Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier: IJyDgZXIwPeWjhDum7YbNMHGxICvvApaHHXuASbJsDo=
Subject key identifier: 5C:1E:01:D3:1E:F0:BA:1C:CE:B0:C5:29:40:3F:9D:65:75:71:8B:5D
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial: 01A0DBA8B01DFE177D925CE4815298C3DF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number: 0CDC
Signing time: Sat 26 Sep 2026 03:01:00 +0000
Manifest this update: Sat 26 Sep 2026 03:01:00 +0000
Manifest next update: Sun 27 Sep 2026 03:01:00 +0000
Files and hashes: 1: CMYGKasLmsjGblCK6IVsYcoAi1Y.roa (hash: 5I3la7dVRWMx/gZhUW1jrF5r1NdUNZ+7mT0gXM18zsQ=)
2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: 9pMxa4sTFcUmeM7AHUXjW2Lx3a1NrREhipVM5WqjKJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:b0:1d:fe:17:7d:92:5c:e4:81:52:98:c3:df:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Validity
Not Before: Sep 26 03:01:00 2026 GMT
Not After : Sep 27 03:01:00 2026 GMT
Subject: CN=5c1e01d31ef0ba1cceb0c529403f9d6575718b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d2:b7:b6:c2:26:a7:94:dc:cd:7a:50:32:36:
9c:cf:0a:ee:b0:64:13:5c:d8:66:98:28:0e:ac:aa:
e4:1a:d7:d9:18:07:b2:50:08:d8:0a:04:12:a0:49:
ad:98:83:4e:db:e8:8f:c4:f2:a5:1c:3b:b1:14:a5:
65:b4:27:a9:94:ef:c3:c6:32:6b:7c:93:a5:55:a6:
93:a3:cd:7d:e2:57:21:41:b0:1e:11:52:80:c6:34:
c7:20:ed:cb:18:4a:14:b1:bb:59:e3:6a:f3:4c:94:
1c:85:ce:48:6e:ca:77:16:e6:68:11:8a:d6:8b:e9:
c4:62:2a:0e:df:11:af:09:db:21:40:0c:88:b1:da:
b4:05:83:15:ae:34:62:fc:3c:c6:8a:05:8c:21:aa:
25:32:ed:fa:e7:fb:ff:0f:82:08:b4:4c:dc:be:1e:
d9:06:2f:f3:4a:46:82:af:81:d0:69:97:32:3c:fc:
ec:56:7e:52:e0:32:6d:88:03:7d:ee:c9:12:ef:c9:
c8:ac:67:4a:1e:ad:6f:58:e7:53:88:51:fa:dc:4a:
f7:b0:cf:85:a3:7e:bc:ea:bd:46:83:ac:2a:19:aa:
7e:0a:7b:0e:a2:8f:32:6c:73:ba:07:c4:a6:28:6f:
11:8d:3e:57:ef:8e:e7:12:8c:60:3c:45:7b:c3:87:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:01:D3:1E:F0:BA:1C:CE:B0:C5:29:40:3F:9D:65:75:71:8B:5D
X509v3 Authority Key Identifier:
keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:ab:e1:b5:cb:b9:c2:f8:ce:a0:91:dd:6c:c7:e5:97:dd:
07:f3:d3:64:71:06:02:ba:53:42:27:3d:63:db:e9:50:28:cc:
0f:c3:43:9f:8c:ac:9e:77:e0:e0:57:c9:e4:e0:09:94:5f:41:
7e:fd:96:3f:eb:6f:7a:7f:8b:eb:08:36:a5:5a:35:d3:2a:4e:
4f:b9:e7:c0:ce:6a:65:fb:6f:bb:b5:d5:53:b5:53:98:b7:fe:
4f:24:1f:d0:55:ba:6c:19:e3:3f:15:73:ff:2d:ac:5b:cf:ad:
02:b5:b8:03:49:6e:20:2e:9e:aa:fb:86:22:37:9c:29:b5:d1:
82:d3:42:87:9c:49:2f:86:a7:22:0e:62:e6:7c:41:21:99:93:
1a:22:ef:04:c8:58:20:4e:b9:c8:c4:f7:6d:d5:db:83:ee:ca:
54:20:98:a9:d7:f4:2c:65:5f:6a:a8:77:4b:ce:aa:09:76:79:
cd:c0:11:bf:c4:a9:04:2c:8e:29:26:81:6f:c6:4f:c7:7c:1a:
1b:87:6e:fe:b7:6c:83:06:02:ec:e1:96:5f:fb:5d:79:39:3a:
80:1e:e1:ac:b7:e2:a4:9f:8e:9b:5d:7f:7e:b6:ee:b0:da:59:
89:1b:db:6f:f1:02:61:a1:f9:b3:9b:a0:c2:65:eb:36:88:29:
ea:04:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:44:15 2026 by rpki-client