Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: 55U2vHdDGb9Ao7yBGjaE2hHx31aMJgMQIFJPxmUMFz8=
Subject key identifier: 3C:8C:6E:32:F1:BB:82:AC:DA:51:0C:8A:24:86:44:C7:0E:78:FB:21
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 01A0EB89A07949D6D0A436928E94B96DECA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 05:01:00 +0000
Manifest this update: Tue 29 Sep 2026 05:01:00 +0000
Manifest next update: Wed 30 Sep 2026 05:01:00 +0000
Files and hashes: 1: UQtxD39HgTwCJsw7WuZPliVb6kM.roa (hash: IcgnZ/5C7YQ9lKupVnJEvIWHWfxL8KqAvTe7EONdw78=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: MSXvSLwldbwHUKedFvj0qu2pBz0TiAmY8co1d0D8rDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:a0:79:49:d6:d0:a4:36:92:8e:94:b9:6d:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Sep 29 05:01:00 2026 GMT
Not After : Sep 30 05:01:00 2026 GMT
Subject: CN=3c8c6e32f1bb82acda510c8a248644c70e78fb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e6:2b:f1:a6:23:b9:47:36:5c:88:fc:d4:17:
ce:b9:98:2d:96:4d:c2:1c:31:62:d0:bd:c4:9e:d2:
b5:ce:98:fd:05:ba:7f:6c:65:1a:b7:ed:41:66:f5:
94:f6:c5:85:ce:cb:2a:2c:ee:6c:94:86:72:5b:db:
c0:f0:e2:06:f4:de:47:74:9d:c0:a9:e8:f0:f7:c2:
44:34:07:a8:fe:58:ee:7e:80:33:3a:61:46:19:19:
9b:53:2c:4e:75:1b:dd:3e:e6:d2:94:dc:90:33:47:
e4:98:b7:74:ef:30:32:65:42:ac:f8:bc:f8:88:cc:
33:2b:31:41:38:05:13:b6:fe:25:14:a8:ff:6c:f9:
ee:d3:d7:cb:42:91:5b:53:4b:a6:84:56:a5:9e:35:
2e:90:5a:46:fc:bf:8e:28:ca:a2:16:3f:48:94:24:
3f:1c:eb:9d:6e:19:ab:38:cc:dd:f1:b3:aa:18:56:
45:2f:da:0e:d7:e6:1f:d3:8b:c0:c4:36:2d:9b:e0:
b5:69:e4:71:aa:20:d7:ce:f6:1d:cc:20:77:17:14:
7d:e6:d0:8c:26:e3:e0:89:bb:ee:a9:16:41:fd:c1:
2b:b8:15:8b:28:12:7a:78:f8:9d:4a:1b:20:e4:e6:
e3:73:1b:94:01:37:7d:ca:c4:8f:e1:e7:02:7d:e9:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:6E:32:F1:BB:82:AC:DA:51:0C:8A:24:86:44:C7:0E:78:FB:21
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:71:1f:da:c4:45:46:ce:5f:6c:6d:1f:86:8b:10:fb:f1:dc:
91:e7:fc:ed:73:5a:5b:3a:3e:99:9e:fd:1b:65:3c:7c:61:2d:
49:3c:28:0e:de:47:fa:26:30:78:b8:9d:0f:46:a8:c5:21:7b:
2b:a5:92:8c:78:7f:fd:e2:c1:29:70:53:ea:d8:f2:f7:b1:87:
9c:45:0f:1e:2f:af:61:2b:af:a2:9a:f0:72:a9:cc:d1:51:12:
5b:0b:f0:91:9a:d0:91:2f:ba:1b:02:4f:a6:60:47:15:cf:79:
e1:96:2e:5c:7c:6e:01:ea:23:b6:81:e2:e3:78:10:38:09:ca:
93:5f:02:f7:23:ae:87:bf:0c:8d:60:ad:e7:08:63:e1:33:43:
29:d3:4e:c3:e8:fc:c7:a9:d2:3d:3c:52:35:39:b0:41:10:d6:
f5:0f:83:4f:b8:57:bf:61:b4:ed:a6:91:76:e8:fe:98:58:3a:
c2:4a:8f:10:23:24:92:0c:f0:05:14:68:12:ef:42:7b:04:48:
d3:2c:9a:78:02:ff:66:13:f1:c2:07:e5:59:6f:62:3a:af:e0:
12:b6:ec:f3:6f:b0:fa:96:63:06:c9:7e:57:ed:3f:cc:8d:df:
fb:1c:73:27:2e:b0:e5:e7:77:cd:47:b7:a0:92:0f:19:90:76:
8c:fb:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:47 2026 by rpki-client