Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
File: vmGeqxZHT-1toJ0UezAl31t0l8o.mft (raw, json)
Hash identifier: ubeOQNBCLBO2d7eLwXXdhAOsIpihZKnJdbbRaMViQAQ=
Subject key identifier: 63:1D:AA:9E:ED:4A:8D:24:31:F2:A4:8B:E0:60:54:13:4B:4E:E1:65
Authority key identifier: BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA
Certificate issuer: /CN=be619eab16474fed6da09d147b3025df5b7497ca
Certificate serial: 01A0E92D73E32ACA9FDC45D9AA1C4D7381B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:01:05 +0000
Manifest this update: Mon 28 Sep 2026 18:01:05 +0000
Manifest next update: Tue 29 Sep 2026 18:01:05 +0000
Files and hashes: 1: k95nSKzfyj7oyf3hxhJggwkYbzM.roa (hash: qGRzMQRX6JUJIZPjW/27YDaPV7jnrL30iowtpo5onJ8=)
2: vmGeqxZHT-1toJ0UezAl31t0l8o.crl (hash: ulj+7yeKPc2EN15JzlG38n5mnUuxLM+Ki5pQs04uMUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:73:e3:2a:ca:9f:dc:45:d9:aa:1c:4d:73:81:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be619eab16474fed6da09d147b3025df5b7497ca
Validity
Not Before: Sep 28 18:01:05 2026 GMT
Not After : Sep 29 18:01:05 2026 GMT
Subject: CN=631daa9eed4a8d2431f2a48be06054134b4ee165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:a9:d7:04:0a:03:f1:45:66:75:84:53:03:
b9:41:0f:ea:ab:d0:84:c2:a4:1e:90:13:0e:a8:f1:
b5:48:cb:27:3d:e3:88:9b:91:1d:5c:3c:ba:05:8c:
12:e3:b9:a0:c7:49:32:1e:aa:36:bb:7b:b1:b0:b0:
2a:19:41:99:8c:c9:44:93:48:ca:14:31:38:b3:87:
25:01:13:86:ac:98:1e:91:e7:db:4c:98:19:6d:28:
42:11:a6:e7:ff:d9:2a:76:ab:a7:54:b4:3a:9c:c0:
ac:31:0a:59:1a:c2:b6:e6:73:cf:5e:da:0c:52:0e:
16:4e:3f:81:d3:22:4e:5c:21:16:5c:7a:08:6e:e3:
ee:87:91:6f:59:a4:df:a6:f0:a5:8a:d6:8a:e6:09:
18:3e:dc:16:3f:cc:13:c0:60:5e:53:7b:a3:cc:70:
3a:a0:2b:21:2d:8c:41:7a:53:fb:c3:9d:a5:23:61:
03:80:5c:14:8a:c6:23:f1:d1:ff:e3:2d:6f:02:7b:
8e:19:ce:17:1b:b6:90:ee:ae:01:94:f7:e8:c8:3a:
10:5b:bf:55:98:b0:1a:a7:e1:8e:99:e2:02:41:e4:
e7:0d:cd:87:e9:29:b0:6c:f2:8f:73:f0:0d:c8:e4:
98:50:1f:a1:4b:d9:d0:64:c9:fd:c8:63:c3:6f:1d:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:AA:9E:ED:4A:8D:24:31:F2:A4:8B:E0:60:54:13:4B:4E:E1:65
X509v3 Authority Key Identifier:
keyid:BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9f:3c:04:91:1f:06:08:43:3f:37:fb:b5:de:a0:77:c5:7d:
8f:3f:ae:9a:65:26:55:98:8e:bb:51:5e:30:88:c4:68:63:bb:
