Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
File: vddoJJ1zZYBx-TRWA5OaudYgw1s.mft (raw, json)
Hash identifier: IQ4k9Yu32LGfU689D6wdNpOxW9qmyWXix3N67/HNAlQ=
Subject key identifier: 6B:C7:8C:FB:4C:5F:B7:E2:43:03:2E:68:0D:FD:C8:05:48:C0:7A:CF
Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b
Certificate serial: 01A11229943FFAB3217708E1404756E4CFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
Manifest number: 0368
Signing time: Tue 06 Oct 2026 17:01:17 +0000
Manifest this update: Tue 06 Oct 2026 17:01:17 +0000
Manifest next update: Wed 07 Oct 2026 17:01:17 +0000
Files and hashes: 1: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (hash: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg=)
2: vddoJJ1zZYBx-TRWA5OaudYgw1s.crl (hash: c2ner9/qQN4Ep9N9ET5ayK6SS2BsUbD5xD3NPuV8qdw=)
3: yFX62ci1qBUDucLwJ8wtZh6slII.roa (hash: jSh0LUqy7JqqicLthv+W+VrwTZt3JtqwoMS9ylaeVMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:94:3f:fa:b3:21:77:08:e1:40:47:56:e4:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b
Validity
Not Before: Oct 6 17:01:17 2026 GMT
Not After : Oct 7 17:01:17 2026 GMT
Subject: CN=6bc78cfb4c5fb7e243032e680dfdc80548c07acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:7e:95:c8:88:7f:52:c9:af:7b:7b:58:fb:
50:41:fc:6e:64:f4:c7:e5:22:52:23:2d:21:68:59:
51:71:19:b9:f7:a4:08:b5:7d:0a:0f:c9:5b:56:21:
f1:2d:57:b4:22:be:b4:cc:17:cc:a1:15:df:78:af:
89:ce:6c:0a:29:c5:48:b9:c6:e3:04:d9:93:4b:30:
59:f4:aa:94:01:be:67:3f:41:93:c4:df:e9:e2:88:
ba:e3:67:c2:c1:f9:43:fb:ee:1f:c6:14:b3:4d:2c:
bd:19:4b:42:98:e3:c5:2b:59:2c:c9:50:b9:9d:9e:
45:ca:24:7e:53:dd:e3:12:df:6f:77:15:1e:b2:97:
26:83:14:4e:27:55:c0:2b:09:97:0a:33:42:86:41:
6c:0e:ea:63:18:4f:f7:9d:ab:01:64:1e:44:06:47:
57:e6:e9:73:56:b8:45:35:c6:ef:3f:c2:ef:a3:e4:
3e:0a:2d:6d:c4:bc:f3:8a:94:5d:41:a7:35:f8:98:
98:a6:70:e8:9f:cd:3e:bd:82:5e:8f:29:7b:ee:61:
03:46:51:01:b7:e7:c7:29:d4:1e:b0:98:3f:1b:8f:
27:44:62:24:72:e0:42:77:7d:ea:28:c1:32:b4:6a:
41:43:3e:38:1f:be:3d:0a:32:8c:6d:45:41:4c:d8:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:8C:FB:4C:5F:B7:E2:43:03:2E:68:0D:FD:C8:05:48:C0:7A:CF
X509v3 Authority Key Identifier:
keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:2a:77:8d:8e:c1:86:59:a2:75:77:80:c1:09:3f:ea:40:
dc:a7:2b:d8:81:98:b4:ba:8e:69:77:1d:b1:90:3e:7b:25:11:
c9:57:bb:9f:5f:24:40:ff:d6:ec:21:aa:63:4f:9e:29:c4:7b:
ee:ba:30:90:0c:4b:af:59:df:59:93:4b:cb:f8:9e:83:8b:c8:
5c:23:b3:18:e0:f2:93:7d:f6:50:c2:49:3c:92:c1:93:47:61:
53:06:bc:2f:4e:fd:2e:e3:ce:7d:7f:d2:df:f4:f4:2f:49:8f:
72:5c:20:66:92:29:ff:b8:99:43:65:db:95:90:47:3e:02:6d:
90:af:5a:62:a8:d8:e5:2b:1d:38:ec:fc:b6:1b:aa:15:3f:9c:
92:70:bb:b2:0a:13:40:cf:c8:24:ae:0e:f1:80:9b:38:42:84:
6b:43:79:8e:67:9d:05:cb:8e:67:e1:b8:5a:4e:f4:2c:e1:00:
87:a9:c7:f9:e3:3b:9d:51:cc:f5:1c:21:dc:b0:aa:41:4b:75:
68:62:23:02:00:2b:a5:ca:f9:20:c6:35:60:72:9c:06:d0:9a:
e6:b7:e8:4a:e7:5d:75:22:00:cd:64:54:5f:fa:9f:ab:d0:38:
c0:d3:a5:65:5f:05:f2:c7:29:86:35:7c:64:19:0b:41:7c:86:
5c:43:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:12:51 2026 by rpki-client