Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier: wXE5pJggCerPuNtQ+jZh47FTgeZ2MWSAXsCp5fWQ1ug=
Subject key identifier: 8A:38:03:2D:4A:49:EB:09:DB:42:A3:77:50:F4:BB:8B:C7:B7:D2:DB
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 01A0D6B9AFE8A508958D3285889D63E28267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 04:01:28 +0000
Manifest this update: Fri 25 Sep 2026 04:01:28 +0000
Manifest next update: Sat 26 Sep 2026 04:01:28 +0000
Files and hashes: 1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=)
2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: Y6ZWZUL/ejIwEj+pl7WE3Na5EZkvlOUBHGvxL13ZrAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:af:e8:a5:08:95:8d:32:85:88:9d:63:e2:82:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Sep 25 04:01:28 2026 GMT
Not After : Sep 26 04:01:28 2026 GMT
Subject: CN=8a38032d4a49eb09db42a37750f4bb8bc7b7d2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:bd:65:56:3f:f6:cd:00:1d:27:0d:8b:da:
54:c3:17:a2:0c:a6:67:66:b9:9b:63:6e:2f:a9:88:
b3:38:33:76:b4:22:98:a4:20:bd:3f:fa:da:6d:0e:
06:82:b9:1d:39:78:47:4b:d1:2b:ed:d1:54:d7:a6:
11:7f:5f:56:63:ed:49:64:cd:6d:c2:33:07:f7:5a:
8b:bd:67:bb:92:25:fc:9f:b3:0e:cf:cf:57:17:83:
32:e0:21:15:02:44:9b:2e:4f:aa:ae:fe:5f:30:4f:
16:f5:e5:a3:d9:f4:9d:5a:30:a0:69:cf:ba:a7:65:
53:4a:c0:32:40:a0:a6:8f:26:10:57:22:96:93:65:
b5:42:5e:bc:3a:be:79:8f:d6:19:3a:b9:aa:a8:e2:
41:fc:8c:3a:60:a1:58:fb:f3:cd:e9:e2:34:de:ce:
0f:3f:58:d5:6e:bc:e0:53:7c:b3:67:20:ed:d4:7e:
65:79:41:24:ed:b8:21:82:fb:26:a9:db:f1:1f:e7:
f5:d0:18:ad:32:88:2a:63:e5:29:d1:bf:59:82:00:
6e:35:76:41:f9:e6:16:38:7a:b8:d3:de:eb:5f:aa:
e6:2a:ee:b6:fd:d2:c9:62:cf:94:e6:83:a0:a1:8d:
b8:b2:f0:84:32:62:fc:ef:b8:75:24:6b:39:b8:ae:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:03:2D:4A:49:EB:09:DB:42:A3:77:50:F4:BB:8B:C7:B7:D2:DB
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:d9:2d:11:cf:d6:9b:46:ea:b0:3d:47:0c:32:02:7b:38:
43:58:9e:40:79:38:6d:fa:c3:f6:22:7b:29:ce:e2:2b:bc:e9:
f0:a5:46:2a:01:6d:d8:43:c7:a5:04:80:b6:25:e2:4f:a6:ab:
6f:e5:e4:9f:91:7a:95:06:0f:4f:d6:0a:36:c4:9c:a8:f6:2b:
09:dd:02:e7:06:9a:6e:ff:5b:2e:76:00:65:83:98:0a:7f:98:
5e:ff:f1:ce:5d:76:53:86:21:51:8a:40:58:5d:3e:5d:58:43:
08:ca:d3:83:af:72:ab:97:a7:e7:96:5c:d8:ce:a7:83:9b:91:
12:07:e3:d6:18:64:dc:f2:25:44:a7:91:e3:11:69:95:fc:c5:
9e:f0:ea:b5:b9:1e:96:c5:56:57:a1:7f:c6:e0:f2:18:66:34:
38:68:b6:5f:b5:93:ec:fd:ce:02:76:82:ac:59:53:b7:d1:f7:
7f:e1:83:1b:92:10:7b:46:a5:f7:33:b5:93:45:a9:25:7e:16:
aa:61:59:46:3a:2d:4e:68:cd:fd:db:10:66:73:04:00:dc:40:
44:0d:93:48:df:29:3c:1d:b3:f0:46:06:6c:3e:5a:c4:80:c1:
88:fe:57:b0:07:2e:e6:66:ac:02:3a:0b:b5:ba:6b:c4:a1:79:
27:ec:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:54:59 2026 by rpki-client