Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier: 7D8hgeasIweq2cwNFAM3iCRMmMu9v+h1MyjeUtRnBMw=
Subject key identifier: 70:E1:57:16:29:08:D2:90:92:95:F3:F2:C9:3E:03:74:99:A3:04:5C
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial: 01A12FC5AEC4FAAA4A03633087A2F7D4FFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number: 1AA5
Signing time: Mon 12 Oct 2026 11:00:46 +0000
Manifest this update: Mon 12 Oct 2026 11:00:46 +0000
Manifest next update: Tue 13 Oct 2026 11:00:46 +0000
Files and hashes: 1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=)
2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=)
3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: uudq5wijjpch6C3lYJxqqzR4W6AYgUKFYJUNfhYD7bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:ae:c4:fa:aa:4a:03:63:30:87:a2:f7:d4:ff:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Validity
Not Before: Oct 12 11:00:46 2026 GMT
Not After : Oct 13 11:00:46 2026 GMT
Subject: CN=70e157162908d2909295f3f2c93e037499a3045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:88:e2:48:95:74:a2:72:bc:07:b9:1b:fd:
62:6b:db:41:01:0d:72:4d:03:d5:3b:b8:7a:bf:81:
25:d7:c2:e3:67:70:4e:df:1e:15:dd:01:19:62:05:
90:99:91:9e:8b:a9:2e:6e:fd:e5:8b:ee:07:bd:54:
c4:89:36:8d:56:da:29:21:71:e8:38:62:45:63:b2:
70:b3:a6:e0:4c:79:c0:00:73:4e:1c:bf:e0:5e:28:
05:a2:f7:83:e8:7a:a1:d4:0d:37:ef:c5:69:ff:ea:
93:cb:84:df:a5:0c:7f:f3:29:e2:f2:72:dc:74:43:
fb:b9:f1:60:94:d9:63:95:5f:06:14:22:f6:81:7e:
86:0e:ee:aa:3c:63:3c:b9:60:2d:e6:6f:50:34:44:
ee:1e:51:f7:f3:c8:9b:89:23:20:b1:21:4d:49:1d:
ce:66:ed:54:79:5f:c8:4e:0c:2f:fd:cc:ec:a7:8b:
68:c3:bf:95:0a:e5:6b:e4:5f:fb:a4:8b:76:32:dd:
f2:3e:94:40:d9:37:4e:59:1f:de:ed:ee:2e:0c:d0:
67:16:54:60:13:ce:21:6a:bb:83:9b:d5:a9:43:4c:
f6:df:00:e5:c5:5c:c3:e0:9b:8c:ff:94:3a:39:82:
83:82:3d:ff:10:78:ca:6e:3f:27:db:18:d2:c1:a5:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:57:16:29:08:D2:90:92:95:F3:F2:C9:3E:03:74:99:A3:04:5C
X509v3 Authority Key Identifier:
keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:82:00:2d:4f:f8:01:77:bf:b3:4e:9b:99:3b:2b:b1:ad:04:
3e:ec:83:99:c0:71:16:8b:d0:cf:91:36:d9:e0:17:1b:49:9f:
ef:42:10:9a:60:27:df:eb:78:50:60:4a:b7:30:d6:40:23:c2:
45:73:50:be:41:1f:b5:30:7e:ea:c2:77:d5:4c:6d:e4:be:ad:
c0:61:c5:5c:dc:0e:12:49:31:1c:43:7a:92:65:31:4b:1c:2d:
ec:ea:9e:91:e0:eb:ff:a6:2c:8a:6a:87:f5:3b:10:3c:c3:6c:
fd:f7:ff:a8:c2:00:fc:64:50:89:53:b2:9f:5d:33:df:88:8c:
36:20:32:bf:99:91:f4:9d:98:66:20:bd:f2:54:72:88:ee:e3:
64:0e:a0:e3:86:c5:79:8f:0f:68:48:e6:30:ba:ef:f1:42:04:
12:da:ea:1b:78:1c:7c:37:47:0c:87:ea:e5:bf:08:d8:d2:cc:
d4:e0:43:ea:75:7f:1f:95:95:58:82:5a:54:24:41:61:7c:33:
b2:1d:bf:82:61:e1:83:10:72:cb:fe:e2:9c:24:08:0c:e9:25:
c2:c3:c5:6c:f1:4e:50:82:25:19:f0:cd:d4:6b:96:29:7e:d2:
88:46:cb:9a:03:f5:30:27:2c:08:79:45:c6:c5:d5:2d:0b:2b:
30:4e:c2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:00:24 2026 by rpki-client