Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: 1H+nqGmdawb+Yiby/wactn92nyTiLeijYLOkwWr1aH0=
Subject key identifier: 81:B0:18:E6:A2:A2:63:07:B6:AC:DD:4A:3F:A0:85:F8:31:0E:A8:38
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 01A0D1C98F9F226CA68DE25D522D2D49C306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0728
Signing time: Thu 24 Sep 2026 05:00:42 +0000
Manifest this update: Thu 24 Sep 2026 05:00:42 +0000
Manifest next update: Fri 25 Sep 2026 05:00:42 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: lPz+xVa2iY3StvMz0ZdPFVjl6Jhk0MdTO6VqT6dhM7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:8f:9f:22:6c:a6:8d:e2:5d:52:2d:2d:49:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Sep 24 05:00:42 2026 GMT
Not After : Sep 25 05:00:42 2026 GMT
Subject: CN=81b018e6a2a26307b6acdd4a3fa085f8310ea838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:4c:15:bc:37:05:3b:34:c2:31:5f:3d:75:
b7:c9:32:c2:44:dd:b1:fb:39:47:df:01:ff:54:51:
89:c8:b5:b0:37:78:90:be:8f:68:58:20:44:e8:b3:
97:e3:60:8f:e8:23:a3:a4:01:71:46:34:ff:cc:09:
75:23:71:72:a8:b5:42:de:3a:80:dd:0a:a5:09:b2:
f3:96:9d:e4:eb:4b:3a:ee:c1:97:79:c6:d2:9f:2b:
1d:a7:95:be:d7:a9:80:f3:a2:fa:55:7d:c7:bf:9c:
8e:5d:38:42:6e:10:14:a2:29:7a:c0:3c:5b:1d:d8:
8a:21:2a:13:ed:74:57:c2:0e:53:be:f5:ca:6a:93:
e0:2d:9a:60:2e:18:06:87:53:1d:b2:f5:f3:49:54:
5b:52:d6:4f:fe:20:d3:a3:6f:ab:3b:fc:85:5f:3d:
6e:6b:7a:27:7f:94:c2:59:3f:29:9b:1b:94:91:53:
fb:5c:49:a7:54:76:c0:7c:92:8c:26:10:b5:a4:e1:
6d:bd:6e:70:01:2b:2c:fb:a2:73:93:82:d8:6b:5d:
75:8f:73:85:db:62:95:47:e4:3e:90:44:ea:4f:9f:
f4:97:6c:84:c4:1a:14:d3:c1:c4:d8:d1:fe:4e:d2:
2b:a5:e9:5a:da:f5:3e:64:94:7f:a9:71:1d:54:10:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B0:18:E6:A2:A2:63:07:B6:AC:DD:4A:3F:A0:85:F8:31:0E:A8:38
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:36:eb:9d:d4:1e:a1:f4:b8:4f:b7:c6:af:6c:e6:52:34:
ae:26:99:25:3a:4a:08:4f:51:cb:48:32:3e:b1:a4:3e:00:44:
d7:24:6c:06:84:7a:29:07:6e:db:d8:78:7b:b4:b7:f4:cb:07:
2c:24:d0:41:ea:79:2d:74:e5:ff:b8:47:79:45:3e:fe:2c:8c:
5d:e9:06:00:23:fe:b0:eb:f0:9c:65:f1:05:8b:c3:16:a9:6a:
19:6e:67:2b:60:30:5d:2b:4b:5d:ea:72:81:03:ce:86:cb:45:
d4:2f:12:14:a0:d2:ab:3e:0c:77:40:e0:43:6f:1a:80:b9:53:
33:cc:54:6d:87:a3:2e:d6:dc:08:a3:4f:24:5d:18:b1:38:02:
bd:29:f2:70:c3:c3:ae:f7:ab:14:f4:83:ed:fc:f2:12:1c:ad:
48:56:0e:67:b9:7a:c7:cd:50:f0:ca:42:f9:0d:81:f3:5b:1f:
d5:75:36:62:ff:59:85:a5:c0:91:9d:88:8b:34:22:22:f4:b2:
10:cb:c3:f9:7b:d2:2e:f2:c8:95:33:d2:48:d6:54:0e:26:4b:
83:2e:55:f5:91:ef:4d:d9:c8:f7:0b:4a:59:99:fe:c9:48:32:
7c:57:36:9f:fc:56:4c:ac:1c:42:4c:25:89:ef:8d:8e:ef:8f:
c0:f0:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:47:53 2026 by rpki-client