Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File: _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier: HSA5Mpmi8XEOmxMYSo6DSvihC+hsFSdGHdusLzxSG4w=
Subject key identifier: BE:06:EE:97:FB:B5:9B:68:7A:46:B7:4E:9E:77:37:2A:96:93:EA:06
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial: 01A0DBA8BDA0DB975097A0FD258E5C8D762E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number: 040C
Signing time: Sat 26 Sep 2026 03:01:03 +0000
Manifest this update: Sat 26 Sep 2026 03:01:03 +0000
Manifest next update: Sun 27 Sep 2026 03:01:03 +0000
Files and hashes: 1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: 6h8OH6/tBOqJcWMUS2ka2DXszw7DfYVifB0bKVC44eA=)
2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:bd:a0:db:97:50:97:a0:fd:25:8e:5c:8d:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Validity
Not Before: Sep 26 03:01:03 2026 GMT
Not After : Sep 27 03:01:03 2026 GMT
Subject: CN=be06ee97fbb59b687a46b74e9e77372a9693ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:a0:3c:05:d7:88:88:2a:dd:7b:bd:1e:b7:
93:e6:be:da:00:d6:62:55:f8:9d:cc:92:54:a6:1c:
ac:96:d5:75:7f:18:16:09:45:7c:50:66:18:28:65:
9c:e1:c5:63:db:50:dc:8a:bc:6f:7a:5b:16:02:b6:
ac:10:cb:f8:78:be:b3:02:73:34:af:96:91:46:5f:
26:c4:85:47:bf:9b:eb:ab:5a:11:b1:1c:54:b3:e8:
73:12:d2:b6:f5:3c:0b:59:57:48:0d:3d:5e:8c:fe:
75:52:ae:6f:ae:d4:a0:8d:9b:cb:11:d6:97:ab:ae:
79:50:fa:3d:a0:2e:eb:bb:11:3e:7f:07:4e:30:1d:
b5:d8:f3:28:fa:c5:31:95:0a:1c:b9:32:87:16:8c:
32:eb:4f:44:52:61:d1:62:73:98:8c:47:bf:b1:65:
b7:08:bb:31:69:77:0d:93:b3:98:42:ea:a8:d3:77:
7d:9e:88:57:b7:ae:74:19:19:d4:e2:48:79:d3:ee:
50:e1:67:90:8b:d3:d9:3d:08:ea:ff:65:fb:75:b7:
34:12:c8:50:cb:66:d6:4d:e5:52:80:2e:4e:2c:e7:
f0:1d:7f:25:05:37:8a:a0:aa:e6:57:5d:0d:97:b7:
83:bd:8a:b4:78:d0:a9:ac:3d:43:61:2b:6a:6a:8d:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:06:EE:97:FB:B5:9B:68:7A:46:B7:4E:9E:77:37:2A:96:93:EA:06
X509v3 Authority Key Identifier:
keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c2:cb:c9:ea:0e:32:87:f3:8b:52:69:bd:98:87:20:80:90:
47:9a:02:64:3e:4a:6a:f4:74:52:c8:a4:42:45:37:9d:25:1e:
a0:26:8d:18:4f:3c:bd:21:ff:aa:00:1a:7d:cb:1f:58:49:15:
42:f1:d4:fa:ec:f1:96:0f:8b:46:55:0a:d3:f7:b2:12:27:1c:
44:4a:cb:eb:eb:db:5d:31:1a:d0:bc:a1:cb:83:f3:e3:53:16:
62:94:a9:48:ae:a1:63:85:6e:fb:0d:d7:1a:25:ec:23:40:a5:
3d:91:3e:a8:0a:05:cd:93:1d:3c:64:0e:a0:06:83:e3:33:e0:
f7:f6:63:93:64:3a:d7:86:7a:61:2b:6d:cc:f8:27:26:c7:fc:
a3:ef:3c:c3:b1:d7:dc:d6:bf:e3:84:af:0e:6b:f3:c4:d3:fe:
7d:ea:9c:84:cd:f7:b3:ac:3b:63:2b:7d:f9:25:63:96:1d:9d:
bd:44:14:8f:d3:9d:2d:5b:f8:f0:90:bb:a1:5c:ce:a0:a0:b9:
72:5c:b9:13:0d:81:29:c6:9a:39:a7:4d:d1:ad:57:ac:d7:eb:
f3:be:f1:c0:e0:79:30:c5:11:71:3d:a6:71:7f:db:d4:b6:ca:
58:16:aa:c8:9f:ca:4f:29:3c:2a:cc:f2:93:d7:9a:f5:4b:31:
88:43:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:41:40 2026 by rpki-client