Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File: vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier: lO3LiPvwT+rAR1XtyECLb7mm7uF/qWE1iGcf5wk6F2s=
Subject key identifier: B4:61:E8:F2:3B:2F:7D:0D:23:71:05:41:FF:CB:3C:B3:1C:34:FB:93
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer: /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial: 01A1DE034676CCE6CF93F70EAE2A1665D92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number: 1842
Signing time: Sun 15 Nov 2026 07:01:58 +0000
Manifest this update: Sun 15 Nov 2026 07:01:58 +0000
Manifest next update: Mon 16 Nov 2026 07:01:58 +0000
Files and hashes: 1: DZwqiWSn_F55yvhwp8dj7miPLsg.roa (hash: xysHFYijRrvtjE9RE1rvWX6tjIQeGfq58aqN5RN9Gro=)
2: ZTl4Zk7cce3PpwYo1VMIjiLUFEI.roa (hash: afB6AkuPwpkXIf5jkkcicrF1yBAdioEzpkz55cn4RIY=)
3: ksaCCpURSw0ZhOl5teojDL5xafg.roa (hash: zdkmFDcBfCu3b+jGRXAWP+4CGEsf9AaTPVfVHsmsQ5Y=)
4: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: zzksSlmtC3m3GiN9aZQe50h/mJOErM20SYM9TQpj0v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:46:76:cc:e6:cf:93:f7:0e:ae:2a:16:65:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Validity
Not Before: Nov 15 07:01:58 2026 GMT
Not After : Nov 16 07:01:58 2026 GMT
Subject: CN=b461e8f23b2f7d0d23710541ffcb3cb31c34fb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:a3:02:24:97:5f:75:b3:dd:d8:c9:d6:ee:
8c:94:7f:e8:ea:c4:9d:a0:0d:aa:f8:a3:bf:49:ee:
a7:3e:ae:a6:46:be:e8:23:f6:1c:7a:fb:9a:91:11:
da:d3:ef:23:ba:0c:58:ef:86:f4:2c:33:da:66:67:
69:8e:be:36:91:2c:0f:7d:04:38:cb:ff:21:b3:2d:
89:de:62:b4:2b:35:2b:ff:76:b5:01:46:27:2f:23:
52:22:b1:8c:70:87:3a:2b:25:1c:e4:35:e3:63:d4:
73:d3:bb:29:e1:5b:99:6d:b1:00:2b:cb:bd:47:33:
4a:b8:cb:47:d2:5b:f4:dc:d8:1b:cc:ee:7f:b1:f3:
a6:11:fa:ca:69:2b:5c:3d:15:1c:20:3b:31:5f:2b:
5d:8f:9c:93:e3:8b:d8:9e:3c:6e:21:56:cf:58:58:
43:96:38:30:6e:5b:06:05:ff:d1:8c:72:00:0a:c7:
aa:af:b5:94:40:42:3b:31:fd:57:41:0d:a5:e4:51:
1f:21:3d:21:bd:0c:f2:e8:ef:26:19:af:6f:f6:6a:
bc:50:1a:a2:b1:90:24:e9:47:7b:c2:0c:fd:94:fe:
b1:5f:49:fa:c1:48:36:25:26:31:de:42:00:be:f1:
63:e3:a0:d9:41:30:61:82:02:3d:e4:26:ce:8b:d8:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:61:E8:F2:3B:2F:7D:0D:23:71:05:41:FF:CB:3C:B3:1C:34:FB:93
X509v3 Authority Key Identifier:
keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:aa:a1:36:9f:5e:8f:82:9b:49:88:56:59:b5:ee:d3:e3:37:
87:3b:01:2e:13:6a:d0:24:2d:a5:73:66:9c:9f:39:e5:4d:67:
7a:75:bf:55:50:89:a0:92:4f:7c:e7:32:67:e8:72:cf:8a:ba:
88:01:98:c6:b1:05:fc:fe:14:55:68:ec:12:07:12:0a:dc:aa:
08:24:8e:a7:a8:69:21:69:cc:c9:42:d7:5f:ac:6a:5f:9a:27:
d6:d2:f7:08:1b:a0:66:1b:0d:b9:03:1f:ad:33:0b:77:c8:79:
43:bd:e4:42:e7:ab:6d:24:2d:89:62:79:20:87:cd:3d:8d:c8:
4e:d8:a7:b2:fe:fe:c6:d2:92:f2:d2:5b:51:56:db:50:ef:cf:
b6:84:fa:2d:5f:9a:b0:68:26:bb:9e:81:0e:32:fb:90:95:8e:
b4:69:54:92:dc:32:01:48:0a:08:e8:8a:83:6e:62:a5:28:42:
b0:20:20:13:f1:e7:6a:f2:40:ed:f3:92:e6:f3:d0:0b:28:0f:
60:d4:4d:c5:8f:04:1a:2e:5c:c7:17:54:24:43:6c:9e:dd:9d:
ac:5f:e5:6e:fd:dd:83:da:1c:38:b7:7d:5e:30:9b:c6:71:b3:
9f:c9:60:57:bd:fe:65:53:e1:ff:c1:46:cb:be:5f:27:bc:2b:
ce:03:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:36:20 2026 by rpki-client