Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File: vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier: XQRtH1/Xr7qVKuCQoxA1W/OXQlHg2xG9MujQMyxNxU4=
Subject key identifier: 3A:61:68:57:BA:AE:9A:0E:72:B6:58:51:9B:C5:6C:34:D9:D8:F9:2B
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer: /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial: 01A0CEFF99A4AF0867C370E11B3EB493ACBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number: 02BD
Signing time: Wed 23 Sep 2026 16:00:52 +0000
Manifest this update: Wed 23 Sep 2026 16:00:52 +0000
Manifest next update: Thu 24 Sep 2026 16:00:52 +0000
Files and hashes: 1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: ELUaq6xi9ZoGc2wRJKA2FGxT/qimb0b5MRdXQt5KJvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:99:a4:af:08:67:c3:70:e1:1b:3e:b4:93:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Validity
Not Before: Sep 23 16:00:52 2026 GMT
Not After : Sep 24 16:00:52 2026 GMT
Subject: CN=3a616857baae9a0e72b658519bc56c34d9d8f92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fb:b8:24:76:eb:17:cc:6f:d9:6b:38:8b:a3:
9c:f2:f2:02:b6:6b:5f:fa:f2:32:f7:e6:65:a8:68:
e3:fb:25:bb:98:60:62:36:22:29:fe:6f:13:95:f6:
56:78:52:33:56:d4:15:14:48:88:9e:89:61:7d:06:
23:2d:c6:2c:cf:0b:24:a2:0a:f1:09:c8:21:92:cd:
67:db:f1:d1:fe:2e:96:be:1b:fa:6a:71:e3:94:46:
f4:cf:e8:57:a1:59:3b:33:99:b8:e5:16:8c:97:b4:
91:f3:3f:8a:a2:44:dc:a6:b0:9b:a1:fc:0c:4a:e1:
4f:f6:5e:b1:b1:cc:0d:dc:19:15:6b:4d:6c:58:41:
b0:1d:77:bc:b2:86:18:a4:e8:9d:14:f8:8c:77:4b:
5d:5d:6d:15:2d:c3:cb:7e:5e:cd:b5:db:e0:de:a5:
5a:25:01:5e:e1:ea:0f:8c:33:19:f0:54:81:a7:dd:
66:5c:82:c9:ee:2d:21:c5:3b:30:60:a4:c4:bc:bf:
1c:2e:88:cf:7e:b5:67:cf:ed:dd:db:0b:f7:1e:fc:
20:d1:e8:0a:7d:20:6e:59:58:91:ca:54:2e:21:1b:
60:52:68:de:d0:61:9b:d7:34:46:97:02:f8:e5:80:
61:51:bc:8a:6f:70:87:d3:c3:0e:62:4e:5f:6c:7d:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:61:68:57:BA:AE:9A:0E:72:B6:58:51:9B:C5:6C:34:D9:D8:F9:2B
X509v3 Authority Key Identifier:
keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1b:ce:08:a7:da:e7:fa:a9:2a:61:59:a5:66:58:fd:9d:04:
a7:1d:6c:dc:5f:b1:9d:86:04:3d:21:07:49:de:19:18:3f:3e:
a8:27:c6:da:8e:9d:49:09:41:d0:8c:39:c3:ff:fd:a4:67:20:
79:b6:ca:ee:ac:0b:cc:04:8a:b0:35:97:b3:35:35:43:37:98:
39:f8:3a:e2:e6:8c:1f:03:50:e6:62:74:e4:c0:76:8b:24:77:
4b:35:5a:7f:24:40:8e:1c:04:58:e8:6b:73:a4:f6:83:fb:9a:
87:61:ba:2a:41:48:ea:13:64:dd:4c:80:56:57:84:93:4c:a3:
61:ba:16:07:67:a9:c8:7e:e7:09:fd:41:d9:18:b1:a4:0d:4a:
41:e5:b6:6a:40:df:31:a4:29:b2:8e:96:56:ea:ca:f0:26:80:
3a:8d:90:21:aa:4a:2e:f3:d3:93:0c:9a:c5:ba:92:e7:e8:15:
9a:db:05:5b:18:ef:7d:da:ad:a0:e3:19:ff:b0:d0:46:36:8a:
34:75:6c:62:55:28:19:34:42:21:45:22:c4:a1:01:1d:d2:69:
8d:8f:fe:e2:c9:f6:4d:66:34:86:8e:e0:80:6c:b0:56:95:d4:
3a:5a:66:d7:0c:ba:69:1b:46:18:ba:15:f6:d2:fd:8e:9b:c7:
32:3e:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:47:45 2026 by rpki-client