Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: J5tn+7sZxFREVlB/z4S6z6LZs0b2/+F8u/78Kks1yag=
Subject key identifier: 16:A9:5F:E7:AD:17:90:8A:64:44:8B:D2:DC:79:DD:20:D6:39:79:C2
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 01A0E1E2984883FC4F01C1A9F051676E4B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 0A53
Signing time: Sun 27 Sep 2026 08:01:58 +0000
Manifest this update: Sun 27 Sep 2026 08:01:58 +0000
Manifest next update: Mon 28 Sep 2026 08:01:58 +0000
Files and hashes: 1: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: mnyal2YdyQh8FJ/W9WF3QCr82OAhWvZLU80WIldfaw4=)
2: uH1OFQK-y6nSA9ln1NEz-DHjkYM.roa (hash: gklS8iQwBkuF3RBvorQ4lbNpw7pGXOz/cK6thzC+bvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:98:48:83:fc:4f:01:c1:a9:f0:51:67:6e:4b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Sep 27 08:01:58 2026 GMT
Not After : Sep 28 08:01:58 2026 GMT
Subject: CN=16a95fe7ad17908a64448bd2dc79dd20d63979c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:29:16:d8:d7:48:59:b8:1b:f1:f1:d8:70:
1c:ae:f3:97:18:53:51:e9:c0:72:14:4b:24:38:5f:
72:e8:26:39:37:87:6c:8c:32:e7:1f:ce:57:a8:a3:
c7:0a:a5:6b:8e:6f:4c:e4:ac:80:0b:15:12:89:9b:
7e:fd:10:b0:5e:c8:ba:46:ef:2b:e4:fe:0e:58:cb:
28:8b:09:c9:62:ea:2a:0b:2a:72:8c:5e:81:6e:5a:
d5:43:e6:87:e9:39:d2:60:b6:e2:5d:56:70:70:7f:
73:3b:b5:f2:8f:0d:a7:91:56:b1:55:e7:27:e5:a9:
e3:be:6c:56:55:0d:5c:f9:9b:11:8e:0c:b1:19:6d:
49:f5:7d:fb:ed:ec:66:25:74:b8:4b:72:77:de:f3:
6a:32:f9:67:1c:2d:f6:e0:db:69:fd:a0:db:87:ea:
6d:a6:bc:ac:d5:48:cd:3e:e8:55:4c:85:06:01:6e:
90:80:67:27:0b:5b:c8:26:9a:30:8c:4e:20:b0:a6:
03:0c:84:95:bd:cb:62:7b:08:11:16:d7:24:a2:6d:
94:8f:95:7f:af:0a:19:5a:47:29:b2:38:e2:d8:dd:
e4:4d:ee:eb:c2:75:09:23:8e:dc:78:df:dc:6f:d0:
02:b9:77:3e:92:55:2c:60:a9:40:e8:54:5c:87:bc:
5f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A9:5F:E7:AD:17:90:8A:64:44:8B:D2:DC:79:DD:20:D6:39:79:C2
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e7:bd:c0:d2:69:39:b6:28:f6:61:26:54:7e:ef:2a:ab:ef:
a4:d4:ff:08:02:07:35:f8:1c:ea:90:ed:89:ea:28:62:74:cb:
d3:4b:d5:0a:67:36:93:13:45:0c:d6:fe:f9:96:d2:db:8e:8a:
b9:25:3a:a0:cd:8e:bf:91:da:17:bb:21:9a:4f:e6:63:0b:61:
3e:fc:d4:9c:15:36:86:02:51:e7:57:94:44:2a:ff:b0:37:83:
be:21:d4:a7:7a:8e:50:64:c5:ef:0b:3a:7a:c3:f0:ee:c0:36:
58:d5:e0:d2:d3:5a:e2:75:96:3c:f6:64:18:3c:62:33:d9:dc:
3f:95:45:aa:cf:c4:b3:9e:45:e7:78:0b:ef:dc:bf:f0:f9:45:
5a:b4:6d:5f:8b:e1:93:96:23:21:16:d7:4f:4d:f2:84:55:8f:
00:c2:9a:94:5d:cf:a6:a1:93:9a:86:a1:f0:af:d7:b9:d0:80:
e1:7b:c1:d8:e6:b1:22:44:e3:08:4e:eb:84:ca:f4:e7:92:e7:
cb:22:76:14:a3:9d:a3:0c:7d:2d:93:10:24:22:6e:ad:f0:77:
e2:f1:a4:3e:2a:70:cc:5a:62:22:f6:0f:d5:df:40:0c:0a:f7:
51:87:2a:dc:f0:ca:cb:02:07:c7:9d:b1:39:9a:73:0d:ef:a6:
36:bd:e8:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDh4phIg/xPAcGp8FFnbkufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTAyZjczNTA5YmRlMzVkOTVkMTg1MTgwM2UxZjAwODI5
ZWI3MTgwHhcNMjYwOTI3MDgwMTU4WhcNMjYwOTI4MDgwMTU4WjAzMTEwLwYDVQQD
EygxNmE5NWZlN2FkMTc5MDhhNjQ0NDhiZDJkYzc5ZGQyMGQ2Mzk3OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyMpFtjXSFm4G/Hx2HAcrvOXGFNR
6cByFEskOF9y6CY5N4dsjDLnH85XqKPHCqVrjm9M5KyACxUSiZt+/RCwXsi6Ru8r
5P4OWMsoiwnJYuoqCypyjF6BblrVQ+aH6TnSYLbiXVZwcH9zO7Xyjw2nkVaxVecn
5anjvmxWVQ1c+ZsRjgyxGW1J9X377exmJXS4S3J33vNqMvlnHC324Ntp/aDbh+pt
prys1UjNPuhVTIUGAW6QgGcnC1vIJpowjE4gsKYDDISVvctiewgRFtckom2Uj5V/
rwoZWkcpsjji2N3kTe7rwnUJI47ceN/cb9ACuXc+klUsYKlA6FRch7xfHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBapX+etF5CKZESL0tx53SDWOXnCMB8GA1UdIwQY
MBaAFFbgL3NQm9412V0YUYA+HwCCnrcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgt
ZmM5NThlOGQ0OGMyLzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDBjMDctZTk3Mi00ZDg4LTk1ZTgtZmM5NThlOGQ0OGMy
LzEvVnVBdmMxQ2IzalhaWFJoUmdENGZBSUtldHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu+e9wNJp
ObYo9mEmVH7vKqvvpNT/CAIHNfgc6pDtieooYnTL00vVCmc2kxNFDNb++ZbS246K
uSU6oM2Ov5HaF7shmk/mYwthPvzUnBU2hgJR51eURCr/sDeDviHUp3qOUGTF7ws6
esPw7sA2WNXg0tNa4nWWPPZkGDxiM9ncP5VFqs/Es55F53gL79y/8PlFWrRtX4vh
k5YjIRbXT03yhFWPAMKalF3PpqGTmoah8K/XudCA4XvB2OaxIkTjCE7rhMr055Ln
yyJ2FKOdowx9LZMQJCJurfB34vGkPipwzFpiIvYP1d9ADAr3UYcq3PDKywIHx52x
OZpzDe+mNr3o1A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:25:56 2026 by rpki-client