Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: WP7kfMp9Q8l2B30ZX1pShZz+8rDAKGteOL1T9dXSr8w=
Subject key identifier: 7D:68:2A:EB:78:F0:59:E7:5B:E1:B4:89:C0:4F:36:1C:33:EC:E8:A2
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 01A0DE0575A0C20148E043D5BC162E540DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 113B
Signing time: Sat 26 Sep 2026 14:01:34 +0000
Manifest this update: Sat 26 Sep 2026 14:01:34 +0000
Manifest next update: Sun 27 Sep 2026 14:01:34 +0000
Files and hashes: 1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: kLtpPaV3KVnCLQMDj0X8e+d4hmNfS53O0SIVbuj7OYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:75:a0:c2:01:48:e0:43:d5:bc:16:2e:54:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Sep 26 14:01:34 2026 GMT
Not After : Sep 27 14:01:34 2026 GMT
Subject: CN=7d682aeb78f059e75be1b489c04f361c33ece8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:28:2f:68:45:1b:27:59:fc:dd:9a:5d:bf:
da:8f:dc:85:48:60:45:c1:91:4d:7f:6d:f8:25:0d:
9d:1f:8d:d8:21:ed:e1:f7:c4:7d:fa:c0:4f:2e:0d:
86:f2:34:4c:ec:05:72:7b:68:4f:78:0b:e5:aa:7b:
ec:11:63:c9:de:72:63:f9:23:ed:0c:d4:9e:70:da:
2e:21:17:fc:ee:f3:2a:81:32:5a:bb:4c:02:e8:10:
9c:07:7c:0d:a3:c2:9e:2d:00:82:71:c6:53:2b:c4:
ea:41:88:5f:6c:ec:23:a8:40:61:68:9f:16:95:d4:
b6:9a:a8:5b:1e:ea:00:7b:3a:88:62:af:cf:a4:02:
b1:c9:a3:3e:0a:3a:ec:08:41:8d:14:b1:ec:2b:ca:
53:3b:52:e7:ba:fb:70:9f:6f:bd:88:d6:2e:b3:10:
4f:ba:c7:e1:b9:d1:f1:de:20:22:8d:b1:b6:a2:a6:
d4:fa:64:56:a1:18:d3:b4:e5:0c:04:c7:48:85:55:
6c:02:fc:e7:88:ff:32:4a:c6:d7:29:3e:a4:5f:6a:
01:8b:6b:e9:04:47:4f:56:c4:87:f3:2c:31:f9:46:
99:88:a7:44:9f:50:b3:0b:41:ed:2b:11:0f:13:4a:
4f:a5:40:84:20:a6:19:84:46:66:89:5a:65:a0:f2:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:2A:EB:78:F0:59:E7:5B:E1:B4:89:C0:4F:36:1C:33:EC:E8:A2
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d7:36:35:b3:aa:d2:75:da:f4:fb:76:5f:b8:0d:19:f5:7a:
d3:91:6d:b2:df:cd:ce:0a:b1:5a:e7:62:6c:5f:19:78:cd:14:
fc:bd:c1:86:7d:41:27:1c:3c:ae:da:ae:4b:d5:f2:4c:81:79:
1f:da:ed:f4:1e:1a:28:92:72:08:6a:d3:af:8f:3d:ab:d9:30:
96:e8:3a:a5:02:3a:43:8f:c2:53:56:db:51:5c:36:72:ce:dc:
76:ff:a2:92:a7:fb:58:c9:98:84:7b:87:54:f9:a7:a3:e7:96:
57:2c:3e:1e:74:c6:f9:0f:66:0c:54:84:af:25:fc:f9:29:c4:
22:07:02:6e:23:62:18:c6:de:fc:12:de:6e:d7:45:27:1a:db:
56:13:82:89:c5:57:d8:93:c0:f3:84:2e:a1:81:74:32:d5:c6:
ad:31:c4:0d:70:c9:66:cb:24:ba:d0:cf:21:e5:4c:c5:40:56:
2c:f1:b0:bc:6c:21:f1:c3:28:cd:a2:98:d0:d8:03:49:aa:00:
9a:9c:aa:8f:6f:68:df:6d:74:52:94:4a:2b:f4:de:83:83:9b:
30:fc:86:6d:17:e1:8e:a1:02:3c:2b:69:a2:10:29:18:33:58:
58:43:0e:47:30:36:64:f2:27:56:7b:ba:dc:85:91:91:53:49:
45:3a:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:43:38 2026 by rpki-client