Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: 8+E59ishGCEtT/PdG5WftfQ5gvecfGeAH/Jaf9xjIrI=
Subject key identifier: B6:FD:8D:42:DB:74:ED:F0:9F:57:01:2E:C4:E4:3E:22:07:9C:95:83
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 01A10E4CC726DA0960BCA787EF2C7238094D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 1154
Signing time: Mon 05 Oct 2026 23:01:14 +0000
Manifest this update: Mon 05 Oct 2026 23:01:14 +0000
Manifest next update: Tue 06 Oct 2026 23:01:14 +0000
Files and hashes: 1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: 2dAMH0CpugKIVUh3g2bf3J/0AVIaL+Qwi1mTOBq3ChU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:c7:26:da:09:60:bc:a7:87:ef:2c:72:38:09:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Oct 5 23:01:14 2026 GMT
Not After : Oct 6 23:01:14 2026 GMT
Subject: CN=b6fd8d42db74edf09f57012ec4e43e22079c9583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:f3:99:d7:de:61:f6:37:0d:78:31:1f:0b:
8b:7e:11:1a:c5:31:a1:e6:fa:63:84:ac:6b:6d:a2:
50:7e:80:f3:f0:a2:f9:92:36:5c:21:a2:be:df:2e:
c9:99:97:9e:bb:31:d4:65:72:85:91:08:04:97:5f:
9c:38:d1:c7:e4:60:39:83:e2:72:b6:10:58:a8:08:
fe:00:6c:fe:c3:43:fc:c5:01:80:8f:2d:4b:8d:a7:
fd:83:ff:da:f0:32:93:67:71:07:27:63:9f:f8:91:
53:96:0a:9b:9c:bd:04:06:82:b1:04:42:01:9c:95:
64:72:07:67:01:39:5c:1d:56:06:a4:08:15:5c:73:
74:71:78:80:64:e6:67:f4:c3:8f:13:f2:4a:5d:2d:
b7:8a:84:0e:a1:de:50:69:0a:02:b4:30:dc:36:c4:
b7:20:66:6a:40:8a:8a:9d:46:aa:50:40:ef:78:06:
b3:d0:7c:ff:dc:30:85:88:fc:5a:b3:5d:de:37:79:
76:ae:d0:20:40:ce:36:19:20:18:de:43:3e:42:ca:
ad:ae:79:4a:49:fa:ec:68:04:a4:c4:78:e2:8f:f1:
43:d3:0a:e7:f8:98:61:9b:53:86:6b:ae:7e:0f:ec:
16:06:89:a2:10:41:b4:ee:03:35:4f:bb:eb:00:9f:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:8D:42:DB:74:ED:F0:9F:57:01:2E:C4:E4:3E:22:07:9C:95:83
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:92:68:45:b7:da:c9:0f:6d:93:e1:57:3d:c7:7c:51:f6:d8:
50:d8:f1:e5:d4:88:e2:7f:24:be:f2:28:95:9e:23:2a:e9:d8:
04:eb:3d:57:19:b7:57:b7:fb:07:9e:1a:aa:bf:7a:99:60:49:
e8:80:c2:9d:b2:d2:f7:7a:6a:f1:62:fb:31:57:72:d9:c2:2e:
68:08:9e:77:15:55:33:29:ee:7f:88:ed:32:22:aa:ba:ba:53:
cb:54:ca:e3:24:5e:1e:67:89:29:e8:19:1e:e9:0a:81:b4:80:
ea:af:09:df:e1:ee:89:4a:39:c1:20:65:f2:c5:7c:d7:e7:5d:
1d:00:38:bc:66:c7:d3:c7:90:d6:92:2f:cc:5f:c1:c0:ab:ed:
e5:06:b1:87:b9:16:98:37:23:35:19:52:a1:49:63:64:63:51:
66:23:e2:e6:81:1c:45:9a:42:9a:a8:6e:b3:48:2c:1c:63:90:
5f:0f:b8:69:40:e7:5c:98:c4:c9:91:ae:35:85:e0:27:65:e0:
12:af:a6:8a:f1:94:62:06:57:dc:41:d9:35:dd:26:cb:45:ff:
36:26:77:c4:a9:00:ec:8e:f0:74:52:c4:69:d2:50:33:ba:8f:
bc:71:6f:93:47:19:82:dc:76:1a:87:55:a5:c9:2c:0e:e2:84:
01:c7:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:23:58 2026 by rpki-client