Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier: +GDFxSa0+PfUm17Fx3Ah6tlAZAqnkkMprL9a1q6xlk0=
Subject key identifier: FE:82:7C:F0:D4:8D:CE:49:EB:76:F8:9B:DB:81:E0:AC:89:11:A2:FA
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial: 01A0CF36976A9DDC6C9A4042018D1BEBC88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 17:00:56 +0000
Manifest this update: Wed 23 Sep 2026 17:00:56 +0000
Manifest next update: Thu 24 Sep 2026 17:00:56 +0000
Files and hashes: 1: CzohGtSLcmDpSrKXCjf2wQpuklI.roa (hash: oSgq7hJ4clz8JZa9p9/cu2QQ6c0SU2FQe0lIPhhVo4k=)
2: MCBjLeIbX3O5HTvShautKhz-FtY.asa (hash: BCCcq5YxV8mIaSr5yq810yZ+7NbSDQZa8OD5V47sB80=)
3: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: dj7qI0w497Up/Gya+qUFUM0/vvfb35BB/t4DHnN2TEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:97:6a:9d:dc:6c:9a:40:42:01:8d:1b:eb:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Validity
Not Before: Sep 23 17:00:56 2026 GMT
Not After : Sep 24 17:00:56 2026 GMT
Subject: CN=fe827cf0d48dce49eb76f89bdb81e0ac8911a2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:91:f7:71:49:48:48:5f:40:26:6a:61:9f:8d:
36:a8:7e:46:3b:aa:c7:de:f4:d0:7a:2e:b6:ac:b5:
8d:27:6d:09:4b:e2:df:a3:77:5f:86:50:5f:fd:7a:
eb:d0:3a:56:52:84:c4:d9:bd:9a:19:23:d1:a9:fb:
61:83:f2:95:09:3a:3c:30:9a:c6:33:cc:e9:dc:0b:
ae:73:05:7f:7e:fa:20:3b:f3:ee:f6:0b:75:5f:c8:
6c:c0:2e:2d:cc:30:a2:30:d6:7b:c6:f8:f8:4e:25:
eb:72:ec:fc:a5:f7:fb:2e:d7:9c:05:e6:2a:d4:ad:
e3:50:db:30:4d:cb:fe:e2:a2:c0:1d:48:13:15:df:
c9:6e:0f:e8:c1:60:2d:da:91:aa:6e:0d:67:09:87:
5b:b7:4b:0d:81:9f:4c:26:e0:24:78:a9:c2:d1:24:
e8:c4:c3:b5:0e:2e:c2:aa:71:4f:f0:40:06:ab:da:
4f:57:0c:37:df:5f:3e:68:ee:1e:cc:8d:4b:9b:5b:
3d:31:6d:87:f8:04:03:c6:51:7c:e9:be:a4:8a:5a:
b6:63:dc:2c:1d:3f:41:88:25:7b:95:d5:f0:16:6d:
52:34:b8:77:60:a1:9d:f9:26:4c:42:fc:a6:30:7e:
d6:52:86:d5:6d:48:76:b2:04:fa:5c:24:35:c3:63:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:7C:F0:D4:8D:CE:49:EB:76:F8:9B:DB:81:E0:AC:89:11:A2:FA
X509v3 Authority Key Identifier:
keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:94:3f:1d:40:f4:93:41:25:03:be:b3:86:e3:6c:fb:6a:
eb:05:11:22:80:9c:4e:be:8d:97:2f:da:1e:18:e8:39:06:36:
bf:d1:7e:ec:02:c8:3d:e9:77:aa:eb:c9:7b:62:4e:51:3e:30:
4d:61:28:98:2f:f2:52:a4:5a:46:4f:6c:c3:44:a8:ac:55:47:
f8:ca:35:ee:96:cb:30:8f:36:c0:63:03:9f:13:3f:c2:25:7f:
38:a0:a8:87:65:a1:13:a7:2e:96:a5:00:65:86:9d:e8:e9:ed:
8c:9c:d1:97:7f:a5:9b:d5:6a:2f:52:2e:52:8f:8b:0b:06:0a:
f0:3c:1e:fe:00:f4:44:64:b6:fc:94:de:56:27:15:b4:55:5b:
09:e4:97:fd:f2:95:8b:56:33:19:c7:65:cb:4b:70:3c:fe:d7:
ec:e7:8b:60:70:9b:96:f6:c0:ce:d5:5f:62:e5:01:e7:ce:a8:
1c:bc:2b:d2:e7:34:e9:8b:dd:67:4c:da:99:d6:8e:90:a9:4d:
d9:2d:7f:38:30:1a:5e:2d:a7:ca:16:81:58:7a:37:e1:1d:87:
35:c5:90:24:4e:00:ae:a9:77:27:a7:8d:c2:23:bc:43:75:d6:
93:d8:1c:a5:2a:ce:8e:65:8f:f6:4d:40:41:a7:db:f1:5f:23:
c3:e0:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:09 2026 by rpki-client