Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: W50G8FqZxWTW899qhkyG/fCVXCln86yZ/s3Dcst74uo=
Subject key identifier: 13:63:56:D0:A9:6B:44:7E:E6:16:6F:0D:80:D5:79:5E:CC:E1:64:A7
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 01A0CFDB3BBA88E2C2CC5D5D1562BFC2A101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0727
Signing time: Wed 23 Sep 2026 20:00:46 +0000
Manifest this update: Wed 23 Sep 2026 20:00:46 +0000
Manifest next update: Thu 24 Sep 2026 20:00:46 +0000
Files and hashes: 1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: PlGkYJJY0pWxnG6HnJihqMAkAA4qgmV0u6EpvMi9Zso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:3b:ba:88:e2:c2:cc:5d:5d:15:62:bf:c2:a1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Sep 23 20:00:46 2026 GMT
Not After : Sep 24 20:00:46 2026 GMT
Subject: CN=136356d0a96b447ee6166f0d80d5795ecce164a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:af:11:03:15:6b:38:f6:ef:d0:1d:fb:c6:
03:0e:54:c6:c9:d2:2c:39:cf:87:c5:5d:f5:a6:0e:
28:d7:5b:4b:0e:c8:fb:86:16:2d:39:e2:35:36:f2:
30:78:85:87:be:4c:cd:22:95:1f:3d:b2:50:02:f4:
7a:f8:01:78:ab:e0:8d:d0:94:ec:b5:c0:44:40:41:
6e:cb:8c:d4:32:24:3d:20:14:1a:26:b7:d5:bb:f1:
1a:7f:cf:70:f1:9b:68:34:3b:5d:13:26:d1:58:42:
9a:ff:a0:2f:7a:f1:2b:74:bd:ec:34:91:ba:74:2d:
d2:bd:70:ed:06:81:56:8a:0d:81:c4:ba:0c:ea:d1:
9c:4c:df:34:33:32:fc:76:ad:d5:d2:55:6d:a2:61:
c9:fe:16:c0:a9:8e:5c:5e:37:4d:9f:56:f8:4e:fe:
b2:14:1e:0e:25:bc:6b:13:d0:d0:54:51:79:20:85:
fe:46:59:e0:a9:d3:ec:ef:1b:1b:27:b3:3a:39:8a:
eb:a2:e2:78:08:0f:2f:0a:e6:17:c0:6d:23:eb:e5:
10:a1:fd:1e:74:a4:c1:85:62:06:79:80:b5:11:a2:
1f:f7:52:e7:7a:bc:8f:53:18:09:d5:88:d1:ed:2d:
10:89:b1:e9:07:75:04:71:59:a9:05:c7:70:69:a2:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:56:D0:A9:6B:44:7E:E6:16:6F:0D:80:D5:79:5E:CC:E1:64:A7
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ba:59:a4:48:44:34:c6:e0:e9:bd:3e:12:f2:21:e3:16:57:
b8:b3:ed:1d:c3:c8:9e:fe:cf:78:21:04:ce:eb:1e:8f:97:fb:
6c:53:c0:6a:3a:6f:1c:91:67:ac:52:11:e7:c9:12:6b:34:7a:
6a:f9:9f:57:29:0e:51:fb:b5:eb:03:40:56:33:33:71:a0:16:
35:df:60:07:e1:5b:28:89:ff:6f:96:65:c1:b1:fd:77:5e:d9:
de:d2:70:49:43:de:f7:1b:14:32:e3:43:25:f4:ed:84:ee:bc:
55:32:74:a6:da:50:45:c0:c0:90:c6:1d:30:86:14:cd:4a:a3:
7d:a2:5c:3e:eb:ea:d3:30:51:d9:ee:4f:32:ed:1d:e3:0e:b7:
e2:9e:b0:de:cd:f3:c4:02:d7:f7:45:d1:e2:36:c0:81:94:56:
ef:af:0c:43:4f:c1:f5:d5:2a:8f:e7:f5:c9:c9:09:c4:6b:29:
fa:b2:6c:7f:47:e1:dc:b8:ce:ab:98:90:de:e9:d7:15:b3:35:
40:c6:68:dd:0b:89:17:88:51:e2:40:e2:a7:8a:6a:9e:25:94:
99:d7:0b:29:0a:5e:e7:17:cb:c5:6c:ab:40:63:ce:19:e6:e1:
0b:23:fa:03:20:eb:e3:b0:b7:36:02:f1:2c:6e:a6:12:44:df:
0a:e5:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:48:57 2026 by rpki-client