Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: SYFeJwYpNJ8m1zadonXj8dybzQzKSUVL8FmvG8rPijc=
Subject key identifier: DD:65:2D:E9:14:46:4A:EF:72:4C:F9:37:CC:D4:61:C7:4D:8A:0D:2D
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 01A0E62D45192E34692BB784DE765E45AA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 04:02:01 +0000
Manifest this update: Mon 28 Sep 2026 04:02:01 +0000
Manifest next update: Tue 29 Sep 2026 04:02:01 +0000
Files and hashes: 1: 39SWcIru4OOLf3jMU1giDlE-804.roa (hash: VHGE9nOLuGsrrsrjhfRfN6xG0b3Ab1haHqJsSirwxJQ=)
2: q2Eizro8coJ0vQbXr19bHJH4bc0.roa (hash: tmAf20SndhrgKXo0idQ98M/X9oFaPmCTdoXsGpxVz5o=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: XBkKqZEsDwxYaio2n0baSsOR6vfmpoaIRd9YjR0Gh9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:2d:45:19:2e:34:69:2b:b7:84:de:76:5e:45:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Sep 28 04:02:01 2026 GMT
Not After : Sep 29 04:02:01 2026 GMT
Subject: CN=dd652de914464aef724cf937ccd461c74d8a0d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:0c:8d:35:84:04:e5:b8:5f:6a:b8:03:76:
a6:e5:13:ef:42:da:78:a3:dd:34:b7:65:a5:d3:80:
c2:21:23:fa:bf:a5:0e:7a:fe:d4:bd:9a:f7:c4:cd:
f1:f9:1d:bc:5f:58:bd:fc:fc:39:0b:f4:5d:05:43:
12:19:ef:7b:d7:8c:fd:b8:f8:70:80:28:57:3f:9b:
1c:25:56:c5:52:96:f5:ef:08:51:d9:6c:21:7a:75:
03:29:56:1e:df:fb:17:0b:49:90:b2:35:02:ee:3c:
91:6a:af:18:6c:48:37:ba:79:00:90:a2:16:d1:fd:
42:89:f1:a5:d6:8e:3f:a3:56:61:20:be:29:cc:1f:
a4:73:b6:b6:00:6f:16:a5:2f:34:c9:78:35:d5:dc:
07:85:f4:dc:49:3d:4d:c1:94:67:6b:bd:3e:00:ef:
bd:7b:6b:6c:8f:f9:3b:19:08:b2:21:f4:cf:53:39:
c6:26:6a:fb:d3:f5:99:4a:3a:07:1e:09:49:98:7d:
b6:5c:35:be:66:ca:72:40:48:85:c7:d3:ca:f2:76:
84:a2:57:bd:52:74:7e:f1:7a:f3:a1:09:0c:c0:54:
0f:98:c8:c0:19:94:c6:27:e7:58:40:cc:e8:11:6f:
c1:4a:6e:44:9e:ef:db:a8:32:be:84:91:a1:95:f7:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:2D:E9:14:46:4A:EF:72:4C:F9:37:CC:D4:61:C7:4D:8A:0D:2D
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:78:d7:5e:93:b3:ce:db:f2:88:18:62:4d:ce:a9:74:3d:
dc:f7:27:fe:77:b1:19:90:31:74:de:33:a7:b2:9f:51:bd:f9:
c8:d8:a6:9a:a3:7e:11:b7:d3:14:95:82:bf:df:59:0b:51:ef:
09:db:3c:3a:88:82:77:4f:5a:ed:cc:b5:1d:1e:f5:7f:8c:84:
d4:26:af:3f:ec:0d:c5:dd:25:e2:7b:9a:39:61:31:48:09:7b:
0c:0a:4e:66:07:b4:f8:7f:f1:40:90:78:e3:60:2a:d7:a7:49:
8c:03:64:12:36:70:19:0a:85:8d:e5:fa:4d:51:dc:a8:a9:05:
d0:e5:60:d9:05:52:a5:56:75:e2:05:49:f7:d4:7b:98:32:f7:
7b:b7:74:82:4c:c9:85:85:16:c3:14:a2:06:b4:97:00:f9:22:
54:a0:38:1a:e5:99:66:65:2a:b8:ef:70:c8:d2:46:d1:8d:0f:
4e:cc:9b:14:ea:5b:b9:6d:37:28:70:34:5f:04:0c:4c:89:e2:
9e:2e:26:03:9b:33:2c:51:6e:d4:61:a7:a4:3d:63:e0:7c:e6:
e3:02:0f:a1:0e:8e:25:3c:74:41:fe:de:02:90:0a:a4:0c:13:
a8:81:fd:c0:36:88:5c:37:e4:1d:3d:ab:95:0e:46:c2:65:05:
bf:46:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:08:01 2026 by rpki-client