Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier: wN1vw0eTWIexicZiKps8x+XtYhhFS2vybbg8/hjTm0c=
Subject key identifier: 25:5E:AE:8B:DA:FB:80:A3:49:59:62:8E:E6:14:31:E8:1D:C7:D0:F6
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial: 01A1DD5E53C6E3D27283EE9EC77E05DF0397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 04:01:48 +0000
Manifest this update: Sun 15 Nov 2026 04:01:48 +0000
Manifest next update: Mon 16 Nov 2026 04:01:48 +0000
Files and hashes: 1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=)
2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: AjhM2axcS6rY3PiTMFrs/omP8FOiRdYZaLIewcJnlWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:53:c6:e3:d2:72:83:ee:9e:c7:7e:05:df:03:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
Validity
Not Before: Nov 15 04:01:48 2026 GMT
Not After : Nov 16 04:01:48 2026 GMT
Subject: CN=255eae8bdafb80a34959628ee61431e81dc7d0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:f1:92:1e:68:ab:d5:ce:41:3c:b8:3c:96:
a2:f6:97:37:1f:ae:51:2e:ad:e8:62:e7:74:57:8e:
c4:d1:84:ea:ac:52:c2:45:d5:af:8e:a2:a7:4e:19:
eb:25:99:2f:2b:54:8c:54:3d:60:cc:8f:ce:f3:11:
8b:53:1f:9f:da:40:a2:56:64:c7:86:38:2a:73:91:
aa:75:0f:6c:ee:37:12:e5:8e:4c:bd:36:9c:b8:37:
ba:aa:6e:53:bd:15:6a:af:10:d5:1e:02:a2:bb:c9:
90:a8:0e:fc:85:52:05:d6:67:6a:15:71:ae:05:c7:
b0:9c:75:c3:e0:6c:39:19:3c:93:6c:d5:bb:9f:da:
bc:98:88:18:46:a9:78:56:d7:63:43:81:d3:8b:f7:
54:a4:ae:97:40:02:55:45:25:98:93:a0:c7:e3:bd:
43:6d:88:00:e9:83:49:ef:52:cf:4f:58:65:d4:84:
de:bd:b7:37:7f:52:55:0a:62:20:f1:9b:fa:29:00:
f0:73:c9:6c:8b:6a:3e:c1:96:2f:2e:f6:f4:e1:ef:
a3:8a:ef:56:1b:c7:e7:fe:cc:4a:ae:71:69:50:d9:
4a:ff:d2:ab:f8:e3:08:e7:b2:8f:85:7a:eb:cf:59:
cd:fa:80:fb:0d:72:4c:06:10:d3:6d:c4:ee:c3:af:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5E:AE:8B:DA:FB:80:A3:49:59:62:8E:E6:14:31:E8:1D:C7:D0:F6
X509v3 Authority Key Identifier:
keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:17:82:e8:14:1e:f9:9b:5f:bb:c5:70:db:15:bb:f1:d5:1d:
b9:d9:6c:a8:3d:8c:1c:04:9c:77:d8:dd:cf:e8:d5:52:fe:4a:
92:fc:21:7f:84:8c:c0:24:e2:95:aa:e1:a7:fc:a8:29:16:e4:
43:66:76:11:f3:3c:df:2d:58:c0:0a:d6:26:82:3b:ea:78:bd:
f7:ca:ae:7f:99:31:83:09:62:69:63:b6:c1:fe:ef:a1:46:22:
18:c2:02:50:97:1f:7e:01:f3:c6:7c:13:31:4f:2c:3c:9a:39:
cb:ac:3d:0e:dc:56:f2:9c:8f:38:b0:22:99:15:b2:ad:f9:ab:
27:31:31:12:55:f5:ea:39:b0:db:e9:20:dc:7c:48:bd:64:d8:
02:c8:29:f6:07:f2:9c:24:57:34:12:8f:a1:25:f0:a1:ab:4c:
f1:2c:26:62:7e:47:9f:85:90:67:e0:bc:65:36:f5:83:07:90:
4f:40:2e:82:3e:71:bd:64:89:eb:42:d8:4a:40:8f:83:8b:31:
f1:f2:d1:35:e3:e9:b2:52:8f:f8:38:93:8b:a6:f7:bd:8b:7c:
03:52:19:b3:2f:27:da:86:4d:4c:4e:8c:41:28:1f:bb:1d:53:
f0:22:86:be:84:8c:18:d6:1a:23:98:ce:e6:cb:b5:28:4f:5e:
9e:9e:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:24:56 2026 by rpki-client