
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File: vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier: 3KltvLr6nOxik+J33NuDOYKpp6+fZxDMudwNkdCYZ80=
Subject key identifier: 88:BA:CF:37:C8:1A:2F:1F:C1:87:2A:8E:2B:27:0B:61:95:97:CD:F1
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial: 01A10BF02EB9395431FA65AEF0D518753B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number: 1A8D
Signing time: Mon 05 Oct 2026 12:00:52 +0000
Manifest this update: Mon 05 Oct 2026 12:00:52 +0000
Manifest next update: Tue 06 Oct 2026 12:00:52 +0000
Files and hashes: 1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: Qh3ifYdSRamZ2u5ut5fZ/SkJn8IlKOw7DzBpbgLbtyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:2e:b9:39:54:31:fa:65:ae:f0:d5:18:75:3b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
Validity
Not Before: Oct 5 12:00:52 2026 GMT
Not After : Oct 6 12:00:52 2026 GMT
Subject: CN=88bacf37c81a2f1fc1872a8e2b270b619597cdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:ea:56:10:e6:a2:30:31:1f:af:34:e6:20:
8b:96:7e:9b:29:ee:ab:b1:70:24:e4:27:62:51:d0:
c2:11:81:92:fd:75:1b:9d:46:86:db:56:a4:66:df:
9e:83:9c:41:82:1a:f6:d9:67:eb:41:9e:7a:41:34:
69:32:81:13:c0:ab:d9:9c:a5:cb:90:d1:e1:63:0a:
05:db:9e:b9:04:7d:ae:54:5f:f2:b7:db:1f:e9:1c:
86:3d:5d:ca:04:90:f9:d2:24:51:da:bf:f9:36:f0:
39:d0:b8:9f:95:32:eb:76:ee:1b:56:30:5c:64:0f:
70:cf:fa:8c:f1:63:e5:c5:2b:12:76:fe:6b:80:f4:
88:fe:93:44:52:7a:46:58:2d:38:56:21:cd:dd:97:
70:13:43:95:02:53:b2:4a:be:38:3f:9c:fc:7d:33:
8a:49:54:72:fe:49:da:4e:60:75:00:97:ec:8d:e5:
e2:9c:f9:60:79:3e:d7:4e:e4:9f:f7:b0:ca:90:da:
3b:0a:f5:6b:c1:de:14:bd:77:b0:a1:03:eb:f1:be:
d5:87:35:3e:70:b0:87:46:68:d2:4b:b0:7f:2b:17:
1d:0c:24:43:11:f5:e9:8f:96:2f:48:7a:1d:5f:73:
dc:76:b9:5f:07:dd:d3:a3:cb:24:f8:93:e4:a3:3e:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BA:CF:37:C8:1A:2F:1F:C1:87:2A:8E:2B:27:0B:61:95:97:CD:F1
X509v3 Authority Key Identifier:
keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f6:63:df:b0:25:10:78:3d:2b:17:d3:2f:07:0f:73:a8:8c:
aa:e0:e6:cc:0a:9d:3b:ff:0e:3e:00:60:09:5c:27:20:b8:35:
40:e8:e9:9f:27:08:df:6d:19:8e:37:7c:a2:c6:72:9b:0b:c0:
84:eb:af:3d:5e:a2:74:b6:c1:5d:7d:90:47:d8:a4:3b:c9:d8:
ce:9b:36:a4:a9:91:3e:46:08:a7:b9:3e:f4:c9:6e:d9:e9:29:
53:5a:64:d0:6f:3a:be:32:0a:a6:26:ce:fa:21:cd:f1:f1:f8:
b9:d0:cb:62:b0:62:22:0e:da:af:c0:e8:77:a2:b1:ca:20:26:
11:5f:65:0e:a1:87:6f:46:10:73:e3:c0:0a:19:85:97:72:67:
d6:41:60:ef:8e:9d:5d:02:31:47:fe:49:ac:cd:f3:a8:fa:aa:
50:48:95:63:cd:96:06:a6:c6:eb:20:af:34:93:6a:dd:b2:54:
6a:8a:2e:20:92:65:c5:d5:ec:58:93:e9:95:aa:63:8e:4a:1a:
3b:7e:39:70:44:9c:f3:5e:1c:8d:b8:90:48:c2:3b:de:9c:aa:
de:6a:79:21:5f:c7:d3:19:1e:77:69:38:91:6d:a5:07:a7:99:
10:3c:ab:1d:06:8c:51:96:b3:98:81:70:ce:56:0e:ee:f1:8d:
2d:c6:fb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:05:27 2026 by rpki-client