Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
File: vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft (raw, json)
Hash identifier: 1jQ/w8PbHL0Ta3Y1QkhsCs3iutQG+5QOZEUAE6cqxbQ=
Subject key identifier: C1:7E:E5:4E:82:69:70:74:6B:45:72:F1:6F:A0:59:7F:D7:FC:8F:62
Authority key identifier: BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
Certificate issuer: /CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Certificate serial: 01A0D493F53061285E72750556C9A7291A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
Manifest number: 01DC
Signing time: Thu 24 Sep 2026 18:01:01 +0000
Manifest this update: Thu 24 Sep 2026 18:01:01 +0000
Manifest next update: Fri 25 Sep 2026 18:01:01 +0000
Files and hashes: 1: QjlLqXwrKuX4WWijKXyWQlrwzSI.roa (hash: RrqtKaSOGqQ6cVJgOKK900pw+4nXE4aG5H706/A/L7s=)
2: dBuZbSPKal6c4zm6YNTPS1fr3GQ.asa (hash: ogSY4EAD3D6IaYFiG2filgxMUAq2W39XeRjlBqtFTic=)
3: vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl (hash: UOm+msp9nvqM3T24cG2lpK3qz1z7Tf5Nlmds1W3E0KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:f5:30:61:28:5e:72:75:05:56:c9:a7:29:1a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beddc5bba200cfd19b25dce13c1e2e1a2a1988a7
Validity
Not Before: Sep 24 18:01:01 2026 GMT
Not After : Sep 25 18:01:01 2026 GMT
Subject: CN=c17ee54e826970746b4572f16fa0597fd7fc8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:7c:81:8e:ff:d8:47:49:11:df:e7:2a:c3:
45:2d:c4:44:53:55:04:23:fc:0b:14:a4:bb:b8:5a:
18:a2:23:d5:2c:e7:be:d1:7b:09:88:6c:c1:f4:76:
1a:0a:74:4a:39:42:2c:e7:d0:86:3e:71:d7:a9:73:
30:22:29:5b:9e:f5:0d:b0:65:0a:26:6e:c7:0e:b0:
09:6e:26:44:0f:e8:e4:6a:49:ee:67:fe:0a:df:3b:
23:51:60:38:6a:fd:0c:ba:61:a3:fc:79:72:6a:cc:
1e:6a:90:80:fd:2a:6c:57:1e:06:88:0f:d2:41:b5:
1b:5a:c3:6b:00:38:bf:1b:16:06:cc:80:63:ef:aa:
6d:1a:30:76:af:26:20:dd:ed:9b:89:9e:6e:a9:cd:
e9:2b:88:7d:ac:c5:60:ad:24:c1:11:0a:95:2e:3f:
1b:25:5c:55:ae:62:46:83:4c:dd:32:c1:99:83:f8:
a1:41:4d:53:79:9b:9e:69:82:f7:6c:d5:00:08:9d:
8c:47:bc:5f:14:3a:e3:ae:99:33:49:01:27:91:62:
b5:5b:48:b4:96:1c:12:c1:91:ac:9c:6f:30:ae:1a:
61:2a:c4:79:1f:98:c7:c1:e1:86:ef:30:c4:06:02:
1a:d0:f1:a8:2b:79:75:06:73:c8:08:70:29:a8:3f:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:E5:4E:82:69:70:74:6B:45:72:F1:6F:A0:59:7F:D7:FC:8F:62
X509v3 Authority Key Identifier:
keyid:BE:DD:C5:BB:A2:00:CF:D1:9B:25:DC:E1:3C:1E:2E:1A:2A:19:88:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vt3Fu6IAz9GbJdzhPB4uGioZiKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b83caa-8dd0-4337-bfc9-68462fb40494/1/vt3Fu6IAz9GbJdzhPB4uGioZiKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:06:8d:09:04:f8:47:95:d3:43:c5:88:a5:16:3a:48:7c:
02:02:fa:a9:3e:ed:bb:11:52:d5:45:f7:42:32:38:44:11:39:
0a:1b:85:2f:e7:7d:a6:c3:c0:94:e3:8c:62:9e:25:27:53:bc:
d0:59:c7:57:55:08:1b:4f:30:1a:bc:2e:49:51:0c:83:01:18:
4a:55:b7:d6:90:45:12:64:07:08:1f:7f:fd:80:2f:49:e2:43:
b8:41:5d:64:08:8e:74:49:19:fd:e2:75:a8:48:20:62:36:0a:
51:ea:6b:a4:9d:f2:98:b4:e8:36:b9:22:ee:88:a8:09:2b:88:
91:1f:25:72:ab:27:28:e1:c9:18:6e:7d:a6:27:58:14:1e:8e:
0d:29:ed:ad:47:e9:95:a9:14:1d:27:c1:43:bb:bd:f0:c7:4f:
d9:27:19:be:67:6c:4c:b3:59:0a:b3:e3:ca:dd:2c:1e:80:11:
b9:70:af:57:57:fd:fc:19:25:8d:2d:3b:cf:29:07:6e:25:85:
a9:ec:42:ec:1b:e2:ed:b0:53:44:53:39:a9:04:01:fb:87:c3:
32:0e:dc:22:7e:8c:9e:3f:df:e5:e3:ce:42:64:37:a3:d8:ec:
ea:c1:e3:39:04:46:d7:a4:c8:ef:61:fb:70:81:7a:f2:2f:eb:
43:b6:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:05 2026 by rpki-client