Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier: VYJ+aGHg4hRXuftMjadQ0rrmrQp7LEiY/1cnI6AerKc=
Subject key identifier: EC:C7:6C:01:C8:90:40:9C:FA:7E:2F:6D:D5:9D:16:93:0B:95:74:B0
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 01A0DA293DA13C23B1E3E5121B0CF234E8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number: 1A75
Signing time: Fri 25 Sep 2026 20:02:10 +0000
Manifest this update: Fri 25 Sep 2026 20:02:10 +0000
Manifest next update: Sat 26 Sep 2026 20:02:10 +0000
Files and hashes: 1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: ASdGCvlmrUmvuHotp8ln7sP/nZgjpaU5DiBPRRnAJn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:3d:a1:3c:23:b1:e3:e5:12:1b:0c:f2:34:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Sep 25 20:02:10 2026 GMT
Not After : Sep 26 20:02:10 2026 GMT
Subject: CN=ecc76c01c890409cfa7e2f6dd59d16930b9574b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:a4:3e:4d:6b:e3:9e:b5:72:20:8b:b1:05:
a1:e9:68:0b:92:94:10:f1:5d:61:26:da:c7:4c:21:
bb:bd:64:d4:e8:a7:c2:16:d0:46:c9:d3:a9:2e:b8:
48:00:dd:db:2c:80:a4:8a:a2:12:93:e3:86:c4:92:
e2:8c:80:5f:1c:02:c8:df:b1:77:94:f8:c3:12:3e:
c0:91:f4:b1:e1:e4:82:c7:68:1d:53:d1:3b:75:4a:
02:f2:61:6d:40:9f:2f:4f:b3:e8:bc:bd:bc:0f:47:
ec:83:dc:16:1a:39:40:8e:0c:56:64:a0:d3:24:08:
34:e2:9f:f3:18:fc:f4:17:2d:7d:e9:c9:73:9c:52:
63:5c:91:f4:f8:de:d7:79:98:e2:c5:71:e2:0d:9f:
54:d0:6c:92:95:18:4d:b3:31:1f:8b:00:a5:ab:67:
6e:90:97:2a:d5:4a:14:10:de:18:ab:01:2e:e9:72:
ae:5c:da:d9:ab:a6:82:e7:6d:42:55:f3:2f:15:fe:
67:7b:22:f5:eb:f8:c6:52:fa:db:59:1d:55:50:c5:
5e:b1:04:48:1d:45:d1:cb:1f:8b:d1:68:c5:a8:b7:
1e:56:91:10:cb:c9:41:96:2f:78:72:7f:ab:c7:37:
20:c0:a9:69:ac:a9:00:63:52:d1:1a:92:c9:6b:98:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:6C:01:C8:90:40:9C:FA:7E:2F:6D:D5:9D:16:93:0B:95:74:B0
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:26:a2:cc:e4:5c:7d:19:77:81:27:f0:39:24:fe:ea:3e:d3:
29:a7:7f:be:b0:32:a0:b1:fd:50:ba:51:7d:9d:a1:7a:05:59:
7e:5b:59:1f:a3:e3:c0:3a:b7:a0:f2:54:f8:50:fa:c7:0f:bd:
9c:cb:a5:26:d2:ab:f4:2f:60:84:b3:0d:16:33:10:4f:74:c4:
a6:25:c2:7d:09:c6:94:ca:60:fd:9d:49:8a:7e:d1:11:ee:60:
08:ca:b8:95:36:22:0d:07:91:a6:3f:ea:4c:7a:b1:3a:32:d6:
0a:f9:04:f4:59:1c:33:09:73:3e:b9:79:dc:ed:fe:8b:f3:91:
66:0d:fd:fd:7d:ad:e0:9b:5e:69:d6:cc:2f:c0:a8:25:ed:7d:
71:08:0e:d5:41:a4:c4:b2:bb:5a:da:9a:27:8d:39:65:b0:4f:
f6:f8:d6:16:25:25:68:ed:a8:a9:a4:16:8d:d6:45:20:c8:af:
ed:9f:05:8e:13:8f:f0:57:f0:13:91:ad:0a:07:85:d2:50:00:
6a:e3:0b:a9:cd:3d:5d:b2:98:79:90:ef:a9:91:c0:50:50:2b:
5a:2f:b4:61:32:e4:f6:59:83:90:71:f8:be:dc:9d:19:3e:3b:
3c:d5:f6:1b:64:8d:05:31:1f:ae:8c:aa:dc:de:b3:00:36:82:
e7:c4:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:51:20 2026 by rpki-client