Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: ryE95cNYaO7M6YfwsxBZPNeD8NvgW+FOv2ofA3ayacE=
Subject key identifier: 60:C0:9A:59:B7:B0:2F:01:63:A7:74:90:0C:74:D3:F9:D1:17:40:7F
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 01A0DE3C0F5D2AAE0BE19F95150E087C6E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 07FE
Signing time: Sat 26 Sep 2026 15:01:13 +0000
Manifest this update: Sat 26 Sep 2026 15:01:13 +0000
Manifest next update: Sun 27 Sep 2026 15:01:13 +0000
Files and hashes: 1: CB2ITi-RxPyoR7XH1NEi7Vwgbyg.roa (hash: e+/EujUqMgrunBdFLMp3Y5r4ddJZRAWO/cMR+Mtb/4w=)
2: h2q9_rZm0PV8txh6TfHdCBkulAs.roa (hash: q05w4TZAL571hpUjwgQIi8JE4zKvAGMsaI8J0PpFNXY=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: x5CmJnytNOs2mnoiD5pNwMmtiJtW3VWA5Ewm36t91tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:0f:5d:2a:ae:0b:e1:9f:95:15:0e:08:7c:6e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Sep 26 15:01:13 2026 GMT
Not After : Sep 27 15:01:13 2026 GMT
Subject: CN=60c09a59b7b02f0163a774900c74d3f9d117407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:d0:ff:67:fd:ef:11:d7:2c:c6:41:c3:5a:
e0:b8:f3:8f:5f:5d:a0:db:54:b7:2e:b3:1b:bb:2b:
4e:50:39:cf:9a:51:e3:c4:59:60:36:d5:b8:3d:13:
85:66:0a:24:ff:8d:98:50:47:a4:51:0b:0f:e2:ac:
2b:ff:9f:09:1e:27:81:9d:59:f9:d1:20:65:7b:59:
ec:58:cd:92:56:6f:ff:13:a3:5f:1e:ea:30:98:6f:
82:01:b0:b6:a3:a6:6a:23:05:56:f4:ab:44:cd:33:
cf:85:4d:32:f6:73:89:e8:e2:39:e7:a0:ca:42:fd:
22:bb:30:dd:c4:89:ed:ab:7a:f6:21:8d:7f:5e:28:
e5:ac:72:bd:52:df:97:03:56:7e:7a:4d:ae:25:94:
b2:00:c0:bd:8a:05:43:09:48:4d:da:fb:94:a7:c7:
76:75:cd:89:64:61:ae:e2:ad:0a:9f:c5:61:07:30:
c4:dd:0d:95:d3:ab:64:a4:34:3d:41:9f:e3:d0:59:
06:99:35:0a:15:02:f9:82:5a:34:30:58:91:3b:7c:
3f:2f:f2:69:7a:a5:1a:bf:ab:46:ba:0f:95:b5:3a:
9a:27:e9:28:e8:0d:fd:d8:29:38:09:95:5a:e1:9c:
3f:eb:17:94:9e:a2:d9:c7:6e:b1:18:f9:f6:4a:cf:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C0:9A:59:B7:B0:2F:01:63:A7:74:90:0C:74:D3:F9:D1:17:40:7F
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e3:d5:82:c9:7f:76:d8:c3:a0:a0:fc:e9:1e:d1:ee:bc:ed:
86:16:37:54:ea:a4:da:6c:34:3a:4a:3a:a7:0b:0d:6e:84:70:
54:a3:f7:8a:28:60:47:ef:fb:48:f5:81:ce:cd:10:8b:3c:0f:
4e:97:56:ef:e4:36:05:e3:bf:97:57:8c:7d:e5:d7:72:4c:3c:
f3:7f:c8:bd:75:e7:63:85:56:0a:c4:82:55:91:54:7e:69:6a:
86:a0:c8:26:18:5c:e0:46:a3:6d:38:82:43:0d:89:05:28:3d:
4f:00:b8:9b:fc:ba:99:c2:52:da:98:88:93:64:6f:24:06:91:
79:16:a8:9c:19:4c:01:66:ef:96:c6:12:3d:24:d4:06:e3:8b:
49:cf:8f:71:21:a8:38:f7:86:83:31:65:83:f2:c6:63:ea:2a:
6e:67:fd:28:06:1e:21:77:3f:b3:54:37:46:58:b0:b7:ce:9e:
f1:9b:d8:87:c2:30:64:d6:9c:a7:0d:41:bf:27:f9:73:93:20:
a6:49:ae:4c:ed:b6:21:11:5e:63:f9:0e:9a:a1:ba:eb:5f:a1:
17:ae:bd:d1:b5:08:89:eb:99:fd:fe:e0:dc:11:6b:49:00:1c:
01:91:97:cb:05:cb:7f:01:9b:5a:4b:a6:e2:cf:d2:6c:76:ba:
38:cc:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:53 2026 by rpki-client