Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: wJzh2mjXemhqX96uSJaakaC/vmzYWF6ujnyDVZ2AcqA=
Subject key identifier: 03:1C:B4:03:90:77:D4:29:41:46:00:B4:33:AC:5D:4F:70:C6:1F:91
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 01A135C7D42B7EE6A328B5F15151A97AC1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 1AA7
Signing time: Tue 13 Oct 2026 15:00:50 +0000
Manifest this update: Tue 13 Oct 2026 15:00:50 +0000
Manifest next update: Wed 14 Oct 2026 15:00:50 +0000
Files and hashes: 1: j-l6LKHSFBzRUC4zI3RrMzCHJGg.roa (hash: TldycA22tY7EvqsLvcs1YaipegGydJ+DMucdg1RkrFY=)
2: m6r9o3EuSXJct7DbkrfCUu4fQnA.roa (hash: 0qwKGFMutfPG5lJWTCMJbkMgVvm8/EpA/jxVo+nSsVU=)
3: sq38IYtkwvLbxoqDW_7wpbQZMOY.roa (hash: 9FNCpi3tI2psX/axIbavUXntYIPjv5HbB/DRF/Sxvrg=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: 6epukakGF96T5079H3CY/2r1WP7aaKeG9fsq/0CRpmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c7:d4:2b:7e:e6:a3:28:b5:f1:51:51:a9:7a:c1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Oct 13 15:00:50 2026 GMT
Not After : Oct 14 15:00:50 2026 GMT
Subject: CN=031cb4039077d429414600b433ac5d4f70c61f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:76:d5:d6:c5:85:58:50:69:9c:48:45:37:
08:c4:76:4c:b5:d7:87:1d:80:e4:c1:3c:49:ce:f6:
f3:7c:cf:49:2d:46:cb:9e:90:9d:e7:a7:5b:89:a5:
d2:89:52:82:9b:8a:d5:61:36:fc:22:e4:91:c8:9a:
4f:8f:2b:2b:1d:c9:4f:27:27:eb:03:1a:ba:43:15:
56:e4:40:f4:b0:eb:55:17:3b:3a:2d:6a:1f:cd:0a:
90:7d:c6:65:4d:8c:c6:67:22:e8:0d:ab:8b:e6:db:
f3:37:88:52:73:d5:d1:f9:3b:b7:db:61:57:ac:60:
65:31:78:47:22:5c:3f:2f:ad:c4:54:dc:e1:75:4c:
68:c1:55:bb:3c:6b:b2:ff:08:1d:02:5b:fd:de:5b:
1f:34:cf:88:7f:77:0a:1d:95:92:ca:06:58:95:72:
d4:1e:05:a2:c0:37:c2:e4:78:7e:c9:c4:2a:6e:9d:
31:fa:36:34:45:e2:12:82:f8:9d:47:be:1a:51:4f:
c1:98:41:e8:71:7c:e0:37:2c:2f:f2:95:65:fd:66:
41:cb:9e:16:d9:e7:2e:f9:ed:45:51:6f:df:1c:05:
61:ff:91:3e:fe:9d:fb:2a:e6:91:1a:4e:01:81:cf:
35:76:f7:7d:f7:96:53:68:b9:53:cc:d9:44:05:02:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1C:B4:03:90:77:D4:29:41:46:00:B4:33:AC:5D:4F:70:C6:1F:91
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d9:fe:af:b8:ef:db:61:30:67:4d:34:c1:26:6b:fb:56:ec:
45:ae:9e:28:cb:6c:6e:44:90:b8:8f:68:a7:d0:f2:7e:1c:15:
5f:4b:d7:c2:dd:45:9c:eb:97:21:e7:65:1d:68:bb:8e:df:44:
92:eb:62:3b:cf:dd:ae:5b:32:37:d3:f3:ef:5f:8c:4b:f8:30:
0e:ed:a7:26:c5:0d:6b:85:7b:58:15:69:57:41:71:88:70:b4:
dd:28:d9:01:6f:c1:7d:32:98:a6:09:29:31:b1:9c:0d:65:aa:
af:fb:2c:a3:55:89:6d:b9:35:5d:b8:30:e3:b6:87:81:82:df:
ac:44:ab:da:00:7e:fe:75:f0:9d:99:c3:b2:20:ea:95:27:e2:
3a:52:e1:8f:96:95:a3:24:68:53:31:86:80:c0:7f:49:f1:07:
0e:56:66:0d:cb:9a:53:6e:84:2c:ab:23:d7:a7:93:cd:fe:56:
6f:75:47:4b:08:8e:f5:48:d5:cc:91:e2:96:68:58:51:05:24:
54:77:a7:39:81:fc:0c:1d:4c:49:5b:7c:b4:3d:0c:c7:b8:17:
32:1e:dc:26:12:ad:ba:b6:90:7d:db:25:f0:0c:bc:23:e0:02:
e9:51:54:c2:00:ba:10:35:3f:9d:5e:9c:7a:b2:fa:b2:db:15:
ed:1f:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:46:26 2026 by rpki-client