8:c0:3c:9c:3a:
48:4c:f2:5c:66:77:08:a4:89:49:10:12:4f:5d:9d:
83:83:8f:68:23:87:0d:f7:ed:19:a3:5f:15:0f:21:
c6:50:f1:77:2a:f0:76:42:f4:9f:25:19:41:91:c5:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:19:57:03:80:07:A0:DD:72:DC:E2:79:D6:C2:72:27:66:5F:8C
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:03:c3:1c:3c:ee:49:cc:1f:5d:78:3c:e4:0f:f7:3e:50:18:
18:30:72:fd:44:77:b3:23:dd:5a:4d:a7:cf:c4:8f:6f:28:88:
ce:ee:fe:68:b0:02:e6:52:bd:77:14:19:a0:7a:0a:16:63:6d:
d3:35:c1:bb:a6:1d:fd:18:93:5e:9e:f5:a5:dd:3e:dd:5b:5c:
76:e7:6b:20:da:26:e6:37:f5:67:43:b0:ae:81:66:87:e0:85:
13:c7:cf:2d:79:7d:f7:7a:d0:b8:36:af:62:bd:df:46:c2:2c:
cd:b2:ac:15:2e:52:64:b0:35:23:3b:c9:41:a9:b7:bf:44:e4:
82:6a:12:86:6e:28:1a:7e:61:ce:6e:ee:7f:2c:6e:9d:cf:23:
e0:1b:50:09:14:fe:4d:d8:0d:2a:4d:dd:5f:a6:50:91:bc:be:
05:db:d0:77:79:cc:ff:28:22:f1:63:d7:2c:7a:8d:d6:f9:bb:
30:c9:28:72:06:03:95:ab:f6:d2:40:c8:22:1b:11:6f:29:d8:
bc:f6:61:f4:86:90:c2:99:ae:3f:f6:43:4c:09:29:e9:8d:04:
a7:ae:d0:4c:e5:20:c2:75:99:10:27:13:13:98:a6:16:d6:9b:
07:01:19:58:df:2a:68:2b:11:fb:b2:ad:d0:94:1a:ee:d2:fd:
34:62:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:31 2026 by rpki-client