Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: j8bnWW0666GwoylwBpNYgdETdARo4qzAxqFrNY66XwQ=
Subject key identifier: 28:B3:65:52:37:35:F2:C1:79:CC:4C:FA:F2:35:17:1C:1D:D5:23:FF
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 01A1DCF05A07D7494C26AEF20A1D334B191B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1A88
Signing time: Sun 15 Nov 2026 02:01:41 +0000
Manifest this update: Sun 15 Nov 2026 02:01:41 +0000
Manifest next update: Mon 16 Nov 2026 02:01:41 +0000
Files and hashes: 1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: S3J+uFGnv5AmydUM0Lmv5AAtGiZgPAZqTD0hc5qvleM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:5a:07:d7:49:4c:26:ae:f2:0a:1d:33:4b:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Nov 15 02:01:41 2026 GMT
Not After : Nov 16 02:01:41 2026 GMT
Subject: CN=28b365523735f2c179cc4cfaf235171c1dd523ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:bc:9e:d8:5e:eb:a8:a0:96:25:b4:8d:1c:
e8:aa:b5:9e:4a:84:18:41:58:99:ff:53:c3:e8:a7:
bb:d8:f5:73:44:89:1e:8e:d3:9b:06:17:c5:d1:4f:
28:bc:35:75:4d:1a:9a:d0:fc:a1:3a:64:12:6f:c5:
29:f6:6f:e4:ca:d3:ee:c6:45:56:fe:d9:e7:bc:3e:
6b:92:be:26:7d:aa:8a:90:98:c4:d8:f1:1c:c2:24:
e4:4c:e2:eb:b2:ec:26:b4:64:48:22:62:3b:6b:2c:
63:b9:13:86:12:f7:52:0e:6e:ff:1d:c6:29:aa:ae:
b0:50:5f:ae:dc:e2:0f:3e:c4:87:04:ab:da:4a:d7:
8a:ca:dd:b0:56:26:44:d1:49:9b:70:d8:e1:6d:d5:
1e:3b:e4:90:94:35:67:cb:ea:cf:42:31:40:d4:ed:
e5:78:82:4b:09:ec:2b:26:71:25:6e:c3:02:79:a6:
52:71:15:89:37:e7:ce:46:9f:c0:d7:20:59:9a:e9:
ef:54:4e:6d:75:df:c0:ec:b6:90:b6:79:4a:c2:44:
50:35:5c:f6:3b:2b:a3:f4:e7:0f:69:be:da:02:a3:
19:30:b8:05:72:ba:e3:ef:c4:23:93:38:ad:e9:9d:
51:f7:98:51:8d:c2:56:fa:fb:3d:b3:12:02:1b:6b:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:65:52:37:35:F2:C1:79:CC:4C:FA:F2:35:17:1C:1D:D5:23:FF
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:a0:90:d5:66:62:5f:a3:be:5a:a9:78:4a:84:ca:06:39:
0b:8e:41:0a:49:a4:05:36:38:56:39:1b:6c:f5:3a:31:36:8f:
5a:2c:b2:e1:79:01:eb:ab:23:21:5b:3f:a6:1f:f9:d1:31:08:
8c:72:93:cb:c2:2e:bc:97:ef:f1:b4:01:b7:fc:d1:eb:59:06:
80:6d:c2:64:b7:b0:5a:69:a2:16:c2:42:d2:fb:e4:41:81:73:
39:dd:f8:0d:fd:e4:a6:63:2a:6d:bb:1c:d3:80:1b:28:c1:14:
8b:bb:a7:58:05:d8:ea:5d:b3:9c:84:4a:a6:a8:55:22:b6:2f:
d1:f3:5e:90:ab:04:65:01:f1:e7:81:e5:c6:61:a0:1e:f7:e6:
e8:8b:7e:65:b8:26:f6:df:c0:31:12:54:98:84:c4:d8:35:bd:
91:0a:4f:d0:d2:84:41:30:86:42:2c:81:fa:e1:50:55:28:72:
ac:ae:2b:a9:f0:4f:9f:bd:e4:af:93:2d:5b:c0:c8:fe:c1:7e:
af:8b:2e:33:3b:d2:9e:e3:7d:ae:2f:aa:55:13:af:fe:4d:ac:
62:6b:40:0d:c9:0d:37:f3:38:47:ec:53:b8:1c:b0:c2:60:71:
67:ae:07:44:73:b1:6c:b9:d1:38:49:0c:2e:87:d1:98:a1:5e:
8d:dc:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:38 2026 by rpki-client