Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: 5Y54gaN3lHngwjpa2Afriz8APIYqUM7J363W5o1jP+0=
Subject key identifier: FA:7B:09:A8:30:A1:FD:F8:EE:F2:C2:B5:84:2C:94:37:2F:02:34:59
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 01A0D0B7014F33E92F6608DC37CEBB35724D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 07F7
Signing time: Thu 24 Sep 2026 00:00:49 +0000
Manifest this update: Thu 24 Sep 2026 00:00:49 +0000
Manifest next update: Fri 25 Sep 2026 00:00:49 +0000
Files and hashes: 1: CB2ITi-RxPyoR7XH1NEi7Vwgbyg.roa (hash: e+/EujUqMgrunBdFLMp3Y5r4ddJZRAWO/cMR+Mtb/4w=)
2: h2q9_rZm0PV8txh6TfHdCBkulAs.roa (hash: q05w4TZAL571hpUjwgQIi8JE4zKvAGMsaI8J0PpFNXY=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: Y805tFnGLZm1vcDZUbLyUHa3jI0OUe9NESdzzsKJOw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b7:01:4f:33:e9:2f:66:08:dc:37:ce:bb:35:72:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Sep 24 00:00:49 2026 GMT
Not After : Sep 25 00:00:49 2026 GMT
Subject: CN=fa7b09a830a1fdf8eef2c2b5842c94372f023459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:98:0c:3c:3c:f0:a4:fb:e3:a2:60:c2:e5:
dd:e1:e4:04:b4:80:4b:84:85:ad:4e:ad:99:cc:b2:
ae:ef:4a:a1:cf:f3:3e:76:23:fa:74:2a:7c:87:39:
d4:41:e0:2d:a9:48:74:4a:8c:a3:8e:cd:fa:fb:30:
d6:9c:a3:44:f0:fe:aa:4b:5e:b1:ee:a7:e1:89:1c:
92:ea:a4:78:fc:17:e0:63:db:94:da:68:62:80:c3:
6c:8c:c0:53:34:63:4d:35:82:0f:14:7b:0e:9a:25:
bb:bc:dd:ae:9e:d6:38:00:c0:8f:7c:9f:c4:d2:fa:
44:d9:ae:cf:db:ec:ad:ec:40:a9:7c:a7:34:4d:59:
60:d6:49:08:5d:22:72:db:8b:fd:cf:c4:f3:a1:56:
16:51:ad:a0:97:8e:24:4b:0a:58:df:6a:9b:a9:aa:
cb:f6:93:78:b1:13:52:68:13:bb:1f:dd:32:f5:c3:
3b:63:04:54:7e:ab:87:b3:5f:fb:34:ed:d5:27:58:
81:e9:b3:e3:d2:32:86:a0:15:94:73:b4:ac:02:9a:
d1:fb:e5:13:19:49:1e:e9:b0:f8:6d:38:7d:eb:40:
b4:ee:15:ee:a0:36:fe:71:67:2d:5e:a7:9e:ec:e4:
6f:02:e0:fc:fb:e6:2a:60:e5:f0:29:91:ef:25:45:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:09:A8:30:A1:FD:F8:EE:F2:C2:B5:84:2C:94:37:2F:02:34:59
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4b:93:92:c1:10:b1:ff:ff:b8:d9:f7:2e:39:5e:00:52:97:
1e:4f:1e:55:6c:49:6f:00:ca:53:e5:79:0f:c8:0f:66:80:8e:
21:1a:9d:1a:e3:25:63:5d:44:7f:f5:3d:c7:a7:eb:e8:46:01:
a2:7b:88:31:6d:ae:3d:50:a3:98:38:d5:0e:65:9c:f2:d7:48:
82:e8:c9:ae:b2:02:c0:f4:6b:af:56:a5:a2:22:36:bc:e9:21:
a2:a6:88:1f:ea:06:7a:9c:c8:d4:ba:50:25:9b:d9:54:b9:29:
83:a6:03:af:c7:67:ad:71:5a:ba:67:6e:85:a5:d3:25:83:1a:
f0:87:ce:56:cb:fd:21:5e:35:a1:24:93:59:3e:62:74:fa:1b:
b8:64:5e:95:5d:80:2a:e6:64:5c:ee:c0:8a:0c:d6:e1:b7:ef:
14:76:0e:b0:04:cc:d0:30:d5:71:1d:95:bb:71:1c:15:de:15:
87:70:6f:a1:e6:e6:7c:11:90:96:ca:2c:36:b2:5e:05:76:37:
91:a5:db:1a:12:31:b4:64:02:86:75:7a:d2:fd:90:ed:13:10:
c4:e5:19:94:42:55:a4:9f:9d:af:99:10:49:06:61:8e:2d:9b:
03:b9:c6:60:e7:83:c6:d6:bb:39:ff:32:9c:c7:5d:9f:1b:99:
5d:59:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:48:43 2026 by rpki-client