21:fb:fc:75:f1:2e:4d:d8:86:9d:ee:02:da:d2:ea:6e:9e:f5:
44:66:39:82:27:68:18:d2:0b:43:56:c0:07:89:07:5b:4f:86:
17:8f:0e:f9:e3:21:c7:e8:55:82:a9:86:9f:70:5e:fc:86:f7:
0b:97:19:8f:6c:94:bf:40:b6:bc:63:1c:b3:b9:7b:78:28:6c:
16:75:f9:cd:d1:c0:af:d7:b3:8a:0b:c3:20:59:af:ee:f5:28:
2b:7c:0c:f0:51:d5:05:88:5b:ce:3c:43:64:4d:0d:c3:27:cc:
72:5b:a2:0e:0a:8f:47:e1:b4:ad:ae:14:1a:8f:77:af:39:33:
ce:3a:e1:72:81:27:c1:6e:be:29:bb:22:57:06:c3:85:9a:05:
6c:80:c8:ec:ad:33:f3:15:de:f8:49:27:db:dc:9a:8c:b8:fa:
9c:ff:44:83:c9:f9:ab:ab:4c:fd:ca:64:3c:58:e2:65:12:e4:
e7:6c:6c:5f:ce:07:31:7b:48:45:27:b0:a9:bc:50:37:64:94:
a7:d9:01:97:d4:22:5d:55:8a:50:cb:5e:3e:00:d7:f3:89:03:
f9:69:d3:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpLXPjKsqf3EXZqhxNc4G1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjE5ZWFiMTY0NzRmZWQ2ZGEwOWQxNDdiMzAyNWRmNWI3
NDk3Y2EwHhcNMjYwOTI4MTgwMTA1WhcNMjYwOTI5MTgwMTA1WjAzMTEwLwYDVQQD
Eyg2MzFkYWE5ZWVkNGE4ZDI0MzFmMmE0OGJlMDYwNTQxMzRiNGVlMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUSp1wQKA/FFZnWEUwO5QQ/qq9CE
wqQekBMOqPG1SMsnPeOIm5EdXDy6BYwS47mgx0kyHqo2u3uxsLAqGUGZjMlEk0jK
FDE4s4clAROGrJgekefbTJgZbShCEabn/9kqdqunVLQ6nMCsMQpZGsK25nPPXtoM
Ug4WTj+B0yJOXCEWXHoIbuPuh5FvWaTfpvClitaK5gkYPtwWP8wTwGBeU3ujzHA6
oCshLYxBelP7w52lI2EDgFwUisYj8dH/4y1vAnuOGc4XG7aQ7q4BlPfoyDoQW79V
mLAap+GOmeICQeTnDc2H6SmwbPKPc/ANyOSYUB+hS9nQZMn9yGPDbx3zEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMdqp7tSo0kMfKki+BgVBNLTuFlMB8GA1UdIwQY
MBaAFL5hnqsWR0/tbaCdFHswJd9bdJfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1HZXF4WkhULTF0b0owVWV6QWwzMXQwbDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt
MWQyMzQ4ZGJkMDM2LzEvdm1HZXF4WkhULTF0b0owVWV6QWwzMXQwbDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2
LzEvdm1HZXF4WkhULTF0b0owVWV6QWwzMXQwbDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ88BJEf
BghDPzf7td6gd8V9jz+ummUmVZiOu1FeMIjEaGO7Ifv8dfEuTdiGne4C2tLqbp71
RGY5gidoGNILQ1bAB4kHW0+GF48O+eMhx+hVgqmGn3Be/Ib3C5cZj2yUv0C2vGMc
s7l7eChsFnX5zdHAr9ezigvDIFmv7vUoK3wM8FHVBYhbzjxDZE0NwyfMcluiDgqP
R+G0ra4UGo93rzkzzjrhcoEnwW6+KbsiVwbDhZoFbIDI7K0z8xXe+Ekn29yajLj6
nP9Eg8n5q6tM/cpkPFjiZRLk52xsX84HMXtIRSewqbxQN2SUp9kBl9QiXVWKUMte
PgDX84kD+WnTZg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:45:38 2026 by rpki-client