Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
File: vSUqdclhrTOP2RFH1GHdiz0gz1E.mft (raw, json)
Hash identifier: rEDA3SRe9KYXucexwft4qocwWEEpmjIrMEk81dz/hfQ=
Subject key identifier: 2C:D1:19:75:0C:0A:11:DC:C9:01:00:3F:96:04:C9:9A:BC:9E:4A:A5
Authority key identifier: BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
Certificate issuer: /CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Certificate serial: 01A1DD5D9B6F04A844624EE758CC3B4C4295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 04:01:01 +0000
Manifest this update: Sun 15 Nov 2026 04:01:01 +0000
Manifest next update: Mon 16 Nov 2026 04:01:01 +0000
Files and hashes: 1: GJIEMFvCXOGxwMSx43guQFRPh8M.roa (hash: oeNhpu1q2YVhaNJfdDI1KC0StxYU+WfFhgtlfHrXwlM=)
2: N7xp5A4irg8DKzqXWFOFM39t3u8.roa (hash: qInCZHWCOK/PbCu1c+rmFecdDUSwXaQ9cyfT/I5HPdo=)
3: hTMMYpMuqGPoG2J1CKhmES38yHA.roa (hash: rvTmRXH6/6D95X7iHQWTgs6oiDZA0aQ3QNoQMnR5ayw=)
4: vSUqdclhrTOP2RFH1GHdiz0gz1E.crl (hash: Y1jHFTB/1hZDJSUBw1WQHq1y7OqynwZSwejuMrpzVxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:9b:6f:04:a8:44:62:4e:e7:58:cc:3b:4c:42:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd252a75c961ad338fd91147d461dd8b3d20cf51
Validity
Not Before: Nov 15 04:01:01 2026 GMT
Not After : Nov 16 04:01:01 2026 GMT
Subject: CN=2cd119750c0a11dcc901003f9604c99abc9e4aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:9c:8f:5a:7c:e2:28:41:9c:05:88:45:08:
41:48:1a:9c:49:51:fc:d1:c4:94:79:17:0a:0e:32:
1d:f3:62:5f:08:51:e6:c1:ca:99:32:31:17:e4:49:
55:78:36:ca:4d:79:e8:aa:06:ed:e3:7f:a2:36:40:
87:00:94:fc:e8:da:02:07:ac:93:8f:35:86:8a:62:
f1:50:cb:58:38:bf:9e:49:5b:46:8a:36:d2:7d:b5:
68:d8:51:6c:de:22:90:da:11:7b:58:b6:53:36:66:
e4:fc:b9:e8:60:17:bd:13:d3:e2:12:2c:a3:2d:76:
6c:e6:2a:8b:99:b1:be:2b:49:61:5b:03:95:df:a1:
a4:1f:b4:36:1a:ba:1e:ae:09:d2:4e:09:67:f9:d2:
a5:69:8c:5c:26:10:59:07:eb:3b:e5:4c:59:be:95:
db:a4:c6:41:28:72:ca:37:06:b7:cc:37:16:2a:5a:
69:95:8b:fe:8d:5b:24:c7:84:26:01:63:7c:e3:c1:
51:81:a3:69:99:9b:2e:1b:d5:ce:f2:e9:6e:ba:a4:
51:28:36:e9:77:2f:aa:80:78:3a:65:87:ff:c1:11:
08:bf:fe:4f:1b:3c:26:fd:3e:68:3f:2d:d6:b1:19:
bf:61:2e:29:9e:82:60:8d:6d:00:bb:50:1f:01:21:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D1:19:75:0C:0A:11:DC:C9:01:00:3F:96:04:C9:9A:BC:9E:4A:A5
X509v3 Authority Key Identifier:
keyid:BD:25:2A:75:C9:61:AD:33:8F:D9:11:47:D4:61:DD:8B:3D:20:CF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSUqdclhrTOP2RFH1GHdiz0gz1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1c70e-226a-4781-b662-741ab92997d0/1/vSUqdclhrTOP2RFH1GHdiz0gz1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:73:fe:4b:58:1f:39:13:ea:3c:80:7b:5b:dd:3e:e9:20:
3d:91:db:81:f5:ee:72:77:90:1f:01:44:83:20:f4:6e:f5:c2:
22:7c:21:7a:56:74:5a:7e:c5:bf:9a:1b:99:32:17:0c:e0:24:
36:5c:89:7a:70:08:ca:40:bc:f0:44:73:bf:c3:6f:a1:bf:b3:
0f:83:53:18:47:d0:0d:32:b9:f0:ce:8a:e2:58:3f:eb:8b:fb:
4b:1a:87:1b:6c:0f:90:4f:90:77:76:8a:2f:5a:a4:ed:b6:f0:
2a:9c:b2:02:59:cd:2f:74:f5:12:96:8e:a6:e6:c9:ec:b8:55:
a7:35:37:e6:7b:41:f5:9d:80:7a:2d:84:72:c2:f5:c3:c3:25:
0f:d7:3a:10:68:01:d9:12:c1:2e:32:08:e1:f7:c4:47:82:5d:
49:d7:13:30:22:4a:61:6e:8b:ba:75:c7:b4:b8:04:09:7a:85:
04:19:b9:8e:db:6b:f9:77:f9:be:8c:a0:7b:85:30:fc:ca:a1:
4d:ad:39:de:bf:33:81:91:87:63:5c:a0:63:ca:27:97:f6:20:
ba:b3:76:bd:11:fb:f4:47:23:00:95:a6:3a:7e:c2:27:a8:f6:
fe:24:b3:41:a7:a7:18:de:cf:00:e4:db:7a:1c:8f:4f:f8:bd:
4e:43:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:29:12 2026 by rpki-client