Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File: vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier: NhLY++tmiz6XQYUT03hXOCrVKTnqoGL6kWD6o/GSLdA=
Subject key identifier: 77:84:33:C8:66:DB:67:EE:4B:09:75:4C:90:AF:25:D1:69:7A:29:1F
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer: /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial: 01A0D5399CBB1BD9EB9EFD4B41A191A4F168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number: 0C9E
Signing time: Thu 24 Sep 2026 21:01:57 +0000
Manifest this update: Thu 24 Sep 2026 21:01:57 +0000
Manifest next update: Fri 25 Sep 2026 21:01:57 +0000
Files and hashes: 1: 4gyUgvvblC7I5QDxCNCCyEJeWZ4.roa (hash: nDBkzRzCyJ6k3duOjuq/g47E59h3h29lMNe++vUhVXY=)
2: ZJ-T6ueMae72SObhWhaz9nVHF40.roa (hash: Ow4/9pV+gX/QMnh7E9AZiapSKVWWKGuqpiJHgE1l0SU=)
3: g2RgzQfRtI2o8X5sMP-NXjF8Uho.roa (hash: QHdSplXR9hrky5KPz8Vf+POncO+1O6g9pizr3/G9QPY=)
4: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: Xf0Xgg59+uhMqapBRtN1qluSCapASRqzGwfihfAslzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:9c:bb:1b:d9:eb:9e:fd:4b:41:a1:91:a4:f1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Validity
Not Before: Sep 24 21:01:57 2026 GMT
Not After : Sep 25 21:01:57 2026 GMT
Subject: CN=778433c866db67ee4b09754c90af25d1697a291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:68:1c:9c:31:ee:63:ac:7b:f1:6c:9f:3c:
f5:11:1d:fa:15:0c:de:75:31:3a:34:3d:77:3e:96:
06:d4:9c:09:aa:fd:4c:92:e2:7b:d6:5a:23:cf:b5:
e4:e5:64:81:21:00:3e:3d:38:20:18:bd:7a:b8:1c:
a4:76:94:b7:32:c2:aa:94:d1:bb:fc:f7:28:2e:ed:
85:82:c5:39:e7:96:a9:64:6f:8e:b1:35:1b:74:5b:
1f:2c:79:96:5b:be:e0:57:6a:b4:36:10:10:ac:1c:
cf:22:ab:70:d5:6d:40:4b:2e:d5:99:2c:2e:45:09:
47:4b:e2:67:d0:fc:18:82:7c:ec:e5:17:55:0d:f6:
b1:b6:dd:9b:76:37:2d:2e:31:b5:3f:66:b9:8d:a4:
25:43:16:c3:0d:b5:ee:50:01:79:2b:1d:db:fc:fd:
40:b5:39:de:02:f3:ca:bd:bc:38:94:54:31:ad:10:
c1:6b:9a:75:5b:0e:5c:41:7a:fb:d5:68:e9:fb:4c:
9b:82:8a:2a:64:19:19:74:39:85:a1:2c:b2:d5:3d:
42:21:d0:7f:c5:16:85:7a:f2:cb:16:cb:12:72:9a:
4e:12:a9:0e:d2:19:1d:a1:3d:24:b9:b9:20:9c:93:
45:1b:c3:06:8a:14:59:e7:58:3e:81:88:aa:07:48:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:33:C8:66:DB:67:EE:4B:09:75:4C:90:AF:25:D1:69:7A:29:1F
X509v3 Authority Key Identifier:
keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:32:10:1d:36:9b:81:64:00:9e:68:48:1b:22:ca:f4:5c:98:
19:a1:57:4f:21:28:8f:5f:4c:7a:21:a0:7f:bc:81:1d:eb:83:
26:18:a1:92:f5:25:f9:3b:cf:33:f5:a3:d6:fc:c7:0e:28:9b:
35:2f:89:ff:f6:b4:ec:44:e9:f7:3d:96:40:a7:04:19:a3:fa:
95:aa:7a:b6:c2:f6:c9:6a:9c:e1:6d:a5:95:63:3d:2f:75:f8:
1a:89:8d:2e:69:57:b0:9f:db:66:d6:7d:9b:4c:5b:60:11:b5:
ef:39:dc:5b:e0:1b:27:b7:8b:5d:92:b1:3a:2b:07:db:a6:01:
3c:78:9b:0c:95:32:ac:8e:cb:7f:aa:a6:1f:44:fe:07:f3:b2:
e1:88:81:5c:bb:92:9c:4a:0c:94:b2:9a:1f:60:10:fa:7c:c6:
3e:ec:52:48:c5:10:4a:0e:d5:ae:62:53:46:02:dd:78:a9:0c:
1e:6b:f2:a7:b3:e8:52:78:87:30:c2:af:87:bf:fa:6d:da:51:
4c:03:80:0a:32:5f:bd:27:cb:07:13:cc:d3:37:c3:d9:7d:c1:
2b:b9:0b:6c:b5:43:4e:60:f7:ed:ac:0a:14:cd:ae:09:00:61:
75:42:b1:92:a0:70:80:83:c5:39:43:ce:f9:fe:40:bd:1f:e8:
5e:eb:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:40:39 2026 by rpki-client