
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: rogSC7p+XJJiCGZCQZx/OSBlMejXjQ1x1IT2TKQccZU=
Subject key identifier: 9C:49:80:7A:75:D9:96:E4:82:A0:54:51:64:A5:C7:4B:D3:CA:7C:93
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 01A1E027F0CC0F938352779364AD74BB0FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 07B4
Signing time: Sun 15 Nov 2026 17:01:16 +0000
Manifest this update: Sun 15 Nov 2026 17:01:16 +0000
Manifest next update: Mon 16 Nov 2026 17:01:16 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: csRtPOyQd59O7j8vBlnoh2kV0ubS2VgIkAH7hyKKDeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:f0:cc:0f:93:83:52:77:93:64:ad:74:bb:0f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Nov 15 17:01:16 2026 GMT
Not After : Nov 16 17:01:16 2026 GMT
Subject: CN=9c49807a75d996e482a0545164a5c74bd3ca7c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:1f:a3:40:34:3c:26:49:4f:eb:37:b5:ac:
c7:66:29:f9:39:3d:25:b3:8e:f6:82:db:5c:a7:f1:
f1:4c:1d:6c:12:5f:4d:2f:a9:30:99:1e:80:c5:a0:
6c:84:6a:9d:3b:07:11:89:1c:63:9e:58:4b:a0:e0:
91:3f:11:c3:11:3f:9b:cc:8c:94:a1:96:c8:2a:4a:
81:3a:c5:fc:eb:0b:6a:ee:68:81:e2:36:d1:0b:02:
7c:2d:34:78:2a:1b:69:42:11:a3:f4:49:1b:66:70:
27:dd:24:41:37:78:5c:35:f0:21:5e:e4:99:3f:8a:
99:be:e7:a7:04:71:86:c0:72:78:70:63:2f:2b:d3:
62:4d:46:b3:5c:28:a4:df:8e:6f:a1:43:63:d9:c2:
c1:e0:53:d6:75:96:4f:05:1d:aa:96:f2:b1:f2:dc:
fc:38:42:1c:d8:d7:4d:c2:f9:46:95:40:3b:f3:3d:
90:16:21:c9:28:a7:67:8c:3b:5d:46:8d:24:27:29:
68:13:2d:07:13:d4:ad:9a:cc:72:dd:79:e3:9e:aa:
df:55:8e:c6:82:e3:37:40:bf:a6:3b:1a:60:5a:d2:
24:b7:3f:50:cc:69:22:21:23:ef:3e:c7:06:99:0e:
b7:10:14:c5:8a:b4:95:eb:b3:81:25:e8:78:73:30:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:80:7A:75:D9:96:E4:82:A0:54:51:64:A5:C7:4B:D3:CA:7C:93
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:27:e2:88:58:cd:57:09:6c:d6:45:65:9c:c2:a1:83:b7:29:
34:4a:f7:35:2f:1b:d9:d0:d4:ef:ba:37:d4:05:b5:7a:0d:59:
01:b8:2e:f9:93:55:3b:28:69:c5:02:62:35:e7:87:e1:bd:c8:
e5:eb:5d:92:ca:53:3c:07:d4:c7:c9:89:8c:f8:00:e8:4c:4a:
57:99:76:95:62:8e:a3:71:5e:0a:c5:19:ee:79:b2:cd:12:39:
b2:4e:80:f8:72:f7:8f:da:fa:5b:f6:c1:7c:f4:cb:1b:98:ab:
25:e0:27:26:81:e1:cc:08:b4:77:81:6e:68:33:c8:89:dc:1f:
44:e4:5c:36:95:80:23:8b:06:c9:0a:ba:e6:bb:17:94:51:41:
82:1e:99:78:5d:88:88:c0:1a:ea:06:f0:05:72:5a:1a:75:9c:
8b:ce:8b:9a:31:c3:10:91:7e:85:92:63:4d:5b:b6:fa:65:f3:
43:00:c1:d9:09:9c:dd:2b:fc:c8:76:69:69:c6:c0:c2:b5:16:
f9:c9:24:44:e9:c6:2b:7f:23:ca:ef:43:3c:a7:44:39:78:a1:
00:c2:29:e2:65:c7:b5:35:8b:05:b1:23:43:5e:ce:f6:9a:8d:
05:39:bf:8a:1a:9f:7a:68:fc:93:27:ac:7b:bf:89:d2:0d:01:
ab:c9:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:55 2026 by rpki-client